Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/8ac4270a-45f4-487a-8f20-4684f6b306f3.mft
File:                     8ac4270a-45f4-487a-8f20-4684f6b306f3.mft (raw, json)
Hash identifier:          phSgSNaaNQ/ie/15Nv36PuE8acN2WkG4G68WbZRlMXQ=
Subject key identifier:   56:FC:0F:FB:BB:A1:1A:F9:DE:5A:13:EC:40:8D:E8:46:EF:19:5F:E9
Authority key identifier: C5:67:36:4D:0D:6F:62:4D:BA:66:85:AB:42:CF:BE:7C:3F:01:97:DE
Certificate issuer:       /CN=8ac4270a-45f4-487a-8f20-4684f6b306f3
Certificate serial:       010D0C9F4328584980E5BBB03C7C63F4F640BD24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/8ac4270a-45f4-487a-8f20-4684f6b306f3.mft
Manifest number:          010D0C9F43285847A39B8FC56554EBD30696F130
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 17:00:00 +0000
Files and hashes:         1: 808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa (hash: VCej4wX2Ht4UHc3y0DZQu/crK/45IM2rNdSIaB6ay9A=)
                          2: 8ac4270a-45f4-487a-8f20-4684f6b306f3.crl (hash: fxm8PUcV/5wvcddpbKdWWj7lx+0mUetHZ0yjCVLwaJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:bb:b0:3c:7c:63:f4:f6:40:bd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac4270a-45f4-487a-8f20-4684f6b306f3
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 14 17:00:00 2025 GMT
        Subject: CN=5ef9ab24-0ff5-4fbf-b716-72348628d76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:c9:c4:7e:7b:e0:e1:56:65:5c:36:f8:d3:
                    1e:6a:7c:93:dc:40:28:81:c8:9b:c2:4b:95:98:22:
                    c0:29:f7:b8:e9:e6:35:67:2d:bd:4b:0b:25:07:e6:
                    a3:5a:1e:02:e7:a7:20:14:da:04:5e:7d:37:20:00:
                    f0:a8:e3:f6:c9:95:8b:8c:23:27:66:bd:f2:5b:ea:
                    be:3d:e1:8d:f7:74:83:13:27:4a:85:d5:89:63:d6:
                    08:9e:75:1b:78:1d:46:26:5a:a9:93:92:cf:6c:f5:
                    7d:5c:c2:10:c2:ea:01:42:8d:5f:93:35:f8:18:70:
                    f1:53:7a:fe:1f:0f:a1:bf:df:88:67:4a:ef:80:b0:
                    c5:57:64:60:21:db:f8:ba:71:72:b7:78:fd:48:77:
                    20:07:ff:05:f9:ab:bd:fc:9d:bb:2e:bc:9d:11:3e:
                    c3:d6:00:6f:57:31:7a:26:40:10:cc:6a:3b:d3:34:
                    df:1f:ee:99:c3:bd:bd:3b:3d:20:d1:2f:82:4b:7c:
                    a7:c1:94:d4:7a:49:fc:35:65:43:78:b2:a5:74:d0:
                    4c:d2:18:e8:21:09:68:09:07:c4:0d:58:54:11:07:
                    63:c8:f3:e1:7f:17:13:ca:0b:8a:61:3a:4d:2b:74:
                    86:86:ab:99:81:cb:87:71:8b:69:d5:79:a0:16:9f:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FC:0F:FB:BB:A1:1A:F9:DE:5A:13:EC:40:8D:E8:46:EF:19:5F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/8ac4270a-45f4-487a-8f20-4684f6b306f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/8ac4270a-45f4-487a-8f20-4684f6b306f3.crl

            X509v3 Authority Key Identifier:
                keyid:C5:67:36:4D:0D:6F:62:4D:BA:66:85:AB:42:CF:BE:7C:3F:01:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:f4:6c:61:ae:4b:a2:76:7f:46:78:c4:0a:ff:b7:c5:52:
         dd:f5:28:cc:d1:2e:63:fb:c6:2e:7f:a4:8a:47:a1:42:24:e5:
         1b:50:93:32:3e:f9:8b:b7:a4:f5:ea:da:ed:18:64:e5:de:ed:
         b2:7b:75:48:00:25:7a:97:3b:82:ba:36:b9:d1:25:6d:bd:6d:
         0c:b9:3f:e9:18:00:c6:af:90:e2:1c:1e:71:90:09:6d:60:2b:
         c0:b5:c1:38:75:27:be:65:6d:30:f4:ba:55:b4:ba:31:8e:95:
         62:7f:c4:f4:75:7d:15:03:aa:c7:32:6d:62:77:cd:d5:53:66:
         1e:0d:6e:f2:9a:a3:31:c4:86:7d:a1:06:bc:50:1d:35:47:8e:
         d9:9e:47:cc:17:79:23:a6:fa:25:5b:53:f1:ac:ec:64:be:8e:
         04:d7:56:bf:d8:6f:ec:08:88:e6:ed:76:e4:f8:10:28:7a:70:
         cd:39:a0:e8:a7:85:6f:25:36:68:23:32:c1:a2:10:8f:90:5b:
         8a:5a:30:89:d7:7b:4a:60:70:f5:e6:b8:2d:f4:6e:fe:03:da:
         a6:f4:e8:d6:73:89:73:10:e2:29:0b:9e:17:74:1d:25:fa:dc:
         59:e8:2d:b2:70:19:35:b0:60:53:38:ad:12:d1:2f:43:9f:e0:
         2d:ef:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----