Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft
File:                     3789343d-8560-48b0-9530-d2a1129fefe7.mft (raw, json)
Hash identifier:          gmWuLuG87voW0SukF1h+WD3hvJhBAw4B5de4v5dvYfw=
Subject key identifier:   BA:5D:28:86:2C:AB:2E:43:88:39:9D:EA:64:24:16:5F:C0:FC:B9:E5
Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53
Certificate issuer:       /CN=3789343d-8560-48b0-9530-d2a1129fefe7
Certificate serial:       010D0C9F43285849817A94BFB2BE252A2468C020
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft
Manifest number:          010D0C9F4328584676A999D1ED37E0ACB5EFAE1C
Signing time:             Sat 12 Apr 2025 22:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 22:00:03 +0000
Manifest next update:     Mon 14 Apr 2025 22:00:00 +0000
Files and hashes:         1: 3789343d-8560-48b0-9530-d2a1129fefe7.crl (hash: FCZ1weJJnMStHEGiuR/f+BsE2epk3BTxj8Lygo1UHcg=)
                          2: d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (hash: Xb6hySrp578rmnlBDf43XdJT1HHOoMsXfehbmvL+sOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:7a:94:bf:b2:be:25:2a:24:68:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7
        Validity
            Not Before: Apr 12 22:00:03 2025 GMT
            Not After : Apr 14 22:00:00 2025 GMT
        Subject: CN=ad41fb9e-0172-4740-82df-39e78290016e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:c0:da:83:c7:8b:49:8b:46:2e:77:b7:ab:
                    e2:8b:69:10:c0:6d:65:94:43:69:97:d3:89:bf:79:
                    8e:22:4a:c9:d8:d7:d4:3b:73:61:ff:90:29:c0:43:
                    78:97:e1:94:e7:58:79:15:56:3f:01:9c:50:70:67:
                    51:fc:d7:c2:26:a5:81:31:96:9f:60:7a:ec:7c:64:
                    a9:f0:48:b9:2e:d3:39:f6:ea:30:64:0e:0f:d1:20:
                    dd:02:4d:62:35:95:fa:f3:23:dd:cb:d8:d7:ab:3b:
                    f4:7a:36:36:61:1d:c4:21:82:d4:f2:19:66:ce:0b:
                    99:48:5b:43:19:86:73:62:da:e8:f7:9d:e0:a7:e7:
                    13:bf:f3:fe:90:09:f2:1e:1a:de:f0:ce:f9:85:09:
                    07:f4:41:73:1a:52:85:d7:81:1b:39:b8:c4:eb:e4:
                    c5:e7:cd:80:87:f4:4d:41:1b:4f:f5:c9:ea:73:d4:
                    5b:1e:35:4a:9d:55:bb:02:f8:44:03:99:9e:b4:53:
                    8e:a0:c9:23:02:7d:09:56:80:10:00:3a:1a:9c:1c:
                    d3:a9:01:ca:5e:dc:34:b9:b7:e8:d1:f7:2f:6f:cc:
                    db:b7:44:d1:05:81:38:96:c5:4d:7e:d1:2d:4e:14:
                    72:8b:64:23:6f:b2:4e:d6:02:a8:f2:05:0d:c0:40:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:28:86:2C:AB:2E:43:88:39:9D:EA:64:24:16:5F:C0:FC:B9:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl

            X509v3 Authority Key Identifier:
                keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8f:34:9c:4d:fe:54:dc:68:19:5e:4e:3d:66:51:21:89:43:
         12:50:3e:d7:2d:d3:1c:f1:74:8e:f1:ce:ea:bf:2f:7a:1f:7e:
         36:60:be:fe:61:59:be:81:8e:65:d3:db:5b:fa:98:82:d5:8b:
         86:84:e8:0d:48:48:3e:bf:42:ea:04:48:2e:47:a7:16:3a:16:
         9a:b7:b8:77:70:92:bc:c5:b2:8d:6c:c0:77:ad:39:46:40:b4:
         57:48:7c:2f:4c:ab:4a:68:4b:29:2f:13:f7:89:d4:62:a9:5b:
         3c:b9:ce:d8:0f:43:b6:3c:1e:d7:d7:fe:ae:9c:13:1e:b1:dc:
         d7:6f:2b:8e:27:b3:84:b8:f9:d0:c9:ff:f5:50:16:69:a4:88:
         00:f5:f8:8d:16:57:04:fa:76:93:62:37:cd:45:a4:5a:86:93:
         a9:db:ff:8e:67:3c:df:9f:9e:b5:49:61:4d:08:8e:20:a3:23:
         b2:11:b6:d2:8c:a0:c5:df:91:22:bc:2b:d7:26:7f:69:13:96:
         06:f3:17:64:e3:73:f7:b0:0f:e8:db:a3:d2:ba:02:b3:d8:af:
         c7:95:0e:45:54:70:71:10:ec:9a:43:43:51:2b:d5:74:bf:9a:
         5d:95:7c:e1:8d:16:ef:ff:b3:af:c0:dc:29:2a:6d:c4:f5:99:
         5e:34:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----