Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
File:                     dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json)
Hash identifier:          FMpQlxNyC3P29euKzPpFkRxaNkl+TfyhwqyLA1CrLL4=
Subject key identifier:   77:81:81:E6:3E:FE:DD:4B:C9:B8:D8:C5:DD:D9:98:B2:7B:A0:54:46
Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE
Certificate issuer:       /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
Certificate serial:       010D0C9F4328584980E5BDCB1C623E1F6C788F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
Manifest number:          010D0C9F43285843E05DB4B41D1D11863F6C3591
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 17:00:00 +0000
Files and hashes:         1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: /dPPFFxpFvDZZLtrdmb3UWay8LBNplwvNOPZuuhe/9k=)
                          2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: kjFwVQ7N5EVHDd928CeJPV2JUKo8XKOj7cW6D5rkl0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:bd:cb:1c:62:3e:1f:6c:78:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 15 17:00:00 2025 GMT
        Subject: CN=99ec33d1-b75a-4bc6-acc8-3ca74ee84430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:18:5d:e3:32:e8:bf:69:99:b5:33:ee:60:
                    fb:cd:3a:c5:57:87:73:b0:e3:c7:81:cf:f3:04:a9:
                    33:6d:99:6d:4c:d0:73:63:53:7e:2b:7b:7d:a0:05:
                    9f:2b:5b:68:9e:0d:69:74:c4:7f:de:10:8a:c5:8f:
                    a4:a8:8d:78:e4:89:c3:05:24:af:99:8e:c6:58:b7:
                    94:05:0a:4b:52:ed:58:77:40:32:da:2e:2b:c5:17:
                    bb:8d:2c:42:3f:55:1b:33:64:c6:a2:e3:6e:76:8b:
                    99:68:f4:fe:93:74:b0:83:b7:7b:48:02:eb:9d:c3:
                    81:ee:f1:8e:34:e1:7f:01:ce:fe:80:4e:1c:0a:8e:
                    0a:e1:67:93:b0:70:03:c5:bb:66:52:bc:56:58:05:
                    6f:6a:2b:8a:34:21:c7:bb:86:9d:14:90:01:b8:cd:
                    b0:40:73:2f:cd:19:a6:c6:2f:ab:27:1f:bd:a4:87:
                    1f:1b:e5:40:6a:a8:7e:0b:dd:f1:61:50:00:53:7e:
                    54:2b:01:df:f3:14:5b:ef:99:01:64:1b:b8:2a:29:
                    87:56:03:5c:99:76:81:eb:48:10:6c:06:a6:07:07:
                    08:38:25:bc:d8:6e:4a:2a:cc:5b:16:1a:59:39:d8:
                    61:fb:04:52:a2:42:77:14:b9:2a:ab:36:98:d2:e9:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:81:E6:3E:FE:DD:4B:C9:B8:D8:C5:DD:D9:98:B2:7B:A0:54:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4a:45:c0:6b:5b:68:99:1c:8c:f5:33:01:6c:ba:a7:82:39:
         43:75:65:8b:f9:4f:fc:d4:09:16:2c:d4:e1:fa:4f:4f:cd:e7:
         cd:0a:93:a9:88:f6:e0:a9:9c:ed:ae:16:47:95:26:4d:46:be:
         37:78:4a:ce:11:4b:95:d5:b2:2f:09:68:d4:9f:56:e7:86:6d:
         b6:fa:eb:ab:d2:96:d7:82:d6:c1:66:9b:e4:ad:13:d7:98:79:
         0c:df:9b:8d:e9:28:98:c7:d5:d1:a2:ac:eb:f2:07:c3:36:d3:
         c2:a2:96:eb:aa:8a:ed:7d:94:ee:03:5b:58:64:67:4c:49:51:
         7f:68:0c:c5:2f:da:5f:5e:b2:81:1b:22:6f:63:14:f6:10:3f:
         6e:6f:e5:5f:dd:56:4d:09:8f:91:3c:48:ac:78:3e:f2:33:ce:
         39:a4:9b:cb:a8:27:08:54:89:3a:5b:da:74:07:ae:a3:46:03:
         32:af:75:93:5c:da:e6:3e:cd:2c:69:ac:9a:d2:c2:41:91:40:
         2f:11:7f:75:4e:40:cf:da:e7:a6:30:17:83:67:74:00:f4:fc:
         d9:53:5c:ca:ab:21:ab:9c:75:93:22:66:5d:3e:74:b4:43:33:
         21:fd:f4:3f:d3:5b:f0:b7:03:86:d9:6b:99:da:a8:aa:a0:01:
         b6:6d:f5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----