Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.mft
File:                     DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.mft (raw, json)
Hash identifier:          3AH8r5zI9xmVbeoJniaHxRxtX1aosvCDDPxskEpB+8M=
Subject key identifier:   3C:65:B4:41:62:CA:DB:C8:1C:F2:2F:36:53:D8:BA:08:D2:C9:D3:31
Authority key identifier: DE:AC:9A:97:2D:6E:09:98:C9:8D:CF:45:67:A8:89:FE:2B:31:8C:2C
Certificate issuer:       /CN=DEAC9A972D6E0998C98DCF4567A889FE2B318C2C
Certificate serial:       510993FF6ECF5E06A7CAA2A90A63C28DE184308C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.mft
Manifest number:          04
Signing time:             Fri 11 Apr 2025 12:09:16 +0000
Manifest this update:     Fri 11 Apr 2025 12:04:16 +0000
Manifest next update:     Sat 12 Apr 2025 13:54:16 +0000
Files and hashes:         1: DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.crl (hash: mQ8zUEj8w2hJW+ZTVU8aDW8F/N2DlvNePt7UcwmMNUs=)
                          2: 3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer (hash: SwdORlwHp6sgH0YCfgxJdgcyC6Sw0mc7ml/dTGvyCw4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:09:93:ff:6e:cf:5e:06:a7:ca:a2:a9:0a:63:c2:8d:e1:84:30:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC9A972D6E0998C98DCF4567A889FE2B318C2C
        Validity
            Not Before: Apr 11 12:04:16 2025 GMT
            Not After : Apr 12 13:54:16 2025 GMT
        Subject: CN=3C65B44162CADBC81CF22F3653D8BA08D2C9D331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:13:eb:37:8b:8b:0e:d6:13:0f:ad:30:e5:
                    7e:53:df:b7:dd:90:71:a3:3d:f4:e9:a8:42:c5:d3:
                    fd:42:c9:ba:cc:d6:44:66:94:8b:c5:ce:64:30:cd:
                    4a:b7:fe:bf:95:be:f6:40:a8:a8:e3:c8:f3:97:3a:
                    46:21:9f:a9:0c:4a:1b:8d:71:a2:7d:af:e5:fa:e5:
                    f7:61:ac:d9:c8:fc:cd:ca:6c:86:49:bd:f5:51:4f:
                    7f:9c:68:4c:81:09:34:64:e5:78:34:c1:0b:fd:6d:
                    88:55:6e:97:e7:47:8f:4a:43:00:cb:2c:66:a2:10:
                    2a:86:41:a2:a8:3a:55:21:c3:b6:e4:82:1c:db:4e:
                    67:46:4e:ce:5b:90:f2:fc:99:f6:35:97:05:3b:ca:
                    d7:e6:2d:bb:6f:aa:63:0e:8e:ad:bb:a7:24:3f:af:
                    25:15:cc:8c:da:4a:f9:ae:08:79:2f:9c:3f:bf:0d:
                    55:7a:9c:19:5b:d3:65:24:3c:f7:d0:25:8f:4f:63:
                    68:19:6e:00:d0:52:77:a4:85:77:1c:a4:ce:56:90:
                    92:35:f1:c2:50:65:b2:d7:be:1a:fc:31:f2:c6:5c:
                    85:10:68:59:0c:1f:1d:a1:e7:92:f9:f9:3b:f8:89:
                    34:89:8b:74:05:fd:0d:ee:37:d1:aa:89:66:c9:d3:
                    fe:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:65:B4:41:62:CA:DB:C8:1C:F2:2F:36:53:D8:BA:08:D2:C9:D3:31
            X509v3 Authority Key Identifier:
                keyid:DE:AC:9A:97:2D:6E:09:98:C9:8D:CF:45:67:A8:89:FE:2B:31:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c6:64:19:fe:2a:c1:f4:dc:99:cf:68:08:2a:2a:71:9f:eb:
         36:76:d0:2d:37:bc:4e:94:f5:de:5c:70:56:3f:91:99:a8:9d:
         4d:26:c8:7f:86:cc:f6:1b:97:c8:30:3c:26:dd:66:67:c2:34:
         a5:a7:30:b8:f9:7d:13:a8:4d:3b:aa:b6:87:1c:ef:ca:2b:23:
         85:95:b9:85:5d:b4:c1:90:62:8e:45:ec:1f:ac:10:47:5f:c0:
         17:6a:89:e8:28:46:63:8b:82:52:8a:05:c1:0b:d4:96:80:30:
         c1:15:74:a9:fb:b1:8c:99:37:1a:da:f3:b2:ed:8e:67:ca:d7:
         65:56:a0:76:57:4b:a1:f1:d9:22:75:99:79:89:a6:11:6e:c9:
         75:ff:3c:7a:5d:11:49:28:9a:90:24:dc:5f:1f:a9:d1:3d:12:
         78:32:5b:bb:72:b5:8a:d8:65:f9:33:de:27:a3:67:b4:75:01:
         99:d0:f8:42:5d:48:89:13:ee:17:50:54:de:da:4a:fc:34:19:
         f6:61:54:9d:fd:90:61:fe:7d:9f:ab:01:2d:c4:00:d4:97:de:
         01:16:75:e1:59:7c:59:46:35:cc:c8:85:c4:5c:4b:64:b6:9c:
         cf:1e:0b:b6:bb:5a:ed:39:e4:93:5b:17:a8:ef:78:7f:33:93:
         e7:5a:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----