Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.mft
File:                     ac22a1e5-62cd-4608-a584-a3d08be071d8.mft (raw, json)
Hash identifier:          P7y7DKsAGMwZzKPbsSmUcNQsHGu8RSGsDDlqiA5eeI8=
Subject key identifier:   54:31:2A:D8:88:59:7C:01:30:EE:E1:7C:F3:CB:9C:20:CC:C8:A4:CA
Authority key identifier: 82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96
Certificate issuer:       /CN=ac22a1e5-62cd-4608-a584-a3d08be071d8
Certificate serial:       010D0C9F43285849813F1145EC42CD3E4F744900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.mft
Manifest number:          010D0C9F43285849411B324A3E2E76737B88E499
Signing time:             Sat 12 Apr 2025 20:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 20:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 20:00:00 +0000
Files and hashes:         1: 04178817-0de3-3778-8d33-af1f0c4f208f.roa (hash: /dhCzOS8H+Vz2dgCILtwVQkeaPt+5kvn1N7n2bbllPQ=)
                          2: 2b69ec88-0999-3936-983b-14aa048586b6.roa (hash: 990ZHfFIHS7a5r8fMNar7i4L+R5WOF6cfzC2M5FYH7Y=)
                          3: ac22a1e5-62cd-4608-a584-a3d08be071d8.crl (hash: Bc7NYIAOmUXQOwAQfjM2HZlrepme3HGBzN9V9D8cjjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:3f:11:45:ec:42:cd:3e:4f:74:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac22a1e5-62cd-4608-a584-a3d08be071d8
        Validity
            Not Before: Apr 12 20:00:07 2025 GMT
            Not After : Apr 14 20:00:00 2025 GMT
        Subject: CN=26984f9e-38cf-485e-be41-aa3aa0be856d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:78:ac:87:3f:62:62:98:4c:66:ce:61:65:
                    8d:00:98:5e:fa:db:96:16:2a:c7:1f:b9:50:1c:ba:
                    0f:fe:33:c2:ad:f0:09:08:5a:82:b5:b5:87:c8:81:
                    49:ec:12:9b:70:80:9e:88:87:c3:41:f3:cf:95:a5:
                    68:d6:1e:c1:88:6e:1e:c6:92:99:0c:a8:1c:f7:b5:
                    69:82:41:62:7e:93:67:31:30:4c:a3:60:c1:f3:6b:
                    08:ad:eb:6e:60:7e:68:a5:fe:4f:3b:94:df:af:26:
                    b1:96:c1:ff:97:71:81:38:7d:9b:f4:a9:ef:0f:af:
                    d7:2d:d7:39:6c:6d:5b:2f:72:25:0b:a3:61:66:14:
                    f1:08:9e:c7:42:f3:c4:58:29:e9:da:d7:f7:29:6f:
                    70:e1:df:f0:ec:34:ae:d6:9c:ba:4c:e9:34:7f:b6:
                    ea:d2:14:ba:35:6c:69:aa:0b:eb:30:2d:4f:4a:d7:
                    28:d6:7e:ac:f4:80:6d:d6:76:5f:a5:f6:95:ad:40:
                    f7:8b:c2:c8:fc:41:90:00:e5:02:c5:4a:2e:5c:df:
                    d4:09:88:bd:63:89:fe:4d:74:cc:00:3c:e4:5b:2a:
                    74:c0:82:a5:b4:c5:71:21:bc:bf:17:f2:d7:a6:58:
                    ab:8c:36:14:b9:70:08:cf:f1:1c:3e:c6:14:37:87:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:2A:D8:88:59:7C:01:30:EE:E1:7C:F3:CB:9C:20:CC:C8:A4:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl

            X509v3 Authority Key Identifier:
                keyid:82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:aa:52:99:5b:78:c5:93:01:eb:0f:67:02:a1:3b:ad:21:
         29:8c:cb:9e:2a:f6:6e:d6:e4:89:00:55:cc:c8:dc:4a:88:b3:
         7d:ce:f7:d0:39:7c:d3:33:ab:c9:9e:36:a1:1d:d0:ee:77:5d:
         a1:1e:24:a3:36:fa:22:fb:bd:ff:25:42:36:c4:c6:a7:29:bd:
         8a:30:11:b2:f8:3f:1f:63:3b:c5:2e:2a:15:3c:05:19:ee:9f:
         e7:c3:bb:17:d6:c8:8e:c1:6a:50:06:3c:09:2d:6a:7b:36:26:
         01:57:f9:ea:ce:f1:a7:c3:28:a0:ba:91:0f:fa:2b:66:22:d4:
         83:7b:80:69:29:9b:1b:84:74:cc:8c:3d:a4:2f:99:0b:d7:8d:
         02:06:e4:54:61:dc:fa:61:c2:92:bc:9d:28:b4:c8:65:37:b8:
         69:a7:05:ec:25:ae:88:a4:2b:59:b3:25:af:e7:c2:64:ff:e3:
         4b:5b:82:fc:c7:23:ae:43:b4:51:60:c9:5c:31:d8:22:01:1c:
         39:52:ee:96:d8:a8:29:bd:dc:e6:b4:42:81:8e:c8:e5:d1:ec:
         05:4a:2e:4c:50:13:69:a8:43:81:3f:53:4c:78:9e:e3:a2:13:
         10:56:b4:03:5b:1a:6f:31:33:68:59:95:65:85:ea:70:1f:98:
         42:f2:a2:3c
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBPxFF7ELNPk90SQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyMmExZTUtNjJjZC00NjA4LWE1ODQtYTNkMDhiZTA3
MWQ4MB4XDTI1MDQxMjIwMDAwN1oXDTI1MDQxNDIwMDAwMFowLzEtMCsGA1UEAxMk
MjY5ODRmOWUtMzhjZi00ODVlLWJlNDEtYWEzYWEwYmU4NTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjap4rIc/YmKYTGbOYWWNAJhe+tuWFirHH7lQ
HLoP/jPCrfAJCFqCtbWHyIFJ7BKbcICeiIfDQfPPlaVo1h7BiG4expKZDKgc97Vp
gkFifpNnMTBMo2DB82sIretuYH5opf5PO5TfryaxlsH/l3GBOH2b9KnvD6/XLdc5
bG1bL3IlC6NhZhTxCJ7HQvPEWCnp2tf3KW9w4d/w7DSu1py6TOk0f7bq0hS6NWxp
qgvrMC1PStco1n6s9IBt1nZfpfaVrUD3i8LI/EGQAOUCxUouXN/UCYi9Y4n+TXTM
ADzkWyp0wIKltMVxIby/F/LXplirjDYUuXAIz/EcPsYUN4dRMwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFFQxKtiIWXwBMO7hfPPLnCDMyKTKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzIy
YTFlNS02MmNkLTQ2MDgtYTU4NC1hM2QwOGJlMDcxZDgvYWMyMmExZTUtNjJjZC00
NjA4LWE1ODQtYTNkMDhiZTA3MWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWMyMmExZTUtNjJjZC00NjA4LWE1
ODQtYTNkMDhiZTA3MWQ4L2FjMjJhMWU1LTYyY2QtNDYwOC1hNTg0LWEzZDA4YmUw
NzFkOC5jcmwwHwYDVR0jBBgwFoAUgkbXmAZUuK7KBNsSfpxxXzSXSpYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzIyYTFlNS02MmNkLTQ2MDgtYTU4NC1hM2Qw
OGJlMDcxZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcF6pSmVt4xZMB6w9nAqE7
rSEpjMueKvZu1uSJAFXMyNxKiLN9zvfQOXzTM6vJnjahHdDud12hHiSjNvoi+73/
JUI2xManKb2KMBGy+D8fYzvFLioVPAUZ7p/nw7sX1siOwWpQBjwJLWp7NiYBV/nq
zvGnwyigupEP+itmItSDe4BpKZsbhHTMjD2kL5kL140CBuRUYdz6YcKSvJ0otMhl
N7hppwXsJa6IpCtZsyWv58Jk/+NLW4L8xyOuQ7RRYMlcMdgiARw5Uu6W2Kgpvdzm
tEKBjsjl0ewFSi5MUBNpqEOBP1NMeJ7johMQVrQDWxpvMTNoWZVlhepwH5hC8qI8
-----END CERTIFICATE-----