Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft
File:                     2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft (raw, json)
Hash identifier:          L1NPpGhY7zjgSaZ9LW9kPfdHPAsCe9biE0fcM+/4xbQ=
Subject key identifier:   04:97:1B:CF:3A:BC:72:37:2F:DD:96:84:88:AB:42:A6:40:65:EC:0F
Authority key identifier: 12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB
Certificate issuer:       /CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
Certificate serial:       010D0C9F43285849810384B1A33FE7B5490A9680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft
Manifest number:          010D0C9F43285845CEA08E9DCB8C9DBBF7382260
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 18:00:00 +0000
Files and hashes:         1: 2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl (hash: 5nLYK1+TTPLpoJA6q9444pCT0xAyy9LDl52svRUU0/4=)
                          2: 5925a732-37e4-38f1-b869-f45e205b206d.roa (hash: k1HBggBqj+OEM/LosInpLQQmhFr7SD4L0YB7AjdyAVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:84:b1:a3:3f:e7:b5:49:0a:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 14 18:00:00 2025 GMT
        Subject: CN=002fe823-989e-4318-bc7b-3db67b7ab228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:35:a1:c9:46:d7:7f:41:da:10:bf:43:65:2a:
                    fe:a9:d4:65:87:23:d8:f7:56:c8:1f:63:2d:e2:d1:
                    e5:ae:8b:ff:94:45:02:c4:7b:39:3b:84:7d:71:2c:
                    95:76:cd:45:b8:9a:f9:9d:79:33:4b:62:01:f7:46:
                    f3:47:a6:62:31:c7:4b:ce:3c:5f:83:53:c5:fe:1d:
                    87:56:d3:d7:6c:58:8c:e8:2d:94:2c:eb:dd:a6:ca:
                    0d:05:a5:b2:a4:67:d2:9e:05:63:58:6f:d5:2d:f6:
                    bf:14:c7:d8:af:0f:37:4c:27:67:a1:da:56:b2:98:
                    00:91:6d:01:b2:c7:70:87:24:47:45:f5:ba:f4:91:
                    aa:ce:5e:8f:81:c7:da:bd:cb:3a:2c:fe:e1:25:e0:
                    82:14:5b:95:1a:00:67:a3:06:54:0b:cd:1c:7d:e8:
                    c5:36:bf:bf:97:0e:a0:f7:99:78:1a:f1:4f:0d:3a:
                    62:8e:23:2c:73:db:c8:af:18:df:f8:ce:87:2b:07:
                    62:13:3d:10:6b:dc:a0:e8:55:81:c9:a5:fb:21:d7:
                    89:d4:0f:8e:ec:25:f3:0b:cb:95:56:7a:43:07:09:
                    28:d1:e5:2d:c4:9b:64:3d:c7:d3:64:c9:b7:ef:e6:
                    78:87:e2:f8:df:bd:ea:17:34:06:4c:cd:88:f4:af:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:97:1B:CF:3A:BC:72:37:2F:DD:96:84:88:AB:42:A6:40:65:EC:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl

            X509v3 Authority Key Identifier:
                keyid:12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:1d:9d:3b:51:fb:2c:5c:e6:7c:72:41:eb:98:ee:d7:37:
         01:e6:af:01:9d:78:35:bd:31:48:25:33:e0:59:1e:8d:52:ed:
         ef:16:1c:d7:f9:48:25:4c:0c:4e:aa:3d:08:95:f0:05:31:23:
         cf:54:bd:15:d2:29:0e:11:82:23:56:f6:4d:7e:d4:18:52:38:
         37:d2:d3:02:a4:d0:9c:db:6c:b9:18:b7:9e:94:c0:70:0f:6b:
         4a:25:19:34:5d:3e:4f:9c:fa:22:8d:42:44:5d:26:99:46:d5:
         24:ed:2e:bc:15:6d:c1:19:c6:69:37:d2:6f:38:d9:67:88:c1:
         00:81:94:2f:c8:95:0e:30:75:1c:a3:f1:f4:c5:84:9e:25:52:
         6b:51:26:a8:0e:0a:98:ab:21:ea:a4:da:ef:d5:21:91:6f:2d:
         1a:e0:12:2f:27:8f:81:0f:af:ab:a8:3c:60:21:a0:9b:cc:d3:
         78:a1:93:6f:8d:64:53:25:78:d5:1f:46:b4:14:f9:f5:24:f3:
         59:c0:b2:8b:a2:4c:ea:91:90:ff:24:32:b5:21:a7:9c:c7:0f:
         06:c5:39:4c:09:29:95:86:84:59:fc:96:5f:c4:d4:51:9b:53:
         0b:2e:3d:15:f0:49:2e:dd:2d:93:90:56:32:87:68:12:4a:68:
         75:ca:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----