Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802/947fc2bd-74c8-432b-9285-0869f72e7802.mft
File:                     947fc2bd-74c8-432b-9285-0869f72e7802.mft (raw, json)
Hash identifier:          YGzydddLuz4U0bAFOzC3yF9TXxdmULNWYyZVAJmNth4=
Subject key identifier:   A3:A1:F9:E9:92:38:77:91:CF:BA:7E:63:15:8E:B6:87:54:BD:3F:1A
Authority key identifier: 5C:EF:70:85:61:E0:BB:5C:81:32:7B:27:D1:B8:DA:37:24:F3:EC:09
Certificate issuer:       /CN=947fc2bd-74c8-432b-9285-0869f72e7802
Certificate serial:       010D0C9F432858498374E149B89615458DB59B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802/947fc2bd-74c8-432b-9285-0869f72e7802.mft
Manifest number:          010D0C9F432858487A38E7979F3EEA28750E9C82
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 15:00:00 +0000
Files and hashes:         1: 23ad7a2c-f2eb-3361-a319-017a5cbed941.roa (hash: MTKec5rXx1zthHCzlSEw8M0NdgPBIaGhkCFH8USGzlc=)
                          2: 947fc2bd-74c8-432b-9285-0869f72e7802.crl (hash: qZCCzOd0S8mSMQvMl+viXsGj9PX5IvHSe0UUiACvtvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:e1:49:b8:96:15:45:8d:b5:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947fc2bd-74c8-432b-9285-0869f72e7802
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 15 15:00:00 2025 GMT
        Subject: CN=e695c556-cb8b-46c7-9d71-325fd0b3d5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9a:41:fd:d7:25:fb:0b:d5:ce:9b:ac:cd:da:
                    cb:47:48:df:c4:36:cc:f3:1c:54:da:2f:b9:51:fd:
                    d3:4e:ea:e5:fe:79:9d:e5:a6:08:71:53:65:81:24:
                    2d:85:80:3e:81:f3:ed:0d:02:e0:f3:7d:b7:d4:a6:
                    5f:53:af:ae:85:8e:b2:57:1e:fe:28:d5:7f:9d:9f:
                    c5:56:dd:5c:b4:77:82:26:ba:5e:b1:12:00:47:3a:
                    9b:26:74:65:56:5d:a1:bf:e1:e9:e5:b3:49:ad:65:
                    e2:5b:a3:fb:46:b5:6a:43:7d:f4:ec:1e:96:a8:9b:
                    07:29:3e:85:3c:c2:9c:86:c4:f6:a1:1e:85:6a:b4:
                    01:5f:2c:df:52:96:7b:de:12:bc:93:62:20:89:31:
                    8e:7e:f4:66:3c:48:15:3a:23:a0:b9:2f:bb:6a:9a:
                    4c:db:f9:c3:59:be:02:44:73:ad:80:38:9f:74:92:
                    9d:eb:03:25:f5:ee:90:a1:53:07:45:0f:68:0b:51:
                    16:8b:26:4d:05:2c:5f:c2:0b:24:90:53:55:51:95:
                    d7:b0:6f:c5:10:da:35:64:2c:0f:88:63:10:35:e6:
                    bc:5b:a9:f4:d3:62:60:36:0f:b3:22:50:e1:6c:2d:
                    01:aa:84:db:2a:dd:06:90:42:3c:77:12:75:d3:37:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A1:F9:E9:92:38:77:91:CF:BA:7E:63:15:8E:B6:87:54:BD:3F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802/947fc2bd-74c8-432b-9285-0869f72e7802.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802/947fc2bd-74c8-432b-9285-0869f72e7802.crl

            X509v3 Authority Key Identifier:
                keyid:5C:EF:70:85:61:E0:BB:5C:81:32:7B:27:D1:B8:DA:37:24:F3:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:06:c3:e7:8e:71:be:60:12:74:97:29:b9:53:02:43:c1:
         c2:dd:3a:51:d3:2d:a8:a2:07:48:cb:85:42:c4:64:b5:05:a1:
         aa:11:66:60:0b:92:57:cc:4b:fe:f9:96:b3:dc:f3:50:de:d6:
         6b:af:75:7e:4b:29:90:80:f2:4d:73:10:50:3f:fb:da:62:59:
         a9:d6:5b:94:62:5d:de:4f:06:b7:57:ae:84:6f:e4:5e:ff:4f:
         68:e7:28:76:1b:1a:b4:c5:a7:0f:51:b6:16:59:d9:d6:23:94:
         9c:fb:ca:7e:5e:96:67:34:97:7c:d7:22:b0:5f:31:98:8c:c7:
         02:21:80:b5:99:80:22:d0:81:2c:47:f2:a4:07:90:d4:9e:6e:
         8c:dd:06:cb:e5:cb:a2:c6:ea:1a:21:65:0e:df:d9:bc:ee:a8:
         dc:94:22:db:2a:1f:2d:90:fc:61:ae:bd:6b:81:c4:6b:f5:fb:
         57:c8:ee:12:4c:a9:68:d9:7e:6e:23:b2:6d:9f:20:13:e4:5b:
         a1:02:db:7b:c7:36:25:b5:17:91:7c:b3:10:eb:9c:e8:3b:f0:
         a4:e4:fd:8a:be:ed:75:ee:71:fa:b1:b1:fb:f0:12:a6:27:77:
         cf:84:a5:e0:f7:35:6a:8e:0c:a6:6d:d5:2d:95:98:8a:f2:3c:
         dc:d6:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----