Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.mft
File:                     b262d7d9-ee60-40b6-9dc2-a6317bece901.mft (raw, json)
Hash identifier:          tEb/pSANmGtZ/W7DmwzLj9AasuynLPg5vr+1wJwQHgE=
Subject key identifier:   27:83:E6:F0:0E:35:98:06:54:D4:08:56:59:80:22:71:7C:2C:5B:DA
Authority key identifier: D5:41:47:B3:C0:F7:E4:8E:7B:A2:D4:0C:B9:E3:12:F7:59:1D:6D:CC
Certificate issuer:       /CN=b262d7d9-ee60-40b6-9dc2-a6317bece901
Certificate serial:       010D0C9F432858498103825B2492DBA259D36CD0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.mft
Manifest number:          010D0C9F432858440A73923BBC461D43ED8259E7
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 18:00:00 +0000
Files and hashes:         1: 1d86dfc2-f806-3f1a-91a9-6e013bfe9f87.roa (hash: IpQ9cCywkJM3GceJqExzTr+yI7EJxDbdK87hh4hiaI8=)
                          2: 3648636d-84da-3434-a4d6-3bd3282c160e.roa (hash: TwEBWxKFbNyFooIGvac0MA49johX9OivLDYeR9ZI+io=)
                          3: b262d7d9-ee60-40b6-9dc2-a6317bece901.crl (hash: ch72nqjMBFJInX7IX08crhpGl9/zC44/XHkW+T7Q/Lk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:82:5b:24:92:db:a2:59:d3:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262d7d9-ee60-40b6-9dc2-a6317bece901
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 14 18:00:00 2025 GMT
        Subject: CN=d3d0ab84-7107-4a64-b7a0-9d00e5d20096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:24:0f:0a:a9:54:9e:0e:f4:47:75:13:1f:
                    d1:9a:ba:2f:a7:76:f3:ca:1a:40:5a:33:7e:b4:75:
                    60:ba:57:6e:b8:4b:b3:2a:43:60:91:8b:90:72:e7:
                    47:52:4d:eb:78:34:45:f5:fa:2e:4b:c5:0e:76:5b:
                    f7:19:49:36:f4:3f:af:66:10:5c:25:82:9b:54:8d:
                    d5:b5:fd:5d:83:21:78:e9:89:2f:f7:65:29:eb:5b:
                    15:1f:c4:e3:0e:2b:47:2a:fa:00:64:11:30:8a:d0:
                    e5:4f:fb:ed:db:fe:05:2b:9d:a7:77:11:5d:94:c0:
                    a6:bf:46:d1:44:af:8f:36:0e:59:c0:83:39:27:ad:
                    4d:74:8a:41:98:03:6c:eb:44:e3:bb:4b:77:8e:46:
                    03:8c:b1:c5:f8:69:78:97:be:ca:e2:fd:fd:ca:5c:
                    6c:44:f2:69:07:a9:4e:14:a0:cc:0f:3e:66:13:38:
                    04:07:f4:17:40:c6:e2:85:36:1d:59:88:99:cf:45:
                    d9:00:21:db:95:38:5c:d1:86:29:64:2b:6e:25:eb:
                    54:80:db:72:c9:4d:4e:13:63:90:e4:cf:bf:dd:5e:
                    2a:d8:5c:82:2a:2f:4b:b7:c0:87:3e:24:2f:ef:8e:
                    73:b7:d8:fb:1a:9a:3d:11:f2:05:60:c0:bc:9c:3b:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:83:E6:F0:0E:35:98:06:54:D4:08:56:59:80:22:71:7C:2C:5B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.crl

            X509v3 Authority Key Identifier:
                keyid:D5:41:47:B3:C0:F7:E4:8E:7B:A2:D4:0C:B9:E3:12:F7:59:1D:6D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:0d:d3:27:bb:08:bf:f4:f9:31:fb:5b:54:2b:f4:cf:42:
         ac:bd:b6:da:f9:ef:a9:52:93:1a:4b:62:93:e4:23:85:b9:33:
         3d:d4:5a:63:b9:76:36:b4:8e:9b:05:e2:5d:57:ad:bf:32:9e:
         6c:65:35:6f:e3:59:85:09:24:2f:22:b5:6e:2b:0a:7d:67:35:
         5f:f7:35:d4:22:13:a7:bb:7a:e5:17:af:21:25:55:b3:cc:73:
         d0:b9:e3:47:69:5c:58:9c:c6:bf:33:78:23:2a:74:00:77:b1:
         5a:35:64:68:06:13:06:1f:d1:7c:f4:3f:c9:5d:87:60:d6:9a:
         03:e7:74:45:5c:14:f7:f3:7f:22:71:14:7e:3e:52:5b:78:54:
         ba:c4:01:01:c1:88:04:67:f1:fa:9c:85:78:aa:1e:0a:ac:77:
         ec:4e:fa:23:11:54:b3:78:fb:39:3a:f6:99:94:01:66:69:72:
         97:69:d6:18:8e:8e:4c:b4:46:04:2f:f1:8c:c6:4b:d9:85:d7:
         e5:d4:e3:22:64:81:b0:bb:52:49:78:92:32:a1:65:e2:a5:d1:
         ad:26:fb:d6:b7:15:fa:66:85:7c:0d:ff:07:fd:be:46:8e:fe:
         af:98:3e:15:9e:a3:77:7a:d0:31:7d:28:09:d9:99:9c:c9:6f:
         5d:93:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----