Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
File:                     FDCCEA4A550B41E852B336E71792E53657E4F280.mft (raw, json)
Hash identifier:          dfy18FBn662zWzr+DInKc7yR66W3u2YCGliKBvA2LNs=
Subject key identifier:   17:D4:6C:B5:7A:BE:A6:7F:52:FD:4C:22:B5:0C:D1:BB:EF:FB:75:62
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       06E946EDFDB7FBB0F00309F6B8580880B9A51927
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
Manifest number:          DC
Signing time:             Wed 15 Jan 2025 19:51:07 +0000
Manifest this update:     Wed 15 Jan 2025 19:46:07 +0000
Manifest next update:     Thu 16 Jan 2025 20:20:07 +0000
Files and hashes:         1: 323630323a666266313a3a2f33322d3438203d3e20393833.roa (hash: A9YDAJ36MpptHtbvo0SJ8zkIeZvA+JVTMrXLi/S349I=)
                          2: 323630323a666266313a3a2f33322d3438203d3e203338313336.roa (hash: bFcShiqwk36II35NKTsv/FRpWSGAxGXGmTgfevuDCWA=)
                          3: 32332e3138352e3230382e302f32342d3234203d3e203338313336.roa (hash: 4qwS/3li5+ypeu0+iBRu6+hCIVE4yNrI497/d3uPWiE=)
                          4: 32332e3138352e3230382e302f32342d3234203d3e20393833.roa (hash: by/rVapeQT1hw57+SO3qzeEp8CblY9MfR5Z9u3BwDVE=)
                          5: FDCCEA4A550B41E852B336E71792E53657E4F280.crl (hash: hCSNpe3NoNaKVW+l5fXC26E6iQ/ljGW23E0d1zBI9bM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e9:46:ed:fd:b7:fb:b0:f0:03:09:f6:b8:58:08:80:b9:a5:19:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Jan 15 19:46:07 2025 GMT
            Not After : Jan 16 20:20:07 2025 GMT
        Subject: CN=17D46CB57ABEA67F52FD4C22B50CD1BBEFFB7562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:2a:6a:d8:cd:59:74:da:80:10:21:6a:dd:
                    ab:b3:07:4f:73:2e:c5:77:aa:58:cc:ee:ff:07:ff:
                    23:93:63:25:a2:39:37:ba:99:89:04:c9:a0:62:c5:
                    c8:f4:e8:7a:b5:bf:8c:73:16:f3:d2:f0:23:2b:cd:
                    11:d3:92:a3:3f:b6:56:80:31:dc:19:f9:a4:13:89:
                    f6:fb:ef:51:58:ea:13:ed:61:8a:c8:78:c7:54:33:
                    0e:34:6f:4a:29:3a:d4:d2:f6:7c:91:81:df:4d:a4:
                    61:50:f4:aa:51:05:cd:4e:96:bd:93:2b:8d:83:17:
                    0a:68:31:3c:82:c1:64:af:66:02:fc:bc:1f:74:36:
                    95:6d:e8:d4:02:77:c5:49:da:59:2f:7a:c0:a6:3b:
                    7c:26:97:b9:14:dc:1f:d0:13:0c:cb:fa:00:08:1a:
                    35:68:a8:20:d7:c7:e6:42:01:84:00:76:8e:b6:17:
                    d4:53:fd:aa:b8:87:ba:4a:e9:07:8b:2e:49:40:c7:
                    fe:60:5b:86:f9:fc:b4:12:1c:d7:7b:df:33:05:7c:
                    c0:da:75:fe:03:80:ed:9c:6b:f2:5c:cb:40:94:1d:
                    f8:58:6f:71:a5:30:2d:59:fa:c2:2c:71:16:dd:8b:
                    c1:f7:34:1b:ea:20:e3:bd:2b:49:a7:d0:50:3c:04:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:6C:B5:7A:BE:A6:7F:52:FD:4C:22:B5:0C:D1:BB:EF:FB:75:62
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:95:ca:f0:b4:65:7a:55:45:63:2c:9b:20:26:09:19:a4:ea:
         67:6a:97:da:b9:82:d5:d0:7b:2a:f8:7b:d8:45:e2:16:4a:0c:
         a1:5a:0a:b1:97:b3:6c:9d:59:bd:b3:10:e7:12:4d:9d:36:83:
         11:a3:a9:ed:d4:1b:c6:02:d3:d5:50:dd:36:06:8d:cb:de:94:
         55:58:1a:94:44:c9:2e:89:9c:9b:00:cb:e3:5c:ac:ab:05:34:
         1a:0b:28:01:c9:71:bf:8c:28:9d:01:14:b8:71:94:87:1a:f3:
         e7:f2:2a:7c:cd:4d:ff:b6:f5:9a:82:93:8d:79:39:98:81:31:
         f3:b3:a9:82:78:bf:f1:7c:89:cc:da:46:94:41:e5:53:cf:02:
         dd:62:e6:3a:7c:3c:cc:b7:0c:d1:5c:79:14:30:49:52:b5:35:
         f0:28:a6:ab:dd:fe:5e:4f:20:3e:b6:3c:eb:12:da:56:0e:94:
         eb:fe:93:73:10:03:6b:d6:d4:fe:ce:b7:fd:c8:a1:d2:bd:99:
         72:e8:4d:4f:7f:f2:68:08:12:fe:83:8f:09:06:5c:2b:36:73:
         ec:06:80:81:64:36:a4:37:77:27:74:5a:3b:01:e9:1e:97:d8:
         45:d7:75:81:9f:12:92:4e:66:0b:68:ea:bf:b7:87:0b:86:fb:
         a9:49:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----