Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft
File:                     03f68bb7-1e42-452b-a9a1-99c7586beba0.mft (raw, json)
Hash identifier:          wLgeEmIUcx51Cy3NKRaRmQa9KfbwnB/8aCjNFTpbhw4=
Subject key identifier:   0E:88:DE:7F:7E:6F:51:D1:9A:A8:D5:61:5C:69:56:03:54:CF:61:F8
Authority key identifier: 4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59
Certificate issuer:       /CN=03f68bb7-1e42-452b-a9a1-99c7586beba0
Certificate serial:       010D0C9F4328584980C7F849CF26AD498A07A880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft
Manifest number:          010D0C9F4328584391CA53DB29CE3E3E8F375983
Signing time:             Sat 12 Apr 2025 16:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 16:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 16:00:00 +0000
Files and hashes:         1: 03f68bb7-1e42-452b-a9a1-99c7586beba0.crl (hash: b9SUMqsayjjcEioQ2C5r274fS4crxvpM4J6qkatKJp0=)
                          2: 4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa (hash: le+/IUeERN7n51K0exdb5CpHMs3sVRLl7uALyzM2Ero=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:c7:f8:49:cf:26:ad:49:8a:07:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f68bb7-1e42-452b-a9a1-99c7586beba0
        Validity
            Not Before: Apr 12 16:00:07 2025 GMT
            Not After : Apr 15 16:00:00 2025 GMT
        Subject: CN=cc500e2b-bd26-4ca3-a613-08e156fd4e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:b4:ad:68:13:fb:5b:32:d9:2a:b5:4b:a4:
                    0a:4d:7c:16:97:b6:0e:09:ce:97:ac:17:72:6b:c3:
                    d0:11:3c:a8:35:5a:fe:42:7e:42:2e:1c:a3:38:84:
                    21:67:08:b2:9c:1b:0e:88:69:45:e1:48:4d:4f:69:
                    1e:3d:71:02:bb:84:e0:64:91:3d:92:55:3c:0a:54:
                    5a:a5:3b:88:c2:e6:52:2e:ef:be:c6:e7:0a:c2:c2:
                    be:82:eb:e3:1e:5b:ab:a9:d6:fb:73:ee:e3:b1:78:
                    8a:19:60:6e:ed:dd:63:5e:8f:e8:c8:4c:3d:08:ff:
                    6f:b8:5f:51:52:52:91:74:4c:ae:7a:a5:3c:df:2a:
                    a7:7e:84:d2:af:0e:ab:4c:64:3f:3d:e2:e2:c7:c9:
                    43:24:68:de:f8:95:89:29:0a:c1:ab:2c:9c:53:fb:
                    a8:93:05:2e:7f:75:52:4d:56:88:da:71:de:22:7b:
                    c8:e2:19:d6:3d:a7:bc:7b:7b:73:ba:f5:8a:16:40:
                    bf:9f:fd:ea:6e:10:cf:f0:d4:59:06:d7:03:a8:e5:
                    f7:ea:0f:0c:04:b1:6b:4d:bd:bb:29:19:db:c2:d1:
                    3c:cd:bf:86:17:b1:f1:68:41:47:44:7f:d8:f6:9d:
                    db:1b:dc:f8:bd:4d:76:75:b9:21:10:44:a9:75:e4:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:88:DE:7F:7E:6F:51:D1:9A:A8:D5:61:5C:69:56:03:54:CF:61:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl

            X509v3 Authority Key Identifier:
                keyid:4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7c:c5:c8:54:fb:1c:2a:b6:e4:f0:17:a6:52:f0:5c:60:2d:
         96:92:26:90:ed:64:f3:0b:fa:41:4f:b2:6a:be:b8:a1:33:7b:
         a8:eb:0f:ae:67:7c:8d:19:6e:b6:9a:fa:e2:2f:9c:0b:19:39:
         52:47:0f:90:b5:7f:d8:6c:05:25:f4:bc:4f:f1:19:79:a0:09:
         0f:8e:0d:d3:ca:9f:d8:37:ec:a6:bf:eb:e5:e5:06:0e:2d:37:
         c1:43:23:44:48:42:31:45:74:cf:c6:66:a5:44:df:03:2b:a5:
         76:fe:c7:fb:5c:58:6c:98:75:a1:f2:d9:93:82:16:a3:0e:2f:
         81:27:24:58:b7:53:e0:8f:74:69:a9:f7:1a:3c:f7:23:ea:a1:
         fe:de:28:b1:47:f0:92:9b:c7:6a:fa:49:db:86:74:f1:ef:23:
         2d:a0:35:e3:d8:17:fb:1b:9f:93:83:a4:0f:b4:be:9a:08:d7:
         2a:10:06:20:bf:bc:97:24:4c:c4:ed:e9:b5:f9:96:f1:db:15:
         f9:c9:97:49:ea:cd:f9:f8:bd:86:b1:f5:cf:e6:c8:f7:e9:dc:
         3e:15:9d:8e:c1:c4:33:29:40:1f:9a:6f:ef:69:5b:5b:57:19:
         fd:2c:da:6e:7f:56:b3:cd:84:96:6e:d0:73:14:ae:7d:41:dd:
         a5:02:23:34
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmAx/hJzyatSYoHqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNmNjhiYjctMWU0Mi00NTJiLWE5YTEtOTljNzU4NmJl
YmEwMB4XDTI1MDQxMjE2MDAwN1oXDTI1MDQxNTE2MDAwMFowLzEtMCsGA1UEAxMk
Y2M1MDBlMmItYmQyNi00Y2EzLWE2MTMtMDhlMTU2ZmQ0ZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwS0rWgT+1sy2Sq1S6QKTXwWl7YOCc6XrBdy
a8PQETyoNVr+Qn5CLhyjOIQhZwiynBsOiGlF4UhNT2kePXECu4TgZJE9klU8ClRa
pTuIwuZSLu++xucKwsK+guvjHlurqdb7c+7jsXiKGWBu7d1jXo/oyEw9CP9vuF9R
UlKRdEyueqU83yqnfoTSrw6rTGQ/PeLix8lDJGje+JWJKQrBqyycU/uokwUuf3VS
TVaI2nHeInvI4hnWPae8e3tzuvWKFkC/n/3qbhDP8NRZBtcDqOX36g8MBLFrTb27
KRnbwtE8zb+GF7HxaEFHRH/Y9p3bG9z4vU12dbkhEESpdeQNCwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFA6I3n9+b1HRmqjVYVxpVgNUz2H4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2Y2
OGJiNy0xZTQyLTQ1MmItYTlhMS05OWM3NTg2YmViYTAvMDNmNjhiYjctMWU0Mi00
NTJiLWE5YTEtOTljNzU4NmJlYmEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDNmNjhiYjctMWU0Mi00NTJiLWE5
YTEtOTljNzU4NmJlYmEwLzAzZjY4YmI3LTFlNDItNDUyYi1hOWExLTk5Yzc1ODZi
ZWJhMC5jcmwwHwYDVR0jBBgwFoAUSv4UcYhi1ik6o3u+cxOtoeiMSVkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2Y2OGJiNy0xZTQyLTQ1MmItYTlhMS05OWM3
NTg2YmViYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArfMXIVPscKrbk8BemUvBc
YC2WkiaQ7WTzC/pBT7JqvrihM3uo6w+uZ3yNGW62mvriL5wLGTlSRw+QtX/YbAUl
9LxP8Rl5oAkPjg3Typ/YN+ymv+vl5QYOLTfBQyNESEIxRXTPxmalRN8DK6V2/sf7
XFhsmHWh8tmTghajDi+BJyRYt1Pgj3RpqfcaPPcj6qH+3iixR/CSm8dq+knbhnTx
7yMtoDXj2Bf7G5+Tg6QPtL6aCNcqEAYgv7yXJEzE7em1+Zbx2xX5yZdJ6s35+L2G
sfXP5sj36dw+FZ2OwcQzKUAfmm/vaVtbVxn9LNpuf1azzYSWbtBzFK59Qd2lAiM0
-----END CERTIFICATE-----