Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.mft
File:                     E45AB0956CBB0DED33890252EB8E19AA8733AD89.mft (raw, json)
Hash identifier:          R7z72Q/HOlOtL2WhOLr35ul6XeU/Z6SwOjOYYyGqazs=
Subject key identifier:   59:6A:C1:0A:5F:C1:66:9D:10:3C:ED:50:FD:4A:E0:B4:12:BA:1B:B5
Authority key identifier: E4:5A:B0:95:6C:BB:0D:ED:33:89:02:52:EB:8E:19:AA:87:33:AD:89
Certificate issuer:       /CN=589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9
Certificate serial:       146EA9705ECA4C0BEF8A369AAB0AF12E353227
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.mft
Manifest number:          ED
Signing time:             Wed 09 Oct 2024 07:06:18 +0000
Manifest this update:     Wed 09 Oct 2024 07:01:18 +0000
Manifest next update:     Thu 10 Oct 2024 10:47:18 +0000
Files and hashes:         1: 323630323a666134613a3a2f34302d3430203d3e203236313935.roa (hash: PhrbKeOJi8ax0UFivnnhrCTX4GW6ENWa8GWgcrXmJI4=)
                          2: E45AB0956CBB0DED33890252EB8E19AA8733AD89.crl (hash: 4JdZRaS9tSFqyM0E1BK3psnl1CMj71G1DUxesABdrzw=)
                          3: 32332e3136302e34302e302f32342d3234203d3e203236313935.roa (hash: /kdj+3aPJMNd9WBzUW94lVzCslmZUGfEWd1ikrblaCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6e:a9:70:5e:ca:4c:0b:ef:8a:36:9a:ab:0a:f1:2e:35:32:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9
        Validity
            Not Before: Oct  9 07:01:18 2024 GMT
            Not After : Oct 10 10:47:18 2024 GMT
        Subject: CN=596AC10A5FC1669D103CED50FD4AE0B412BA1BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4e:a5:20:3b:48:c6:f8:2a:c6:25:5d:20:3e:
                    6d:95:a7:54:c2:08:75:05:12:d7:5c:29:85:e6:1b:
                    ab:b0:76:ee:c6:6c:1d:b8:97:21:fd:11:a1:74:c1:
                    35:2b:88:91:63:21:ac:99:4e:d0:89:91:b2:00:0f:
                    f9:b4:03:e8:8a:37:f4:7d:6c:73:5e:f1:af:54:65:
                    aa:7e:ad:9e:83:86:e6:53:a3:6c:78:fe:88:41:c8:
                    0e:b9:17:28:18:51:98:35:1f:5d:ed:70:95:17:be:
                    b9:19:62:7e:52:54:59:54:44:78:84:c3:cd:11:c1:
                    2b:b1:73:b0:98:fb:03:28:13:49:ac:34:bf:5e:41:
                    7c:bd:de:c1:b0:43:d4:7c:22:64:3e:d2:62:4e:43:
                    e9:b7:74:1c:64:ea:89:4d:ab:dc:aa:76:b8:c5:ae:
                    f7:25:7b:a6:87:56:d7:3a:b7:6a:1f:90:de:1b:26:
                    fd:19:f5:b9:11:7a:36:c4:61:01:52:50:2b:9f:39:
                    d1:55:b5:2f:03:3d:74:02:47:f3:f3:80:53:ca:fd:
                    94:05:fe:a4:5d:75:6e:b8:d1:f0:1d:3a:9c:60:ad:
                    b4:96:24:68:69:b6:db:3f:fe:1f:44:de:3c:d5:b4:
                    9b:c6:20:f5:31:e7:c9:17:d7:d0:4d:06:de:17:ca:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6A:C1:0A:5F:C1:66:9D:10:3C:ED:50:FD:4A:E0:B4:12:BA:1B:B5
            X509v3 Authority Key Identifier:
                keyid:E4:5A:B0:95:6C:BB:0D:ED:33:89:02:52:EB:8E:19:AA:87:33:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:13:6f:c5:e5:ab:24:86:54:48:20:b8:a1:68:28:01:94:
         2b:ae:04:c1:ce:0b:cf:d1:0d:93:4e:f5:17:f7:a1:24:3e:3e:
         0f:4c:28:cc:a1:79:db:e3:35:c7:11:c0:3a:32:e5:35:d8:83:
         ef:99:21:3c:bc:cb:81:82:0e:0e:36:89:b3:82:0f:7a:52:e0:
         11:29:c9:3f:43:44:58:88:27:22:c5:d4:49:42:f5:bc:1a:79:
         13:ce:ab:5f:1e:4c:89:53:33:68:dc:b8:b0:05:0d:4d:33:28:
         88:4f:72:90:51:c6:c4:42:75:f8:3f:b6:10:96:5c:c3:c2:a1:
         f4:c7:74:8d:0e:44:aa:3d:a3:ab:16:1a:71:5f:8a:d9:f4:84:
         2e:9d:1a:27:cb:a9:80:ec:74:24:a3:62:77:bf:46:39:c6:c4:
         f9:9e:51:f7:90:6a:ab:03:f0:9e:e4:a6:46:dd:a0:ba:0c:e6:
         21:60:0e:ac:8d:29:44:14:43:03:f5:aa:b7:9d:84:07:4e:2d:
         0f:d5:f3:e6:cf:e7:d5:55:1a:95:63:dd:70:92:80:9e:20:32:
         46:16:3b:63:2a:d7:af:74:40:61:a3:17:b2:cf:24:d7:34:cd:
         be:ed:80:eb:3d:09:d8:14:3d:ea:1d:31:b1:3b:5e:2f:2a:ea:
         2d:ca:27:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----