Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft
File:                     8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft (raw, json)
Hash identifier:          nglziLWxXB7Ov2Y1JgYbvj55okn5T8zqgDDDTeHHi+o=
Subject key identifier:   35:BC:94:FB:C4:B3:16:2D:0E:4C:27:FA:3F:61:33:5A:C0:DC:DB:EF
Authority key identifier: 8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB
Certificate issuer:       /CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB
Certificate serial:       77678202774DD875145EEB747C1C283ED8DCDE57
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft
Manifest number:          97
Signing time:             Thu 06 Feb 2025 15:09:07 +0000
Manifest this update:     Thu 06 Feb 2025 15:04:07 +0000
Manifest next update:     Fri 07 Feb 2025 15:55:07 +0000
Files and hashes:         1: 326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa (hash: 12jNufED+FuODjx9LesNG0DO8etBYCymhmW5u/tLBiw=)
                          2: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl (hash: Yb+irmD9ghrMlPooiSbJsVkbrOr70nr5v5Vo6YHbaPc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:67:82:02:77:4d:d8:75:14:5e:eb:74:7c:1c:28:3e:d8:dc:de:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB
        Validity
            Not Before: Feb  6 15:04:07 2025 GMT
            Not After : Feb  7 15:55:07 2025 GMT
        Subject: CN=35BC94FBC4B3162D0E4C27FA3F61335AC0DCDBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:88:45:ca:a8:6c:ec:8a:64:18:a1:3a:72:8e:
                    ae:0d:7e:3b:b6:d8:28:da:84:8e:49:dc:ea:49:86:
                    f1:6a:5d:30:ba:a1:8d:ee:86:99:1f:8d:7e:c0:94:
                    86:59:9a:70:c6:d5:62:fb:79:2b:c0:78:8c:e9:6a:
                    a3:61:d8:0a:cd:75:d4:c7:ef:34:0e:28:29:04:cc:
                    e3:32:1a:10:3b:54:53:76:d9:14:eb:69:1e:ae:a4:
                    4b:38:3d:a0:96:ef:79:e9:a0:7d:ee:2e:6f:e4:90:
                    70:35:9e:f0:93:b6:b5:fc:72:4f:4c:09:3c:d9:f6:
                    81:13:d0:9e:f4:dc:40:25:1b:51:77:1f:02:bc:08:
                    cd:fb:a8:58:d9:e3:55:22:79:74:01:fe:6c:6d:91:
                    11:31:4e:7c:cd:ce:9c:06:19:33:63:29:13:81:a3:
                    b0:8e:fc:fe:86:91:18:3d:0b:6d:c7:0c:b8:e0:ee:
                    46:45:d5:b8:4f:6e:da:1d:de:02:99:87:a7:67:ab:
                    97:ba:f5:a1:4e:59:fa:16:d6:81:b9:fb:f1:cd:ec:
                    7c:5a:90:e2:c2:0b:b4:e6:af:3f:6e:12:c6:6f:13:
                    a5:d5:a7:7b:da:98:6b:b5:d8:89:32:04:03:39:5a:
                    1b:00:2e:e0:71:ab:3a:96:13:e1:97:8e:0f:fa:30:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BC:94:FB:C4:B3:16:2D:0E:4C:27:FA:3F:61:33:5A:C0:DC:DB:EF
            X509v3 Authority Key Identifier:
                keyid:8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:85:70:7d:70:27:62:58:00:52:78:2b:2a:30:c7:c4:c1:6e:
         3b:6e:15:5f:18:9a:7b:b7:e7:c1:46:f8:e0:85:cc:c4:95:94:
         8f:d1:85:c8:51:16:78:63:f8:be:f1:3f:dd:71:c1:5c:4f:44:
         34:43:6a:92:e4:1d:16:4d:96:27:cb:80:5f:e6:c0:18:e6:d2:
         96:bd:53:a3:a6:ee:ee:40:b1:70:0a:c2:cd:35:cf:4d:f7:ac:
         58:b2:c5:75:5e:23:2b:73:e0:44:9f:55:71:ec:46:1b:16:df:
         da:6d:c9:9b:dd:21:18:91:e4:f1:80:0c:52:5d:52:96:da:c6:
         9f:17:bd:c4:73:e5:1e:e3:f6:b7:b4:8b:79:e6:3a:45:5e:77:
         6e:41:14:b1:c0:3c:51:d9:fe:ca:84:41:03:a3:c7:ab:90:42:
         14:26:d8:26:28:f4:3c:24:97:f5:c4:db:59:c4:87:a6:92:8b:
         1f:fb:d4:3e:f9:19:95:4f:43:b8:30:4b:71:52:13:68:6c:a1:
         71:ff:c9:b0:de:95:dc:5b:f0:77:1a:f7:c4:b9:e0:71:68:20:
         1a:9c:03:4f:a6:5e:16:0c:1e:19:51:98:50:2e:35:d4:87:f3:
         0b:d6:0b:c3:57:ab:4d:e0:d9:1b:f8:3d:1f:44:0f:51:c0:91:
         d6:ed:fb:4b
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUd2eCAndN2HUUXut0fBwoPtjc3lcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENCODlDRjM4MjFCMkMyNTMxRTRDQTMyOUFCQTUxMTRC
MkM5NkVEQjAeFw0yNTAyMDYxNTA0MDdaFw0yNTAyMDcxNTU1MDdaMDMxMTAvBgNV
BAMTKDM1QkM5NEZCQzRCMzE2MkQwRTRDMjdGQTNGNjEzMzVBQzBEQ0RCRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6iEXKqGzsimQYoTpyjq4Nfju2
2CjahI5J3OpJhvFqXTC6oY3uhpkfjX7AlIZZmnDG1WL7eSvAeIzpaqNh2ArNddTH
7zQOKCkEzOMyGhA7VFN22RTraR6upEs4PaCW73npoH3uLm/kkHA1nvCTtrX8ck9M
CTzZ9oET0J703EAlG1F3HwK8CM37qFjZ41UieXQB/mxtkRExTnzNzpwGGTNjKROB
o7CO/P6GkRg9C23HDLjg7kZF1bhPbtod3gKZh6dnq5e69aFOWfoW1oG5+/HN7Hxa
kOLCC7Tmrz9uEsZvE6XVp3vamGu12IkyBAM5WhsALuBxqzqWE+GXjg/6MGZlAgMB
AAGjggJnMIICYzAdBgNVHQ4EFgQUNbyU+8SzFi0OTCf6P2EzWsDc2+8wHwYDVR0j
BBgwFoAUjLic84IbLCUx5MoymrpRFLLJbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU5MWZiNDNiNDAxOTJiYWNiN2FiYjdhMjgvMi84Q0I4OUNGMzgy
MUIyQzI1MzFFNENBMzI5QUJBNTExNEIyQzk2RURCLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2Ey
NWM3ZC8xLzhDQjg5Q0YzODIxQjJDMjUzMUU0Q0EzMjlBQkE1MTE0QjJDOTZFREIu
Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8yLzhDQjg5Q0YzODIxQjJDMjUzMUU0Q0EzMjlBQkE1MTE0QjJD
OTZFREIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBOhXB9cCdiWABSeCsqMMfEwW47bhVfGJp7t+fBRvjg
hczElZSP0YXIURZ4Y/i+8T/dccFcT0Q0Q2qS5B0WTZYny4Bf5sAY5tKWvVOjpu7u
QLFwCsLNNc9N96xYssV1XiMrc+BEn1Vx7EYbFt/abcmb3SEYkeTxgAxSXVKW2saf
F73Ec+Ue4/a3tIt55jpFXnduQRSxwDxR2f7KhEEDo8erkEIUJtgmKPQ8JJf1xNtZ
xIemkosf+9Q++RmVT0O4MEtxUhNobKFx/8mw3pXcW/B3GvfEueBxaCAanANPpl4W
DB4ZUZhQLjXUh/ML1gvDV6tN4Nkb+D0fRA9RwJHW7ftL
-----END CERTIFICATE-----