Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27/298e3857-251e-4943-9e53-f26bb0898b27.mft
File:                     298e3857-251e-4943-9e53-f26bb0898b27.mft (raw, json)
Hash identifier:          8d6603qst6RDr4tDUreCDx0pbakjf47p8qdQUZ2HtfM=
Subject key identifier:   0F:50:8D:E8:92:8C:B9:6F:BE:76:2E:72:BA:0B:58:C5:55:7A:A7:A2
Authority key identifier: AE:36:CB:F4:DD:11:99:88:FD:61:33:E7:A6:EA:8F:17:1F:DD:6E:30
Certificate issuer:       /CN=298e3857-251e-4943-9e53-f26bb0898b27
Certificate serial:       010D0C9F43285845F01DCA523954D52A7A07BCC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27/298e3857-251e-4943-9e53-f26bb0898b27.mft
Manifest number:          010D0C9F4328584073A820F0192E3DB7ADFF5C77
Signing time:             Mon 20 May 2024 18:00:04 +0000
Manifest this update:     Mon 20 May 2024 18:00:04 +0000
Manifest next update:     Wed 22 May 2024 18:00:00 +0000
Files and hashes:         1: 298e3857-251e-4943-9e53-f26bb0898b27.crl (hash: mgqs2Cb0UxVRJtvzEBPLexKBTLbX7hn9ekOLBUARQjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f0:1d:ca:52:39:54:d5:2a:7a:07:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298e3857-251e-4943-9e53-f26bb0898b27
        Validity
            Not Before: May 20 18:00:04 2024 GMT
            Not After : May 22 18:00:00 2024 GMT
        Subject: CN=2ab82d76-a443-46db-a450-71d721b000b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:ef:5a:b9:5a:fc:29:b1:9e:25:b6:96:6b:
                    87:22:9f:b6:ab:52:df:a2:18:88:7f:f5:07:02:c1:
                    26:f9:aa:40:9a:bd:b1:18:d9:5a:20:58:cc:dc:19:
                    49:c2:12:89:b2:b5:e2:65:f8:9b:72:c5:4f:e6:c3:
                    41:5f:d9:0a:0f:e4:10:ec:ea:1e:6b:c6:69:76:1e:
                    49:08:25:60:b6:7f:9d:0c:0c:5c:12:34:00:f2:50:
                    33:ed:c2:50:e9:46:c4:35:11:52:6a:4c:b6:69:85:
                    d2:df:47:e2:10:ed:2c:f2:ec:70:47:84:b7:cf:53:
                    82:0d:bb:93:7a:97:a8:f7:00:15:61:0c:52:0c:c8:
                    ff:77:84:3a:d7:b9:a3:97:87:66:21:ac:84:18:3a:
                    d7:e5:0d:e2:ee:6c:54:86:5e:b1:11:05:0d:ff:e2:
                    12:55:d9:b9:b0:ac:be:30:41:db:b4:25:97:69:4b:
                    dc:78:b4:6d:c9:00:34:08:af:ba:1b:35:d2:f4:69:
                    4b:f8:e6:5a:ff:99:3f:1e:7d:8b:c5:ed:30:eb:8f:
                    87:9a:b8:6a:56:0d:6f:43:ac:9c:6f:7e:85:c8:81:
                    7f:53:0d:24:fd:2c:bd:c7:2a:59:e2:5c:f0:fe:04:
                    80:60:19:29:68:d5:3e:d0:97:ac:7f:a5:58:d9:dc:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:50:8D:E8:92:8C:B9:6F:BE:76:2E:72:BA:0B:58:C5:55:7A:A7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27/298e3857-251e-4943-9e53-f26bb0898b27.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27/298e3857-251e-4943-9e53-f26bb0898b27.crl

            X509v3 Authority Key Identifier:
                keyid:AE:36:CB:F4:DD:11:99:88:FD:61:33:E7:A6:EA:8F:17:1F:DD:6E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:de:c9:2b:c8:bb:6e:62:0c:97:89:14:10:23:b8:88:ff:
         19:76:97:53:04:2b:92:47:43:da:78:5e:a5:ac:f9:c4:c9:99:
         3f:45:ad:6b:8b:8f:89:8f:2e:64:76:52:fe:66:4d:7d:4d:aa:
         fb:72:56:68:cc:60:69:6e:0c:87:ff:f6:49:c6:18:50:fc:d8:
         c2:4e:4d:81:e7:45:55:84:e0:54:45:31:dd:4c:87:a1:b9:ac:
         3d:12:f3:11:f7:e8:e1:0e:7d:67:03:6e:b5:87:00:4b:14:d3:
         b4:28:5b:2b:25:6e:8a:79:4e:6b:b8:72:e8:ad:18:3e:6e:8f:
         a4:0c:10:1b:54:87:81:8c:a9:58:b5:6c:3d:67:48:31:76:6e:
         5c:ab:5d:e0:c2:85:78:a9:f4:43:1f:d3:0c:c2:95:e0:f2:15:
         64:c8:94:5b:df:92:19:6b:86:35:08:e5:10:4f:e7:9f:ae:99:
         93:82:b5:b3:ca:5e:4b:21:97:1e:c0:a5:10:cd:6e:93:d4:1f:
         db:8a:49:28:d1:be:30:95:df:40:89:b3:a2:45:57:f9:3b:d8:
         d4:e8:58:52:e2:cc:7f:d6:16:e4:53:3f:a1:02:13:a7:a1:34:
         9b:49:92:b8:86:6b:53:87:e5:f5:52:85:9c:82:c9:97:6a:08:
         74:c9:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----