Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/37BD1F121AC0CB3316CFF10314AC8A289E31E53D.mft
File:                     37BD1F121AC0CB3316CFF10314AC8A289E31E53D.mft (raw, json)
Hash identifier:          yY63IqwYjrZeKu8ATnGEIBIU7ZuajuNoPV42nMHxuK4=
Subject key identifier:   2E:BC:7D:52:83:F5:93:A5:09:C7:6E:BF:B4:2C:BA:71:28:30:F7:7D
Authority key identifier: 37:BD:1F:12:1A:C0:CB:33:16:CF:F1:03:14:AC:8A:28:9E:31:E5:3D
Certificate issuer:       /CN=fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b
Certificate serial:       4211177948EFA7598ABDFE3BBD373E0410992947
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/37BD1F121AC0CB3316CFF10314AC8A289E31E53D.mft
Manifest number:          04
Signing time:             Fri 24 Feb 2023 15:17:20 +0000
Manifest this update:     Fri 24 Feb 2023 15:12:20 +0000
Manifest next update:     Sat 25 Feb 2023 17:32:20 +0000
Files and hashes:         1: 3230352e3139362e39382e302f32342d3234203d3e203236333430.roa (hash: 97Udox0x/uwEqbE7ViQGD7v0ZclbNYje5TIrZksb8pg=)
                          2: 323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (hash: /TwB9z5DD8gBeAZicbZREezwexKfe/9HEdvOzMjI/9o=)
                          3: 323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (hash: tXSK0NPPPy3j4Bn6s3GxATKvpUdTSo0F7HM2XMjU/JM=)
                          4: 37BD1F121AC0CB3316CFF10314AC8A289E31E53D.crl (hash: 7r7t8qNnF6odNNCJdirAbqDnYFELIh/6oc1cpmBFhXY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:11:17:79:48:ef:a7:59:8a:bd:fe:3b:bd:37:3e:04:10:99:29:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b
        Validity
            Not Before: Feb 24 15:12:20 2023 GMT
            Not After : Feb 25 17:32:20 2023 GMT
        Subject: CN=2EBC7D5283F593A509C76EBFB42CBA712830F77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:cf:41:a8:3d:81:ce:11:d9:3d:d1:28:0b:
                    9c:1e:d0:29:29:13:81:c0:c7:3e:cd:97:2e:e3:4e:
                    88:11:4a:44:26:9a:25:d8:75:11:82:97:85:5c:e2:
                    a3:93:9c:3a:e0:3c:8b:ff:e4:e8:cb:a2:3f:08:c0:
                    c1:ac:42:b8:56:70:09:54:04:ee:bc:6d:b1:e7:85:
                    d8:c5:e9:ac:99:ac:50:7a:d8:26:49:cf:58:54:1b:
                    2d:40:11:5c:0e:c9:c7:3d:40:af:79:a4:97:fe:ad:
                    b5:ee:30:72:80:7e:3c:c9:7d:db:77:00:cd:dc:e6:
                    44:f8:dc:f8:53:0b:1b:f3:84:e0:19:b8:e0:11:36:
                    8f:2f:7a:66:be:9e:3f:c6:84:dd:e1:85:bc:48:a4:
                    0c:62:1c:68:a3:87:bc:c7:21:c5:85:86:9b:a1:c0:
                    bb:69:3e:b1:40:7d:9a:8b:8c:42:af:74:ed:fd:b2:
                    4d:0c:ca:34:88:50:4d:a8:15:44:3e:fc:ce:9c:b3:
                    74:15:32:84:8a:31:a4:35:1e:63:12:c1:db:95:61:
                    d6:a9:2d:94:8f:9b:43:6a:39:d3:75:99:99:26:2f:
                    0e:c7:5b:23:0c:f2:d5:9f:e6:22:08:98:6b:9e:bb:
                    f1:fa:ad:36:a1:42:8c:46:f2:2d:ea:eb:7c:f8:0e:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BC:7D:52:83:F5:93:A5:09:C7:6E:BF:B4:2C:BA:71:28:30:F7:7D
            X509v3 Authority Key Identifier:
                keyid:37:BD:1F:12:1A:C0:CB:33:16:CF:F1:03:14:AC:8A:28:9E:31:E5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/37BD1F121AC0CB3316CFF10314AC8A289E31E53D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/37BD1F121AC0CB3316CFF10314AC8A289E31E53D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:91:60:48:84:95:57:08:8c:a0:cf:c6:19:36:99:93:0a:a9:
         41:19:19:e6:2f:d7:59:a6:71:bd:72:1c:8e:e0:77:d9:1d:a9:
         1c:8c:79:96:4d:2f:97:41:72:79:7a:52:b5:d8:45:57:e1:6e:
         1f:a3:c4:07:89:06:54:03:bf:1d:d9:4b:08:b9:5c:d7:9a:d4:
         7a:58:ae:19:de:cb:fe:9f:da:13:49:29:5f:53:2d:50:27:1b:
         ee:01:8a:1a:ec:7b:4e:6b:89:83:80:f0:d8:56:75:1f:9d:8c:
         d2:f2:05:28:6c:b9:3b:9d:5d:f4:31:ff:d9:ff:92:78:ba:2c:
         71:aa:80:c7:ed:3c:c4:1f:70:b6:5a:7a:9a:5c:56:31:45:ee:
         74:7a:70:06:3b:61:e4:e8:e1:83:6f:54:d5:44:4d:a5:42:c8:
         84:d2:8f:b7:ab:4d:ad:29:d0:1c:54:84:6b:27:a7:0a:74:7d:
         45:b0:15:24:83:9d:ae:c0:14:0d:dd:e6:54:52:d3:83:50:06:
         78:55:46:f4:41:ad:91:58:c9:16:30:39:0c:23:7e:6d:d2:e3:
         13:5b:70:65:4f:35:b8:3a:76:c7:30:53:6e:5f:6d:02:6e:a2:
         1d:57:d1:1a:45:04:3a:81:76:cc:c4:1e:79:e3:d3:e5:1c:8e:
         e0:f9:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----