Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d/bb7d36ce-781e-438a-a96a-361f84100a0d.mft
File:                     bb7d36ce-781e-438a-a96a-361f84100a0d.mft (raw, json)
Hash identifier:          JrcTubQfixXnaO+U8eeNLBc1NQFbnEAw/ttaYvY5NVw=
Subject key identifier:   03:90:63:8A:AF:3B:05:12:18:FD:E8:9C:AC:8C:06:D7:94:AA:BB:1E
Authority key identifier: 42:30:A5:DA:EE:1A:50:7C:19:C9:AE:F8:3B:36:D6:63:A9:62:3F:5A
Certificate issuer:       /CN=bb7d36ce-781e-438a-a96a-361f84100a0d
Certificate serial:       010D0C9F4328583E884BE010BD81E0BA9349B300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d/bb7d36ce-781e-438a-a96a-361f84100a0d.mft
Manifest number:          010D0C9F4328583E884BE028982C4B4BB8145900
Signing time:             Mon 11 Jul 2022 16:00:16 +0000
Manifest this update:     Mon 11 Jul 2022 16:00:16 +0000
Manifest next update:     Thu 14 Jul 2022 16:00:00 +0000
Files and hashes:         1: 4049302f-c165-32df-8b45-46daa0adfc30.roa (hash: YPhFFwjCViU7Wbvi0pqb09mSzIOL4alAXYqjhmtw+OY=)
                          2: bb7d36ce-781e-438a-a96a-361f84100a0d.crl (hash: trvjf4N/ztw7nKScbwdW44wnC6qIZ7mr5RAPmLgeTMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:88:4b:e0:10:bd:81:e0:ba:93:49:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7d36ce-781e-438a-a96a-361f84100a0d
        Validity
            Not Before: Jul 11 16:00:16 2022 GMT
            Not After : Dec 10 15:47:25 2030 GMT
        Subject: CN=550f1189-a26a-4cb1-9a00-a370d2b40a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:66:ec:a3:48:a9:be:c7:2e:f3:60:5f:2f:
                    ed:4d:a6:8e:76:84:77:22:9f:c2:7a:74:d1:4a:6f:
                    9e:ed:4d:fd:7d:62:b6:aa:66:06:a2:2d:ac:e7:aa:
                    f0:91:27:f3:91:62:f7:2c:33:d8:12:16:68:34:7c:
                    dc:69:22:1a:74:c0:94:8e:cc:86:6b:1d:74:5a:44:
                    cf:42:e2:f6:78:36:f1:f8:ff:d0:00:56:e2:ff:83:
                    fa:30:a0:5b:92:9e:e7:98:f0:9f:99:d6:f6:6d:17:
                    73:d1:c6:d8:04:ce:10:8c:01:18:1e:0c:29:bd:cf:
                    3e:70:bb:73:8a:12:6b:f9:74:b7:0a:85:d0:a6:6d:
                    a2:9c:57:fd:c6:fe:9a:db:be:c1:9a:e9:3f:2c:22:
                    27:4b:67:eb:01:d9:0b:9d:63:fd:b0:13:7a:1c:71:
                    90:cf:9e:1a:fe:c7:9f:d9:94:98:63:2a:eb:9e:77:
                    b5:a2:0e:b5:ad:8c:2c:6e:7e:02:0f:42:ed:f6:af:
                    da:d5:75:38:80:c7:1a:d0:ea:69:ab:fa:48:65:5e:
                    ed:98:3e:44:ac:83:9f:d7:0b:45:e5:db:a6:b4:99:
                    60:9a:8f:fa:fc:53:db:37:24:52:2b:a9:ed:8f:31:
                    fa:ab:f2:2b:b6:1c:59:03:b3:4b:e4:e1:47:a6:b5:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:90:63:8A:AF:3B:05:12:18:FD:E8:9C:AC:8C:06:D7:94:AA:BB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d/bb7d36ce-781e-438a-a96a-361f84100a0d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d/bb7d36ce-781e-438a-a96a-361f84100a0d.crl

            X509v3 Authority Key Identifier:
                keyid:42:30:A5:DA:EE:1A:50:7C:19:C9:AE:F8:3B:36:D6:63:A9:62:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bb7d36ce-781e-438a-a96a-361f84100a0d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5d:82:ac:78:73:eb:43:d0:a7:29:e5:69:80:5e:48:77:de:
         7f:15:38:39:35:33:3a:a6:29:bc:7f:25:8b:b1:b6:64:28:d0:
         1e:ab:63:e5:28:1d:10:07:73:84:e1:65:b5:a5:b6:dc:21:17:
         ba:48:a2:72:ea:da:86:3a:42:c4:96:01:8e:b5:55:dc:f0:db:
         bc:a1:c0:44:c3:ff:33:fb:33:1a:0b:e4:da:70:c6:0b:7f:5a:
         e9:cb:33:e9:76:a9:7b:62:4f:d7:03:3e:d1:e5:e8:e3:28:0d:
         d3:43:33:53:15:8a:1f:82:c1:68:49:07:78:f0:86:88:df:85:
         c9:0d:78:3b:23:23:d6:41:15:8b:f6:f5:8b:e1:da:86:3c:aa:
         0c:e8:78:13:bf:ed:13:e5:5f:34:25:f5:9b:e0:d2:64:e8:56:
         91:7e:a3:bb:e0:2a:de:0f:86:e2:2a:ac:59:4a:8c:84:b0:2e:
         b2:4d:a1:68:37:db:20:7e:5f:0e:69:5c:1a:7a:0d:57:76:aa:
         bf:a0:b0:bc:d0:5a:3a:72:f7:c7:fc:f9:5b:97:5a:20:63:ee:
         43:6f:11:5b:ed:b8:81:a5:66:5c:20:5d:59:db:2a:a7:3c:2e:
         ca:78:b3:93:7d:d6:2b:62:06:a6:28:0c:6a:a6:db:36:fb:b7:
         88:f3:7b:0c
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWD6IS+AQvYHgupNJswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmI3ZDM2Y2UtNzgxZS00MzhhLWE5NmEtMzYxZjg0MTAw
YTBkMB4XDTIyMDcxMTE2MDAxNloXDTMwMTIxMDE1NDcyNVowLzEtMCsGA1UEAxMk
NTUwZjExODktYTI2YS00Y2IxLTlhMDAtYTM3MGQyYjQwYTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB5m7KNIqb7HLvNgXy/tTaaOdoR3Ip/CenTR
Sm+e7U39fWK2qmYGoi2s56rwkSfzkWL3LDPYEhZoNHzcaSIadMCUjsyGax10WkTP
QuL2eDbx+P/QAFbi/4P6MKBbkp7nmPCfmdb2bRdz0cbYBM4QjAEYHgwpvc8+cLtz
ihJr+XS3CoXQpm2inFf9xv6a277Bmuk/LCInS2frAdkLnWP9sBN6HHGQz54a/sef
2ZSYYyrrnne1og61rYwsbn4CD0Lt9q/a1XU4gMca0Oppq/pIZV7tmD5ErIOf1wtF
5dumtJlgmo/6/FPbNyRSK6ntjzH6q/IrthxZA7NL5OFHprVmWQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFAOQY4qvOwUSGP3onKyMBteUqrseMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYjdk
MzZjZS03ODFlLTQzOGEtYTk2YS0zNjFmODQxMDBhMGQvYmI3ZDM2Y2UtNzgxZS00
MzhhLWE5NmEtMzYxZjg0MTAwYTBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmI3ZDM2Y2UtNzgxZS00MzhhLWE5
NmEtMzYxZjg0MTAwYTBkL2JiN2QzNmNlLTc4MWUtNDM4YS1hOTZhLTM2MWY4NDEw
MGEwZC5jcmwwHwYDVR0jBBgwFoAUQjCl2u4aUHwZya74OzbWY6liP1owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYjdkMzZjZS03ODFlLTQzOGEtYTk2YS0zNjFm
ODQxMDBhMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHXYKseHPrQ9CnKeVpgF5I
d95/FTg5NTM6pim8fyWLsbZkKNAeq2PlKB0QB3OE4WW1pbbcIRe6SKJy6tqGOkLE
lgGOtVXc8Nu8ocBEw/8z+zMaC+TacMYLf1rpyzPpdql7Yk/XAz7R5ejjKA3TQzNT
FYofgsFoSQd48IaI34XJDXg7IyPWQRWL9vWL4dqGPKoM6HgTv+0T5V80JfWb4NJk
6FaRfqO74CreD4biKqxZSoyEsC6yTaFoN9sgfl8OaVwaeg1Xdqq/oLC80Fo6cvfH
/Plbl1ogY+5DbxFb7biBpWZcIF1Z2yqnPC7KeLOTfdYrYgamKAxqpts2+7eI83sM
-----END CERTIFICATE-----