Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft
File:                     344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft (raw, json)
Hash identifier:          ++eJCr9BNxf3pqM4nXeo9mjlTGWGkz5GK1ejsUZnAG8=
Subject key identifier:   6E:39:FD:15:9B:20:1C:93:1D:20:20:F7:18:65:8A:4E:61:8D:B5:FE
Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50
Certificate issuer:       /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e
Certificate serial:       010D0C9F43285849815CDCA89CC5AE9CD3E2F684
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft
Manifest number:          010D0C9F43285842B354EB17520FF4644D7785DE
Signing time:             Sat 12 Apr 2025 21:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 21:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 21:00:00 +0000
Files and hashes:         1: 344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl (hash: TJ/AO889zqz+FodgqhpY89H6pv9w/5WSnp5XlotlZSc=)
                          2: 79747402-ce38-3b09-ac75-5eb84e406dbf.roa (hash: wzRH+U0+ljoRZ2SJpIDefTwZOjdiivi+WnTVDuE4JT4=)
                          3: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (hash: ztedpZOSfzAK7F7VqPxlsHHmPOAqF6L78bZFJmlcbuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:5c:dc:a8:9c:c5:ae:9c:d3:e2:f6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e
        Validity
            Not Before: Apr 12 21:00:07 2025 GMT
            Not After : Apr 15 21:00:00 2025 GMT
        Subject: CN=cedfb36e-1af9-403a-838d-f26e446a13c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:37:92:d6:8f:14:1e:a1:6d:be:08:a6:31:
                    ca:be:9d:a9:4f:44:43:33:6f:9a:e2:29:78:eb:a4:
                    1f:ea:d4:51:5a:b2:5f:ab:71:12:38:d1:be:26:24:
                    f2:ec:19:3e:ba:4e:aa:c6:39:eb:18:5e:82:15:c4:
                    5e:1e:2c:ca:4c:09:6f:1d:02:c8:32:9d:96:03:3e:
                    b5:fc:4a:ac:6a:a1:e0:24:ff:45:94:80:60:fa:fd:
                    f5:fb:7e:bd:e2:a7:e1:93:72:0e:f5:8d:ad:44:71:
                    9a:a2:cf:27:a3:67:d4:6b:ad:65:d8:4a:b7:22:35:
                    5d:ac:7b:a2:0a:31:ac:5d:09:b9:22:f7:7b:22:f1:
                    09:39:b9:b9:fb:38:45:ce:ef:88:da:2d:07:08:bb:
                    c6:d8:92:f8:5d:85:82:c6:6b:78:52:58:05:22:b7:
                    af:07:64:7d:90:54:3b:30:39:2f:7c:c6:bc:d3:88:
                    f4:2d:b5:47:0e:13:98:ff:20:aa:7d:a6:08:2f:2a:
                    eb:bc:f2:04:69:10:4f:f7:8e:f4:d9:1d:9a:ec:f9:
                    ff:86:7c:3b:8d:87:2e:63:f8:7a:8c:28:62:fe:14:
                    15:7a:19:dc:ee:c0:bd:60:15:8e:b7:21:fc:26:7f:
                    57:ec:1c:5d:8a:65:96:da:2e:88:3a:08:a2:1b:e3:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:39:FD:15:9B:20:1C:93:1D:20:20:F7:18:65:8A:4E:61:8D:B5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl

            X509v3 Authority Key Identifier:
                keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a6:0f:05:92:7f:e4:12:e5:31:95:ad:e7:ea:c9:34:3d:17:
         d6:8c:ed:84:cb:3b:3b:8c:82:49:6d:34:f5:ba:39:3a:f0:28:
         61:1b:41:f6:ef:07:99:76:f0:72:08:67:f4:2e:8d:c2:cf:bd:
         a5:84:65:0c:7e:f4:d7:80:99:cf:e9:a6:1f:09:7f:b5:30:8a:
         60:a5:8f:e5:c6:35:32:4f:91:12:4e:88:e6:c2:b7:dd:1d:b5:
         a2:f0:4f:7f:f8:25:ee:47:44:ec:7e:35:03:73:14:8f:3a:9c:
         ce:66:9e:b4:51:fe:cf:1c:4a:e5:e1:c8:2c:31:f6:b5:dc:97:
         6d:86:be:e4:6e:54:cc:40:f9:c6:66:55:b2:55:d8:12:77:7f:
         6a:44:a4:c2:dd:62:05:98:ca:8d:a8:66:ae:f9:70:b9:a7:ca:
         07:34:b6:4e:6d:2a:fa:70:d1:e5:0d:99:51:40:93:93:ba:d8:
         30:56:27:83:18:66:a6:d2:30:2a:06:cf:e7:b5:a5:e7:8f:7a:
         8e:bd:97:7f:52:60:37:de:e1:50:fd:b4:e4:3d:6a:32:e9:65:
         f2:2a:a3:17:11:61:41:bc:cd:7a:40:ae:10:3b:59:be:b3:12:
         cb:cc:fc:7d:f2:ea:28:f3:2b:71:66:9f:98:f2:d4:9f:1e:16:
         5e:1d:40:52
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBXNyonMWunNPi9oQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5
ZTdlMB4XDTI1MDQxMjIxMDAwN1oXDTI1MDQxNTIxMDAwMFowLzEtMCsGA1UEAxMk
Y2VkZmIzNmUtMWFmOS00MDNhLTgzOGQtZjI2ZTQ0NmExM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsw3ktaPFB6hbb4IpjHKvp2pT0RDM2+a4il4
66Qf6tRRWrJfq3ESONG+JiTy7Bk+uk6qxjnrGF6CFcReHizKTAlvHQLIMp2WAz61
/EqsaqHgJP9FlIBg+v31+3694qfhk3IO9Y2tRHGaos8no2fUa61l2Eq3IjVdrHui
CjGsXQm5Ivd7IvEJObm5+zhFzu+I2i0HCLvG2JL4XYWCxmt4UlgFIrevB2R9kFQ7
MDkvfMa804j0LbVHDhOY/yCqfaYILyrrvPIEaRBP94702R2a7Pn/hnw7jYcuY/h6
jChi/hQVehnc7sC9YBWOtyH8Jn9X7BxdimWW2i6IOgiiG+M7TQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFG45/RWbIByTHSAg9xhlik5hjbX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj
NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvMzQ0YzY3MDQtYjNiYi00
ZWQ4LWI2ZjctYjY1NmUyZmI5ZTdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2
ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi
OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2
ZTJmYjllN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmpg8Fkn/kEuUxla3n6sk0
PRfWjO2Eyzs7jIJJbTT1ujk68ChhG0H27weZdvByCGf0Lo3Cz72lhGUMfvTXgJnP
6aYfCX+1MIpgpY/lxjUyT5ESTojmwrfdHbWi8E9/+CXuR0TsfjUDcxSPOpzOZp60
Uf7PHErl4cgsMfa13Jdthr7kblTMQPnGZlWyVdgSd39qRKTC3WIFmMqNqGau+XC5
p8oHNLZObSr6cNHlDZlRQJOTutgwVieDGGam0jAqBs/ntaXnj3qOvZd/UmA33uFQ
/bTkPWoy6WXyKqMXEWFBvM16QK4QO1m+sxLLzPx98uoo8ytxZp+Y8tSfHhZeHUBS
-----END CERTIFICATE-----