Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft
File:                     30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft (raw, json)
Hash identifier:          9iLBnYdm1hjzKJL32H3ePzPnF7nQERmQUtyKAtnWeT0=
Subject key identifier:   8F:1D:F1:A8:F6:58:E3:74:3D:2D:35:AE:B0:4B:53:B9:78:DF:E5:82
Authority key identifier: 3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53
Certificate issuer:       /CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
Certificate serial:       010D0C9F4328584982A4696252B2C84934C4E860
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft
Manifest number:          010D0C9F4328584073A848BFA16303543AE820D2
Signing time:             Sun 13 Apr 2025 08:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 08:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 08:00:00 +0000
Files and hashes:         1: 066aa71d-ecb5-3507-ab13-9e0344c68899.roa (hash: w1czsXgr+f3dQP+RKGBrn1WH2xrhN7GZk666FJ8tkvc=)
                          2: 30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl (hash: EkCvhGfyslq1jZ627/LUJXXnLsPyEhjcwXQ61UwcHKE=)
                          3: 5c834625-9800-3718-ba47-cf93c4317d4b.roa (hash: 6tOjnmlqXld3KVcEue4ku5yHQoaHehtANd3yYJRkhdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:a4:69:62:52:b2:c8:49:34:c4:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
        Validity
            Not Before: Apr 13 08:00:07 2025 GMT
            Not After : Apr 16 08:00:00 2025 GMT
        Subject: CN=3b39eee3-9226-443f-9bd4-1d32e225a110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:f3:6b:5b:ca:d2:35:00:f1:63:e4:a1:f0:
                    ed:b2:d6:8e:92:68:58:66:2b:63:73:7c:57:11:84:
                    c0:fd:52:55:a2:da:8b:1b:7d:50:d2:10:c2:a2:19:
                    bf:5b:21:27:49:88:dd:9d:44:65:c4:af:21:b3:af:
                    98:a7:b0:b4:ee:d7:28:25:2f:78:47:0c:c7:3b:54:
                    a1:23:85:6f:79:cf:21:33:94:66:87:f4:f7:45:3a:
                    cb:e2:1e:bc:d0:0e:9a:e2:f0:93:7f:5c:72:8e:99:
                    d1:f7:f3:c2:af:35:ea:30:45:d1:a9:e0:0f:f4:9e:
                    4e:dd:58:db:4b:00:b3:7c:d6:a6:c3:9e:89:01:cb:
                    41:6e:2d:a8:bd:28:fe:eb:17:30:62:a6:97:e9:24:
                    ab:db:8a:eb:49:8b:60:18:f0:f2:c0:68:98:30:29:
                    ed:03:11:ef:c5:27:24:65:48:82:da:cb:9e:e4:03:
                    96:d9:ca:47:07:1c:c0:75:02:d3:04:bc:77:ed:29:
                    3e:3d:e5:db:64:40:4c:7c:62:11:36:58:a7:d0:0c:
                    27:b5:f0:65:f3:71:af:88:9d:7f:66:3e:ed:e3:9c:
                    51:c1:51:07:d0:c6:6f:29:d1:5d:c2:57:61:81:8e:
                    63:87:22:24:16:92:03:ca:d2:24:05:72:36:2c:fc:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1D:F1:A8:F6:58:E3:74:3D:2D:35:AE:B0:4B:53:B9:78:DF:E5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:9f:d3:bf:b5:14:cc:41:ea:c8:2a:9d:63:6c:7f:56:cf:
         6d:28:1c:62:f7:25:ee:29:1d:28:09:f5:25:d8:2c:13:23:a1:
         9f:8e:f3:2f:54:3d:ad:b3:93:4a:b7:e4:64:03:79:cc:d3:ae:
         d8:40:af:a2:43:bf:92:5f:fb:a2:17:bb:43:f2:79:c5:96:b7:
         63:4d:8d:d9:76:be:f7:bf:a5:ce:78:0d:13:94:b3:4d:cb:53:
         06:c1:5e:85:35:fd:de:dd:a9:c0:c4:7b:c1:c2:21:84:ab:5e:
         78:7e:a8:99:2f:89:5e:5a:7b:19:70:89:d6:b4:8e:87:c1:11:
         7c:90:da:6e:4a:8b:9b:76:94:60:9a:9d:6c:67:56:bb:42:40:
         9b:5f:e9:69:6f:f8:8a:28:96:2d:6c:d9:ef:95:4d:3f:bc:44:
         36:a4:25:4a:17:cf:76:97:8e:27:a5:3e:93:c7:61:01:94:e5:
         8f:6c:39:db:d9:63:0c:b7:14:92:b4:25:25:17:af:39:b4:a8:
         ec:43:2a:01:2f:43:16:5e:7f:22:47:9f:ca:16:2b:17:0b:c5:
         21:52:bf:29:42:86:bf:e9:9b:b9:25:ab:c1:06:03:ae:a3:e4:
         5d:96:7d:bf:11:13:5a:c5:53:53:22:58:57:33:cf:3c:8a:8c:
         c6:22:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----