Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft
File:                     324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json)
Hash identifier:          PME+VyOHhgmOG2dWgsolcLdXR7LWuzlU6zDCWCwafRI=
Subject key identifier:   9F:84:0F:D1:5E:8B:7C:12:2A:02:A2:D7:E7:B3:8C:EB:17:D3:12:ED
Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84
Certificate issuer:       /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e
Certificate serial:       010D0C9F43285849815CDCB97384E6A0462D0580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft
Manifest number:          010D0C9F43285847EC999102C00F9169FD079933
Signing time:             Sat 12 Apr 2025 21:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 21:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 21:00:00 +0000
Files and hashes:         1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: 4ObANqbsER/Ip9alLszcYrbtMkau+9llra9MSFD9tcs=)
                          2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: GQU/9mtoXVNjl7waA5V4YRSxntbnGlm2nKNzazv7kdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:5c:dc:b9:73:84:e6:a0:46:2d:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e
        Validity
            Not Before: Apr 12 21:00:07 2025 GMT
            Not After : Apr 14 21:00:00 2025 GMT
        Subject: CN=aabc769c-3536-42b4-839f-07dbdc50acec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:7f:2c:8e:cd:e4:2a:23:b0:1c:3c:26:54:
                    db:08:ec:0a:df:73:6e:7f:24:81:64:c3:05:ba:1a:
                    59:9b:f3:c5:01:b6:35:21:1b:a4:d7:2b:5b:5d:50:
                    f6:c0:02:24:d8:f5:8d:54:45:23:f1:3a:8c:a7:a2:
                    1e:b0:90:38:68:82:b3:88:45:fa:00:de:86:23:0a:
                    f9:8a:48:ba:07:b7:f0:fd:9e:76:a1:2b:e8:e5:d5:
                    bf:e4:6a:f6:8d:c0:e0:36:21:a3:b0:6c:69:ab:3c:
                    24:43:36:7c:8c:7e:c7:59:04:52:9e:d8:45:a6:59:
                    84:d3:23:9f:97:68:f6:11:4f:ff:bc:40:1f:79:c3:
                    ab:6c:4c:e1:7c:c0:4f:c0:d5:96:70:a8:12:3f:6e:
                    52:f8:c0:82:42:62:79:d0:86:45:b0:58:3f:4a:3e:
                    67:e0:73:8f:6f:7d:ba:e0:64:0c:07:f6:04:92:3e:
                    6a:16:fb:c9:de:12:16:1f:e1:f6:ee:5c:10:22:51:
                    db:8e:aa:d3:ac:0d:d1:ef:e1:83:bc:94:ac:23:6a:
                    88:a2:b2:c9:36:3c:2b:09:d7:21:af:bb:f8:2a:e4:
                    69:f5:09:db:f5:c8:b4:6e:9d:3e:dc:4d:cf:2c:2a:
                    67:8d:37:46:7f:92:d4:5e:de:f0:13:bf:5b:51:71:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:84:0F:D1:5E:8B:7C:12:2A:02:A2:D7:E7:B3:8C:EB:17:D3:12:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl

            X509v3 Authority Key Identifier:
                keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1f:71:8f:ad:ca:e9:88:8d:88:54:e2:b8:6b:84:74:5e:a9:
         ba:fb:90:69:d4:54:87:7f:99:3b:32:eb:c2:9f:9d:0e:13:bf:
         b8:d3:b9:fa:19:5e:41:a5:3f:07:ba:9f:fa:57:9b:a9:e8:98:
         87:6e:2d:0d:7e:a9:82:a9:4b:05:ab:5a:2c:4b:2c:f2:7a:f3:
         98:ba:44:37:66:0b:84:b9:c5:a0:a1:e9:d6:c9:0b:a3:2b:4a:
         a7:4c:ec:46:5c:be:ee:b1:90:23:f3:11:75:9f:43:46:89:a8:
         dc:ee:db:50:06:53:db:da:b1:61:67:3d:c0:f2:b5:81:e8:45:
         c2:dc:e5:f8:5a:6b:05:d5:f9:7b:c3:d4:a5:ae:6c:cd:9b:c8:
         1d:24:50:02:44:3b:3a:82:34:f5:69:8e:17:49:09:91:d4:db:
         ed:8a:4f:b7:85:77:53:95:0f:40:d0:db:d1:d7:81:0a:26:a8:
         3e:32:21:a6:0f:eb:71:33:6c:af:98:18:65:90:21:93:7d:37:
         c7:10:d7:d2:7b:25:50:31:01:0a:c4:03:f3:ad:69:55:b8:ce:
         82:12:32:38:90:fe:d6:3f:5d:19:55:60:85:c8:99:8c:bb:e9:
         a4:a9:28:c6:7e:c4:1c:25:41:1c:17:cf:73:fb:c0:b4:71:25:
         40:3e:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----