Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft
File:                     d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft (raw, json)
Hash identifier:          AC6zLOWi5xiT94U8YMV3IfyBhv6kR/VcpcfU5vFjOgY=
Subject key identifier:   EF:4D:D9:EA:E6:8D:53:B0:1D:E3:E6:BC:17:CA:FE:2A:37:D5:84:1E
Authority key identifier: D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95
Certificate issuer:       /CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17
Certificate serial:       010D0C9F4328584980C7F5C17058563A1BB47D0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft
Manifest number:          010D0C9F43285848DEF5156944A3972879EB762A
Signing time:             Sat 12 Apr 2025 16:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 16:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 16:00:00 +0000
Files and hashes:         1: b99947be-7e5a-35fa-9bd3-c515c73e9b0c.roa (hash: KVYGxHxgfqvfFugHT3SrIsmdzk7h7gKpTzsuavlTPZo=)
                          2: d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl (hash: vod/ASnYpnnD0FQtdWUuGGzuRPZvRyZLLbPaS9+0P9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:c7:f5:c1:70:58:56:3a:1b:b4:7d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17
        Validity
            Not Before: Apr 12 16:00:07 2025 GMT
            Not After : Apr 15 16:00:00 2025 GMT
        Subject: CN=560068d7-775a-46ed-8a05-e1ece57ae315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:88:67:d9:5b:04:d8:f5:00:21:47:e8:69:
                    61:c6:81:09:8b:b0:6d:62:6a:3c:c1:f8:00:3f:a3:
                    79:d8:4a:22:1c:cd:2f:31:5d:23:63:f2:f8:18:29:
                    c4:79:19:23:4f:15:ee:1e:c6:34:5d:c3:5d:ff:d8:
                    d4:6c:1e:8c:aa:79:b0:40:c9:46:1d:1f:28:66:d6:
                    46:7a:b0:0b:43:0e:df:02:aa:3c:73:b8:be:42:2d:
                    92:29:06:cd:e0:4d:7e:7b:1f:8b:63:20:fd:0b:4a:
                    f5:48:4d:e7:fc:8d:39:c7:2e:ba:c2:25:91:84:ff:
                    94:11:2e:85:6a:23:8e:d2:dc:11:39:da:8b:a8:5a:
                    b7:93:09:4d:04:ee:52:07:23:6d:c3:d5:ff:d1:7a:
                    ba:12:d5:91:a7:fa:f5:5b:4e:55:62:84:32:d4:8b:
                    f5:2f:ef:8b:8f:0a:0e:3e:5e:7e:b5:9e:37:85:53:
                    6c:27:b3:26:fa:7d:15:37:c4:de:12:90:69:63:bb:
                    88:36:2e:11:98:37:70:48:8a:da:23:3a:ef:f4:d6:
                    68:cf:97:ce:17:2c:4c:53:e6:01:5d:73:28:6b:e0:
                    0d:a4:ef:80:67:3d:37:2a:13:12:6c:d9:47:d5:11:
                    d0:90:43:99:42:eb:bc:89:fd:ae:1d:cf:4c:b5:f9:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4D:D9:EA:E6:8D:53:B0:1D:E3:E6:BC:17:CA:FE:2A:37:D5:84:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.crl

            X509v3 Authority Key Identifier:
                keyid:D1:8E:3F:84:49:98:82:D7:24:A2:C8:3F:24:E3:63:0B:16:31:62:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d1ef4b38-b5dc-4b37-90b5-eb9e262bfa17.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:65:4c:84:2a:dd:7c:39:94:62:1c:75:44:4b:3b:bc:23:e6:
         bf:17:38:09:f1:aa:91:c1:e8:db:21:e1:e2:c2:68:40:ba:23:
         9a:87:37:62:2e:5b:e9:ba:bc:6f:06:af:11:8c:45:a2:0a:7f:
         33:f5:4d:52:90:9c:66:e0:b8:c8:25:2b:69:0b:5f:e3:91:8c:
         dc:7d:90:68:7f:70:78:cc:60:03:f4:ea:33:9d:e5:4f:e7:d5:
         b3:e8:2c:8a:39:68:5a:77:28:1c:4d:3c:85:a1:4a:fb:c2:e4:
         fe:cf:f8:f2:b8:bf:74:87:fb:d3:15:46:8a:8b:f3:2b:5e:ce:
         ea:5d:46:f6:7a:92:cd:96:9f:cd:b9:88:26:5a:48:c4:9f:59:
         b8:97:6b:27:98:3e:b1:cd:29:9a:aa:92:81:e6:fc:90:d2:ea:
         d2:34:62:b0:9d:da:72:89:0d:f7:6c:34:c9:e1:67:24:30:43:
         0f:63:30:6f:52:fa:da:58:b7:ed:d1:55:f6:cc:28:12:d7:9d:
         f9:24:11:64:00:db:b5:1a:e7:44:60:09:b8:50:04:fa:ca:70:
         a8:7c:dd:fd:e9:8e:63:ac:09:1f:4f:54:6f:04:b8:a3:3a:58:
         51:2a:7e:7f:8a:cf:17:09:5f:ec:db:09:10:35:72:07:68:e4:
         88:50:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----