Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft
File:                     bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft (raw, json)
Hash identifier:          KPb+Q+R/pKBATyszEyPvMUimX16gr+yFKdY6tR/WR/4=
Subject key identifier:   5C:B6:91:68:36:A4:94:56:ED:20:11:C6:6F:44:C9:7F:54:93:C9:B1
Authority key identifier: 54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B
Certificate issuer:       /CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c
Certificate serial:       010D0C9F43285849815CDA815516F094190A4C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft
Manifest number:          010D0C9F432858472BF367D04DB1D2762C6BD05B
Signing time:             Sat 12 Apr 2025 21:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 21:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 21:00:00 +0000
Files and hashes:         1: 05ce43ff-ab24-3b50-ae65-c77439766681.roa (hash: NheMwJ85QwMtmC7YQSDQHUnRnnSeHjFPTv6qe2xU8j0=)
                          2: bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl (hash: gtKVw6Z+MP71xHscborc54SoPrF8KXdeNtv9VwfNsCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:5c:da:81:55:16:f0:94:19:0a:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb678ebe-0d8f-4513-aec9-decdadbd1e1c
        Validity
            Not Before: Apr 12 21:00:07 2025 GMT
            Not After : Apr 15 21:00:00 2025 GMT
        Subject: CN=9964b792-23c1-4238-bd8e-c6fa5aa222ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:6f:27:73:1d:10:79:b0:b9:16:ba:f8:de:
                    4e:21:42:28:e7:fa:e6:73:8d:b0:df:15:2f:07:d7:
                    0b:94:c7:7e:68:40:5a:9d:5a:b6:de:dc:ad:0f:20:
                    9d:7d:41:7f:da:e0:33:92:3a:49:6d:ae:62:9f:ae:
                    d7:fc:07:6a:e3:23:88:34:de:a0:8c:0a:79:d6:ad:
                    a5:83:b6:a6:f9:b4:a8:82:ed:52:e0:44:28:96:ee:
                    49:c4:15:f5:ca:14:b0:a0:2d:3a:bd:97:db:e4:d4:
                    d5:21:d2:de:fb:8a:25:2b:1d:df:de:33:d1:71:29:
                    66:75:c9:11:75:8f:91:bb:ab:6f:32:5c:59:4b:90:
                    d5:33:58:98:65:a5:87:b2:9f:1e:40:e5:ef:5d:b1:
                    6c:c1:c2:c0:e3:82:59:26:4d:44:09:79:21:98:22:
                    18:2d:27:c9:d5:bb:8c:c0:8e:4f:3a:d8:c3:c2:5d:
                    2c:7c:c7:ff:5a:a1:cf:86:a8:6a:38:5a:88:00:1e:
                    8d:a7:31:17:f7:1c:a6:3f:6c:8b:33:d9:e6:97:f0:
                    5f:c2:c6:94:8a:5f:c2:85:e6:71:ee:c5:c5:34:34:
                    26:1f:3f:99:47:e1:44:e3:a8:18:f9:60:4c:27:ef:
                    5a:65:c8:9c:81:59:f6:5f:9c:15:6c:e4:5c:27:46:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B6:91:68:36:A4:94:56:ED:20:11:C6:6F:44:C9:7F:54:93:C9:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.crl

            X509v3 Authority Key Identifier:
                keyid:54:31:AB:87:54:53:F8:07:D0:F3:F2:DF:90:AE:C7:CD:C7:96:04:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bb678ebe-0d8f-4513-aec9-decdadbd1e1c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4a:b0:d9:af:0d:2f:68:8f:98:18:80:bd:4e:c8:be:86:8d:
         c9:c0:34:94:09:bd:ce:7e:21:22:c6:3e:44:b4:d2:8b:04:03:
         d1:1d:2f:d9:ca:34:62:86:eb:84:03:1a:17:da:1f:5d:8c:63:
         b4:70:82:22:4c:d2:3a:ea:a5:8f:23:5e:1c:33:ec:ad:a6:29:
         d0:97:08:51:c8:71:37:19:9c:a5:03:cb:ca:fa:c7:53:04:d3:
         9f:8f:6b:24:10:d9:a9:79:07:f3:9c:0d:59:79:ee:8c:fd:e0:
         51:9b:6a:d4:8e:44:e5:0d:5c:8d:76:3d:e7:2f:a5:9d:b5:0b:
         79:3c:1d:e4:00:4a:0c:7b:9b:23:ad:7b:2c:db:76:8d:8d:26:
         50:ba:e0:be:f6:6e:b4:99:11:ad:52:5e:10:a6:b1:a3:1b:c0:
         6d:b6:81:1a:08:b6:2e:77:30:ec:fb:32:9c:77:8d:db:7d:48:
         a9:c2:34:be:16:f6:17:04:7b:a8:1f:8a:37:69:80:7a:d8:f7:
         14:52:d8:af:87:b3:1d:e8:da:a9:8e:d4:80:ba:30:c7:6a:b2:
         a9:f5:34:2d:d5:b3:ac:df:e4:8f:c8:4d:fa:f0:f1:94:2d:44:
         ab:8f:20:91:12:9a:77:40:79:87:63:bd:94:7d:09:e1:a2:36:
         4e:7b:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----