Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft
File:                     8f1868fa-3526-44ef-8aae-27ceceb072f9.mft (raw, json)
Hash identifier:          5DuotgRBiu4Pkg/MjNbkdVJDBSyrM1vr4pztkS044Xo=
Subject key identifier:   FA:21:F6:E0:22:EE:1F:6C:8E:0C:4C:00:AE:AB:8D:B2:D4:5F:FB:27
Authority key identifier: AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B
Certificate issuer:       /CN=8f1868fa-3526-44ef-8aae-27ceceb072f9
Certificate serial:       010D0C9F4328584982DFFC4246E99A95BB183120
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft
Manifest number:          010D0C9F43285848B9ED988D097D7C0617AD8744
Signing time:             Sun 13 Apr 2025 10:00:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:08 +0000
Manifest next update:     Wed 16 Apr 2025 10:00:00 +0000
Files and hashes:         1: 32d5d338-6c80-3c57-b95f-211211f7467e.roa (hash: c28QgEwr+HXtO51nVtRwgjKVit5SpbcJOyWS6AaPXiM=)
                          2: 8f1868fa-3526-44ef-8aae-27ceceb072f9.crl (hash: /w4Zuxq0YUh0i1L3t40I/uLK5yCD3gde4C137WPvFgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:df:fc:42:46:e9:9a:95:bb:18:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1868fa-3526-44ef-8aae-27ceceb072f9
        Validity
            Not Before: Apr 13 10:00:08 2025 GMT
            Not After : Apr 16 10:00:00 2025 GMT
        Subject: CN=dd2a5714-ed2a-4714-a6d1-36d2795d9b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:08:20:2e:44:d9:47:38:31:60:36:9d:ba:
                    4f:8f:de:85:4a:35:f3:cf:6a:c3:09:a8:97:4a:1b:
                    4b:5d:b6:f6:ec:2f:a9:ba:e8:51:ad:77:7b:fc:4d:
                    70:18:da:f9:6f:2f:aa:08:09:5b:9d:9a:c2:3b:c0:
                    19:fe:20:e0:06:4d:96:da:57:15:bf:fd:7e:72:a8:
                    a4:94:ed:ee:0c:6f:f5:78:8f:a2:1f:06:79:5c:64:
                    3e:d4:f2:ba:38:2e:6a:22:2a:a4:ef:a3:72:f0:6f:
                    cf:0c:e7:11:62:0c:b1:74:f3:12:5e:f1:d3:92:21:
                    39:6e:51:e5:9a:dd:e8:bf:ed:05:c9:2e:29:f4:9e:
                    8f:83:ed:f4:df:1c:d1:2a:3c:d1:e2:4a:34:b6:ff:
                    97:63:d8:ea:fc:23:7f:54:29:f6:6e:34:5f:2a:b6:
                    8d:3f:e1:db:6d:37:ed:d5:d0:2c:1c:03:42:17:ab:
                    dc:8c:41:b4:ea:cc:78:fe:fa:98:46:a4:62:c9:e9:
                    eb:59:e6:c2:12:72:1e:0e:56:fe:94:ba:b0:61:b1:
                    17:8d:69:1c:52:27:e5:43:0b:fd:24:4d:d6:c6:a4:
                    1a:30:4e:e2:35:ba:4f:eb:bb:54:3a:71:ee:ce:89:
                    b3:a6:02:5a:77:04:7a:d3:1a:0c:c4:92:3f:e2:38:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:21:F6:E0:22:EE:1F:6C:8E:0C:4C:00:AE:AB:8D:B2:D4:5F:FB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.crl

            X509v3 Authority Key Identifier:
                keyid:AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:67:39:fa:93:36:c6:7e:9c:c6:30:00:33:00:5a:ff:c9:14:
         a9:5d:ac:48:65:1f:ae:67:aa:5e:17:8b:49:3d:3a:27:f1:1b:
         65:45:79:87:4f:8f:16:bd:dd:72:93:2b:4c:34:36:5e:fb:f4:
         f3:fe:c3:8a:12:73:eb:7f:13:04:88:7e:07:79:3d:ad:a5:b0:
         12:08:05:e0:9c:24:03:28:a1:34:63:01:b7:b4:74:3b:b0:6f:
         eb:44:29:49:e5:0d:16:a9:3c:44:04:86:ba:e8:9e:14:35:5c:
         ea:4d:26:e5:24:a0:7c:6e:cc:d7:ce:0b:46:00:e4:4d:b0:82:
         83:a1:36:91:98:c7:50:92:e4:ab:1b:9e:a9:71:cf:bb:5b:b1:
         6b:80:6e:34:b4:49:5d:ab:27:55:ff:37:92:4f:18:3c:37:d5:
         68:25:a2:8e:29:c5:0e:14:6b:d4:09:ff:10:1d:c9:99:f4:c1:
         b2:2c:1b:5b:3b:a8:d4:90:87:31:0d:1e:32:4f:54:64:5a:1c:
         f8:eb:5f:88:85:f0:fa:c8:1c:47:0e:df:c7:01:4d:06:83:4e:
         80:8a:85:31:a8:37:b9:a8:00:40:39:72:33:8e:3c:df:9b:07:
         31:e1:f6:6f:74:4f:6e:60:3f:7e:1c:c0:39:e5:49:d3:0f:f0:
         c8:d6:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----