Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f1ee568b0a17/0/371B5309886D597785A92F768A03AC28F879E4E2.mft
File:                     371B5309886D597785A92F768A03AC28F879E4E2.mft (raw, json)
Hash identifier:          Q8riXvzlsfOAi7AbNqJdoa/qZOG7rGSKMlKzFK/A2u0=
Subject key identifier:   AE:23:47:62:E3:12:E5:73:BB:FF:BD:50:2F:55:CD:9B:FB:F0:38:11
Authority key identifier: 37:1B:53:09:88:6D:59:77:85:A9:2F:76:8A:03:AC:28:F8:79:E4:E2
Certificate issuer:       /CN=6916ebca5871d7f8806c45997a4b03dfa6f58ff7b97ddd0d8a
Certificate serial:       24F1417C1562189D74C4A532399587FC82F9F6D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5871d7f8806c45997a4b03dfa6f58ff7b97ddd0d8a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f1ee568b0a17/0/371B5309886D597785A92F768A03AC28F879E4E2.mft
Manifest number:          05
Signing time:             Thu 08 Dec 2022 13:32:44 +0000
Manifest this update:     Thu 08 Dec 2022 13:27:44 +0000
Manifest next update:     Fri 09 Dec 2022 17:28:44 +0000
Files and hashes:         1: 32332e3134322e32342e302f32322d3234203d3e203631313338.roa (hash: U+HMTDqcxA55sgTyVzQ98n2Ztfvm4K9QaF2qLU8Bp60=)
                          2: 32332e3134322e32352e302f32342d3234203d3e2037303138.roa (hash: y/CI2dLgjc5NWGr7GTt2NGRD+rlzdtMkmgX+kyXBAag=)
                          3: 32332e3134322e32342e302f32342d3234203d3e203632313634.roa (hash: m2J/Dmko23xPdaFD1wwjZd9wtRD6Wk3gLHe2pme5yZk=)
                          4: 371B5309886D597785A92F768A03AC28F879E4E2.crl (hash: hOZndb5VcJp8T2pnwgCEwMHf34AWCTN2DPWwUpXFMHM=)
                          5: 32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (hash: EVHcv0PUNOxq5/Dns+6A41bmq82fPlZMlHTdqs+w7kM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f1:41:7c:15:62:18:9d:74:c4:a5:32:39:95:87:fc:82:f9:f6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca5871d7f8806c45997a4b03dfa6f58ff7b97ddd0d8a
        Validity
            Not Before: Dec  8 13:27:44 2022 GMT
            Not After : Dec  9 17:28:44 2022 GMT
        Subject: CN=AE234762E312E573BBFFBD502F55CD9BFBF03811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:0a:1c:35:ed:ee:2e:ce:b4:de:85:e4:02:
                    ca:39:1b:de:f3:c4:68:f4:9c:70:74:80:93:e6:ef:
                    e4:70:f1:ef:91:d0:75:88:47:7d:3e:ed:aa:9e:37:
                    c1:8f:c0:65:68:cd:71:88:96:64:c4:c4:fa:2d:9c:
                    12:19:5d:f2:83:9b:88:6d:3e:d7:ae:52:4b:7d:74:
                    53:fd:98:51:d6:02:0c:8a:bf:28:f0:68:50:a5:8a:
                    95:56:dc:25:4b:6e:b8:51:ee:b2:da:23:cd:45:42:
                    df:e0:92:3a:65:99:c1:7d:71:bf:8b:56:46:b5:14:
                    38:ef:f7:5c:ec:2b:e5:98:ea:6e:c7:44:15:a9:e2:
                    da:42:81:13:37:1f:ef:9d:12:78:ad:5a:96:7f:6c:
                    c3:c6:08:78:57:9d:72:76:47:07:09:5d:62:9a:06:
                    58:ff:8e:9f:7e:81:3b:ef:90:f6:9f:6d:92:da:61:
                    b8:09:14:3a:84:4c:9a:aa:d4:81:e8:6e:21:9b:95:
                    1d:cf:1d:5f:d8:24:2c:13:40:9f:7e:53:f8:1c:cf:
                    bd:4c:e4:4f:bd:c6:c6:b6:f3:39:a6:0d:fe:40:f9:
                    7b:51:6a:d5:bf:3a:94:88:db:c7:95:f1:fd:59:17:
                    0c:de:7e:44:4f:8e:9d:13:df:f2:be:0d:bc:a8:1f:
                    fa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:23:47:62:E3:12:E5:73:BB:FF:BD:50:2F:55:CD:9B:FB:F0:38:11
            X509v3 Authority Key Identifier:
                keyid:37:1B:53:09:88:6D:59:77:85:A9:2F:76:8A:03:AC:28:F8:79:E4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f1ee568b0a17/0/371B5309886D597785A92F768A03AC28F879E4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5871d7f8806c45997a4b03dfa6f58ff7b97ddd0d8a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f1ee568b0a17/0/371B5309886D597785A92F768A03AC28F879E4E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1d:53:7d:e6:96:78:97:e1:c8:02:18:c9:2d:5d:4b:93:97:
         45:27:d5:68:6c:d3:6a:13:0c:82:9e:a1:0b:d3:37:7b:75:72:
         d3:c8:b4:43:37:ed:2a:10:ef:21:98:e1:59:05:e1:24:9d:1b:
         e2:27:d0:0e:2b:96:23:74:72:99:fd:c1:12:0f:35:b7:e9:3f:
         e1:92:a6:6b:ae:6b:70:28:ce:be:ff:bb:c6:c1:e8:ba:ef:56:
         2e:d0:89:8c:3d:7a:e9:70:8a:ea:17:9b:6d:28:37:de:59:c8:
         99:81:db:2c:41:df:f5:8e:4a:40:7f:10:dd:a1:8b:4d:0b:f6:
         5b:e9:fe:60:50:d1:23:d5:53:86:03:a0:0c:67:aa:fa:3e:74:
         ec:98:48:18:3b:1d:49:4f:14:d2:6a:88:1c:cf:6b:f2:9c:ca:
         bd:3c:aa:6c:e1:99:f8:58:3f:2c:99:3a:5a:3a:b2:f6:f5:5f:
         45:b5:f3:c9:f7:0d:63:42:27:e7:0d:04:a1:ed:57:c5:a5:9b:
         25:75:31:d3:2a:62:8c:49:35:8b:a0:82:eb:49:09:f9:01:f6:
         1a:5c:8b:df:d3:58:dd:ad:d7:f3:46:8d:63:61:4f:a9:02:9a:
         d0:42:6c:be:05:a9:40:15:5a:09:87:ee:04:fa:4d:2a:42:7a:
         30:64:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----