Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
File:                     d65fef8f-4cd2-4778-9158-f56f30242812.mft (raw, json)
Hash identifier:          q3BJros7b1bOdkkfyHZ6jwQpOPjg4LZXSoipDNOKeh4=
Subject key identifier:   4D:63:CF:7B:14:B3:A8:11:35:0F:CE:DC:88:8E:75:66:E1:4B:C0:13
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584980C7F8704C079606A97C5600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
Manifest number:          010D0C9F432858447F75C4284E56BACF526229AE
Signing time:             Sat 12 Apr 2025 16:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 16:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 16:00:00 +0000
Files and hashes:         1: 115b66b8-327b-3150-a712-f352fb1d0e2a.roa (hash: QX2r+LZ36qKJ1qrKcOSLCOvqIAwsTt4krZqrzob8CcM=)
                          2: 1439153d-c93d-3515-adae-1d4468d668f3.roa (hash: NxAItymHNPIoey6vI7NsM1Vy8lJ/0gQdGg7jJQOI0sI=)
                          3: 149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa (hash: 8aaDXU6uWcl/OGW47q95bELK+3fO+TvIF90f7v1lQP0=)
                          4: 1de1fb3f-1157-396f-898a-42e29591f7a1.roa (hash: TviZia/GVuOYS5TExrahZV9n3YPxaqUos2TDgaYli20=)
                          5: 22131742-375f-3ede-807f-b0f8c1fe30b1.roa (hash: Fa94hwGagJbDgZGex6+G5w6VtE3RywGcPgXARZCBO3Y=)
                          6: 35901c33-80f4-3e97-9156-237d061a1c8a.roa (hash: P3yX5yapjnjCELNhhlNetGfUcC4rJbYMZI1VzGO7gAM=)
                          7: 66c487a4-5908-3ed4-bdfd-82dbeed62c2a.roa (hash: 5heDuo0zdvmyciKofbnR/uyryCI3yI8FVHo5pkOxUtw=)
                          8: 6cf38ad1-70e5-3941-ad3e-d9ac79bb3b71.roa (hash: pZksvJoJXp2qC82mGFW2Nq5oOIEwYcHDjd8HS7uz+6c=)
                          9: 70024f6c-997e-38fe-a1b0-71e9db6be67e.roa (hash: Msqb02/hYbcFi/S71wEZecUDjUKC2XnO8mTBQ0tNO1A=)
                          10: 70226b31-5a81-344d-af5a-5f010e3fea64.roa (hash: kPjf9VA3/l435oB/YzbEmL2rCiVGXaaJu28tZqGIB+I=)
                          11: 729cef94-85c1-3f6b-aae8-927a0db22d32.roa (hash: BN2ZTbmbpIR+BS8LBVQMkFwplSqBQEtp6YHgUF76+ko=)
                          12: 78bbf305-242c-321a-b929-a39338697761.roa (hash: NebXeVx35GoK40VS3HxfO6O9spRjpNcuv4IOW6hx5+E=)
                          13: 9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa (hash: UurTtTDd/HODbB/zWG72Bn0dlH/1rAdNEAUWkoa6rLU=)
                          14: a5169fba-de21-3d20-b236-278f8f4289d1.roa (hash: CaUecUE69Iuto6Yc7y1ooPeoA6DGb/vdSnbiccBcYGY=)
                          15: af72ac96-389c-3eb8-a84c-7f22db7a7533.roa (hash: eHtQ6dB54IiEyOj90WenPytBZwMBPrvMYI0b56CGAaE=)
                          16: c1edb6d0-f1f7-3c46-a32f-e58478e152d8.roa (hash: fT7qbVWX+Go1kvOtIgHMzd7haEYOjo2Q7ZxiWzIDMZQ=)
                          17: c8471768-4c5c-39fd-a405-3ccc4bc38fd8.roa (hash: AjmSNhen83v2/btSkfOy1IGm5ZokfW3O830DlzDb0Sc=)
                          18: cd89b1c9-2750-3d92-95f8-b1676b079a58.roa (hash: nZ7NQDw2S8+gmtXUuRlr2RSTghz1T4K36AJHVFfucM8=)
                          19: ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa (hash: II2vj7t3qXFEaJF/t5i/ZG3O/36L3+BGR+WaF6CYRmU=)
                          20: d65fef8f-4cd2-4778-9158-f56f30242812.crl (hash: LC0y9QCA+DQnpS4PHQ5T+w+EudvZ2KuxPq+sq5NQtfE=)
                          21: e14ef742-6259-32cc-bb7d-6779c8661303.roa (hash: /SyvgarTDQyomWcFzcdQqsjRGlu+LTBxoGpA3LkLshk=)
                          22: fd6bcfdd-10b5-3d10-abe2-8a320c7d3fe7.roa (hash: c3StP4wDjeM+DNZkFsHM39VYJqWql3KNjSFaBWqXr14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:c7:f8:70:4c:07:96:06:a9:7c:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Apr 12 16:00:07 2025 GMT
            Not After : Apr 14 16:00:00 2025 GMT
        Subject: CN=d0708ac6-6308-43f7-b8df-61397a840f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:cf:a0:be:c5:cc:4b:89:48:7e:15:20:26:
                    7e:34:cc:30:bd:aa:03:f3:36:8d:79:79:b9:8b:12:
                    0b:1d:99:a5:c1:10:55:87:f6:5b:c0:93:20:fc:49:
                    79:4c:d9:2e:31:df:8d:aa:3e:99:ee:05:ee:df:b0:
                    31:84:0d:26:52:e5:1a:b2:c5:3d:8e:5d:8f:64:74:
                    60:a7:51:fa:d2:5d:f0:21:84:48:55:6b:27:5e:36:
                    81:a6:1e:44:74:58:b6:2f:ec:2b:22:2a:14:0d:14:
                    52:d1:66:ce:c6:57:92:3e:09:34:ef:67:77:c6:08:
                    fe:cc:32:67:15:06:5a:14:d9:af:da:d1:6f:a0:11:
                    4c:4b:3c:c4:1c:7d:55:ba:31:86:26:b3:d2:f7:0c:
                    7f:48:3f:da:e1:c0:19:90:e5:74:dd:af:2c:c8:05:
                    d0:19:69:f5:50:ae:d0:04:2a:c3:87:5d:5d:05:16:
                    8b:f6:43:e6:3c:92:c4:a9:de:ac:8d:16:1a:8a:59:
                    dd:eb:78:e6:8e:8a:86:29:fd:01:a2:c2:95:9e:2d:
                    88:1b:ea:2e:a9:a2:13:bf:4c:52:2d:06:d8:fa:01:
                    f1:37:53:f0:7c:ae:0d:90:ef:74:6e:3e:2d:4c:1e:
                    b3:0f:0f:82:b5:93:0e:6b:4b:92:1f:43:55:d0:a9:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:CF:7B:14:B3:A8:11:35:0F:CE:DC:88:8E:75:66:E1:4B:C0:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:11:44:cb:da:e5:b1:3f:7e:cc:b1:d5:95:fe:fe:69:ba:e4:
         b8:47:70:76:3f:16:78:d4:d1:01:25:f2:e7:e9:b6:f8:98:71:
         5f:65:8d:66:ca:4e:88:e1:3e:e6:ae:f1:20:82:c5:11:0f:cf:
         8b:b7:a9:ac:17:60:e3:a5:7b:74:6f:37:03:b2:aa:66:f9:f1:
         37:23:d6:b8:a5:06:e3:0a:ca:7c:e2:c7:bc:b1:a2:da:dc:a5:
         f6:6c:08:96:a5:8e:6f:ef:33:51:8f:f3:f7:e8:93:7b:12:7d:
         fd:42:45:cb:97:65:d4:53:27:97:3f:f6:06:d0:18:32:12:d5:
         db:25:d5:05:cc:0f:ff:8a:3e:ac:48:01:1d:b3:d9:a5:b5:87:
         4c:00:45:56:d2:56:c2:75:5f:08:c7:bf:8d:7d:b6:03:a2:85:
         dc:c1:4a:f3:90:44:b3:f0:ac:83:60:f8:2a:c3:c9:7c:78:5b:
         8d:56:54:2f:21:fd:83:c4:75:c9:fa:3e:0a:88:98:cb:a9:f6:
         d4:4e:cd:d8:4a:15:47:8a:d7:3c:ee:78:b7:21:b1:62:49:75:
         4d:28:d6:8f:36:62:a0:a6:50:4c:be:d2:47:84:29:3a:22:fc:
         f2:0b:f7:59:22:77:20:b8:fd:0a:ae:8a:85:c3:cb:46:55:86:
         fc:69:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----