Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.mft
File:                     74448f2d-e70e-4042-9da0-e023ba682319.mft (raw, json)
Hash identifier:          d0R7Shzqw1hO2Q1i5LD94F9sj7b8CvqWSjOHz0voOCU=
Subject key identifier:   74:C9:13:8D:46:E4:87:15:8D:91:9C:F2:B1:15:97:3A:C8:57:68:2A
Authority key identifier: 63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81
Certificate issuer:       /CN=74448f2d-e70e-4042-9da0-e023ba682319
Certificate serial:       010D0C9F432858498103858ED1D240E054E55380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.mft
Manifest number:          010D0C9F43285846DD7DCEC21BF2C2DEB403C00A
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 18:00:00 +0000
Files and hashes:         1: 5a83de84-e391-3be3-9e75-bc3e76d2e2b0.roa (hash: zVTQ7ZYQItLdMLro6BSG2FlPsHmS3x/ugbCGPZXPs28=)
                          2: 74448f2d-e70e-4042-9da0-e023ba682319.crl (hash: LrbdaI83kPd6AtINOvW4oiQk9+ytpxTnJmzw7oI7qk8=)
                          3: a1361cd5-da5c-35d0-9d20-2c4bd90f6f4f.roa (hash: dqGiKzrHvSA0njtyP1gpoC0F89hVurpii+opCbM1Pc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:85:8e:d1:d2:40:e0:54:e5:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74448f2d-e70e-4042-9da0-e023ba682319
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 15 18:00:00 2025 GMT
        Subject: CN=32f69bfc-423f-4850-8253-62ee316134ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5d:18:0c:08:cf:ec:39:8f:41:bd:b0:ff:d4:
                    8d:bd:2d:a0:dc:eb:fd:c0:e4:ae:fa:5b:13:0e:75:
                    b7:d0:90:92:e3:6a:1b:1c:e5:9f:9d:e6:3e:45:19:
                    2a:f0:73:1b:5b:f4:8e:2a:27:0f:59:08:cf:9a:dc:
                    23:5c:61:5f:31:fe:26:07:43:41:be:ef:a1:65:fe:
                    dd:1d:c4:3f:de:aa:e0:78:e2:38:62:9e:7b:c7:21:
                    a9:95:dc:a4:7a:89:90:75:76:43:ff:cd:78:6e:76:
                    98:9e:38:74:4b:d7:27:56:c2:f3:86:93:f4:83:ea:
                    29:9c:62:26:67:3a:8b:45:cc:0f:f4:da:8f:36:3c:
                    bf:55:c4:ed:80:2e:3e:86:ee:ee:c8:53:20:d8:40:
                    06:31:ad:d7:07:e2:64:d8:da:cb:c5:09:02:19:61:
                    ef:43:f3:b5:4a:86:60:8c:1e:8b:8d:05:cb:57:b2:
                    a6:70:4f:c3:49:8c:5b:5f:24:1e:2d:f4:37:72:d8:
                    b6:88:10:e2:60:c9:78:75:de:13:02:01:d5:a3:ba:
                    10:92:eb:9a:56:f3:0e:33:14:41:d1:25:7c:8d:9f:
                    3b:c6:4f:d4:c1:02:68:aa:5d:c6:05:05:4b:9b:84:
                    8e:c1:5d:35:5c:dc:08:e6:8a:3a:aa:47:15:d7:70:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C9:13:8D:46:E4:87:15:8D:91:9C:F2:B1:15:97:3A:C8:57:68:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319/74448f2d-e70e-4042-9da0-e023ba682319.crl

            X509v3 Authority Key Identifier:
                keyid:63:21:A1:E6:9F:C4:E9:2F:C9:47:24:A5:3D:0B:45:50:E3:6F:BF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74448f2d-e70e-4042-9da0-e023ba682319.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:09:b9:d5:5d:8c:2c:56:58:fc:cc:07:9f:c0:ca:27:d4:f0:
         d0:3f:16:65:c1:f2:39:0d:d7:e4:04:8c:2e:8d:01:d8:87:c5:
         c3:bf:b1:fe:1a:f8:b9:9f:5b:95:90:35:f0:8e:41:02:bb:f9:
         7c:13:03:4d:12:d7:f2:bd:d3:6c:66:4e:f2:f1:6b:24:7d:f8:
         d2:44:b6:67:0b:60:20:9e:69:98:a9:7f:01:a1:d1:a3:45:0f:
         a0:72:68:1f:f1:f8:63:d5:85:ce:15:ce:4f:aa:dc:d2:11:16:
         1f:5f:66:32:2a:e9:83:dd:c2:13:07:a0:26:75:5a:98:a0:59:
         55:10:9a:a1:6b:aa:f4:6e:25:d7:e0:5d:c2:a9:39:a8:b7:83:
         2f:da:fc:7c:d2:c7:aa:95:48:2f:a4:03:81:8f:5d:50:45:ca:
         20:a6:ca:d1:36:a2:b2:cc:af:fb:77:35:18:a0:ec:3e:64:b1:
         67:7a:4d:f7:79:8a:97:fa:4f:bf:0a:49:34:b9:3d:33:6f:af:
         b0:b2:0f:1c:92:80:35:bd:6f:5f:36:50:6c:22:06:b8:ef:f5:
         34:0e:de:85:49:f1:1d:bb:3e:e9:e0:4c:7e:47:3d:50:8e:5a:
         01:04:6d:48:cc:84:b8:df:9a:a9:78:1e:ed:ae:cf:1d:9b:80:
         ec:c1:33:65
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBA4WO0dJA4FTlU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ0NDhmMmQtZTcwZS00MDQyLTlkYTAtZTAyM2JhNjgy
MzE5MB4XDTI1MDQxMjE4MDAwN1oXDTI1MDQxNTE4MDAwMFowLzEtMCsGA1UEAxMk
MzJmNjliZmMtNDIzZi00ODUwLTgyNTMtNjJlZTMxNjEzNGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA510YDAjP7DmPQb2w/9SNvS2g3Ov9wOSu+lsT
DnW30JCS42obHOWfneY+RRkq8HMbW/SOKicPWQjPmtwjXGFfMf4mB0NBvu+hZf7d
HcQ/3qrgeOI4Yp57xyGpldykeomQdXZD/814bnaYnjh0S9cnVsLzhpP0g+opnGIm
ZzqLRcwP9NqPNjy/VcTtgC4+hu7uyFMg2EAGMa3XB+Jk2NrLxQkCGWHvQ/O1SoZg
jB6LjQXLV7KmcE/DSYxbXyQeLfQ3cti2iBDiYMl4dd4TAgHVo7oQkuuaVvMOMxRB
0SV8jZ87xk/UwQJoql3GBQVLm4SOwV01XNwI5oo6qkcV13CxdQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFHTJE41G5IcVjZGc8rEVlzrIV2gqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NDQ0
OGYyZC1lNzBlLTQwNDItOWRhMC1lMDIzYmE2ODIzMTkvNzQ0NDhmMmQtZTcwZS00
MDQyLTlkYTAtZTAyM2JhNjgyMzE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzQ0NDhmMmQtZTcwZS00MDQyLTlk
YTAtZTAyM2JhNjgyMzE5Lzc0NDQ4ZjJkLWU3MGUtNDA0Mi05ZGEwLWUwMjNiYTY4
MjMxOS5jcmwwHwYDVR0jBBgwFoAUYyGh5p/E6S/JRySlPQtFUONvv4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NDQ0OGYyZC1lNzBlLTQwNDItOWRhMC1lMDIz
YmE2ODIzMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCCbnVXYwsVlj8zAefwMon
1PDQPxZlwfI5DdfkBIwujQHYh8XDv7H+Gvi5n1uVkDXwjkECu/l8EwNNEtfyvdNs
Zk7y8WskffjSRLZnC2AgnmmYqX8BodGjRQ+gcmgf8fhj1YXOFc5PqtzSERYfX2Yy
KumD3cITB6AmdVqYoFlVEJqha6r0biXX4F3CqTmot4Mv2vx80seqlUgvpAOBj11Q
RcogpsrRNqKyzK/7dzUYoOw+ZLFnek33eYqX+k+/Ckk0uT0zb6+wsg8ckoA1vW9f
NlBsIga47/U0Dt6FSfEduz7p4Ex+Rz1QjloBBG1IzIS435qpeB7trs8dm4DswTNl
-----END CERTIFICATE-----