Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/5a6cd4e3-401f-4f1d-b675-b0d995844039.mft
File:                     5a6cd4e3-401f-4f1d-b675-b0d995844039.mft (raw, json)
Hash identifier:          msSrRdNx2WyAr9t2QG+R9jaiVhxVouKlp9BGwVV3te0=
Subject key identifier:   89:68:5F:24:2A:35:2A:46:8F:B1:64:9F:2A:CB:ED:42:9B:E9:86:E4
Authority key identifier: 4F:9C:B0:64:48:90:B8:98:95:7E:EF:1C:79:5E:02:9B:DB:6F:A1:D2
Certificate issuer:       /CN=5a6cd4e3-401f-4f1d-b675-b0d995844039
Certificate serial:       010D0C9F432858403568C83C52FC379DA36A66A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/5a6cd4e3-401f-4f1d-b675-b0d995844039.mft
Manifest number:          010D0C9F432858403568C84E393517DBE1D06A80
Signing time:             Mon 12 Dec 2022 09:00:17 +0000
Manifest this update:     Mon 12 Dec 2022 09:00:17 +0000
Manifest next update:     Thu 15 Dec 2022 09:00:00 +0000
Files and hashes:         1: 02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer (hash: Bq2SsKTV1IUWfZgCXZpAGi8ZdR/wYAvEHL82qp73VZw=)
                          2: 5a6cd4e3-401f-4f1d-b675-b0d995844039.crl (hash: dS1TpkVgY7cBcRzaCI5+LtlRwhMPsFT14DyTqXNcLnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:68:c8:3c:52:fc:37:9d:a3:6a:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6cd4e3-401f-4f1d-b675-b0d995844039
        Validity
            Not Before: Dec 12 09:00:17 2022 GMT
            Not After : Jan  5 17:40:10 2032 GMT
        Subject: CN=dbce1fbf-ac0a-4c7b-884a-43d55825b0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:9d:ee:17:19:7c:9d:68:5e:1d:3f:5e:f4:
                    93:f0:e4:48:7d:c4:71:c9:bd:f8:92:f7:53:68:cf:
                    e0:fa:ba:e3:b9:37:f5:d8:6b:80:e9:f2:70:55:c4:
                    fe:45:b1:80:4b:a7:0f:fd:f5:89:29:49:93:ef:b6:
                    d9:42:ec:6a:fa:8c:14:92:28:ec:d9:d9:f2:66:50:
                    67:43:d8:2b:37:01:42:13:73:31:c0:2f:5f:83:d7:
                    5f:f7:dc:89:ac:59:88:0e:97:44:75:67:5f:dc:50:
                    c8:6d:ba:eb:f4:98:ee:45:20:bc:8e:20:40:2e:d9:
                    d4:88:ae:37:f5:67:30:78:3f:e8:4d:b0:d3:a9:4f:
                    2c:1e:3e:74:50:17:6b:93:52:9e:19:42:67:11:db:
                    61:b7:ff:51:44:52:f6:19:34:de:b8:d5:1d:59:7f:
                    83:11:84:d9:0e:4f:b7:22:f7:11:23:ee:3c:88:b3:
                    17:12:2c:f7:3e:e0:42:f8:47:56:7e:bf:cc:3f:b8:
                    13:2e:a0:07:5c:92:9b:5a:5b:95:94:b3:7a:15:9b:
                    ab:1f:08:87:3b:84:96:6a:b3:08:f4:36:80:73:47:
                    81:e6:28:e4:81:1d:ac:64:05:5d:89:28:0f:d9:96:
                    55:6c:fb:04:25:46:56:e7:4e:82:5c:5f:de:60:53:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:5F:24:2A:35:2A:46:8F:B1:64:9F:2A:CB:ED:42:9B:E9:86:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/5a6cd4e3-401f-4f1d-b675-b0d995844039.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/5a6cd4e3-401f-4f1d-b675-b0d995844039.crl

            X509v3 Authority Key Identifier:
                keyid:4F:9C:B0:64:48:90:B8:98:95:7E:EF:1C:79:5E:02:9B:DB:6F:A1:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ab:e5:4f:15:f0:eb:86:57:30:a2:bc:d0:c9:d4:88:ea:9e:
         8a:b4:7b:7d:18:8e:8b:70:6f:eb:68:e3:73:a0:f6:85:b3:21:
         b9:eb:f7:a0:fb:b2:9a:c5:55:b6:ca:32:07:13:79:22:19:93:
         8c:a7:c5:66:0a:82:3a:e3:73:fe:0f:12:2a:59:b1:03:4d:08:
         05:27:e3:bf:a2:fd:1b:e7:6a:fd:5b:81:42:2c:03:24:30:82:
         73:84:86:3c:37:7a:75:29:4b:04:ff:96:80:d4:47:02:60:d7:
         40:88:b9:44:c0:10:f0:82:b6:d3:5d:94:d8:7b:72:86:ce:b4:
         89:e2:86:51:d5:c8:d9:69:21:1b:e9:e8:6e:7c:74:fc:f7:1f:
         34:6b:71:8a:15:6a:99:2a:4e:ef:93:d1:86:ff:3b:29:77:9c:
         3b:06:d4:f9:ee:de:ec:ad:31:d0:a0:bb:71:33:53:89:e9:aa:
         5c:96:9f:ef:f2:54:b2:39:09:19:08:63:16:69:d0:e6:7a:01:
         ce:94:40:5b:fe:67:53:80:d3:4f:99:94:a6:41:4f:24:64:f3:
         05:60:bf:17:04:9d:cf:8f:3d:5d:db:b9:93:95:c3:38:96:fe:
         0f:66:82:2d:53:3f:57:35:15:17:14:3e:f4:95:45:f3:48:a8:
         3e:cb:39:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----