Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
File:                     9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft (raw, json)
Hash identifier:          oWHtOLikRd5YtkgUbRIv0fOuHZy65LW7GB6zTApQoxQ=
Subject key identifier:   17:3D:67:76:E0:3E:C1:0F:70:64:0F:E5:FB:39:75:06:F6:2C:78:5E
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       53641761FC3886EF047E77CC87A6B0D771CB0C4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
Manifest number:          07AC
Signing time:             Wed 02 Jul 2025 19:33:29 +0000
Manifest this update:     Wed 02 Jul 2025 19:28:29 +0000
Manifest next update:     Thu 03 Jul 2025 19:47:29 +0000
Files and hashes:         1: 3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (hash: E1FZLkk5M6GOvm5UnK3G3NWIYJqivBqn8ntAh+WceCc=)
                          2: 9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl (hash: J7ZmmQJnltx31ZzgZJXC0uvseUf81dIoDeEGipvQrMc=)
                          3: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (hash: wMO/4SbCUV9+CN9d29h6S2e0f2Ndm8lCpoppiuA80iY=)
                          4: 3130332e3234342e3232362e302f32342d3234203d3e20323134343531.roa (hash: g4JId+v3UNbmSA3F2ovECdVzf7QMh+84PzJXxRokrCE=)
                          5: AS151642.asa (hash: /KT8hFVY+tXMdkF8LScuAiNuIQBToUCcd1IrQ4Lb3j0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:64:17:61:fc:38:86:ef:04:7e:77:cc:87:a6:b0:d7:71:cb:0c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Jul  2 19:28:29 2025 GMT
            Not After : Jul  3 19:47:29 2025 GMT
        Subject: CN=173D6776E03EC10F70640FE5FB397506F62C785E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a9:40:f6:d5:14:93:0d:a9:6d:1d:0a:d4:da:
                    0e:c5:67:e8:ed:14:2e:be:2a:96:38:dd:be:4a:f5:
                    0f:f3:67:73:6f:6c:2a:7e:9b:e2:0d:34:d7:8d:96:
                    71:40:68:72:ec:ca:e0:9c:41:dc:84:dc:1d:56:7c:
                    11:01:d5:71:20:aa:45:f8:cf:b2:ec:02:ba:90:cc:
                    05:c0:70:fd:91:d7:34:88:98:c7:ff:dd:30:5d:87:
                    8f:a9:83:a7:c3:a2:53:42:b3:84:44:fd:c8:3b:3e:
                    53:1b:2e:a9:ad:e9:15:97:64:d7:50:52:ed:08:6e:
                    02:b4:a0:b9:e6:db:17:02:49:d9:d1:d2:57:e5:d9:
                    9d:7a:5e:d5:46:6b:06:79:15:61:bb:9c:9c:77:70:
                    54:9d:89:fc:9b:9f:0e:0d:7a:16:14:23:68:b6:2c:
                    0f:17:23:fd:06:57:5a:87:85:c2:be:29:d3:2b:77:
                    83:e8:5d:fc:6f:1f:4d:30:8f:70:76:9b:6d:e9:60:
                    82:16:01:37:63:41:f3:9a:96:2d:d0:ab:5c:ff:b9:
                    d8:8b:a4:c5:30:c1:38:87:92:53:f5:76:21:58:b1:
                    56:be:46:0e:0a:e5:a8:73:62:43:bc:a3:29:bb:8f:
                    56:75:79:1d:9a:1a:2f:85:6c:32:e1:4f:bf:01:8a:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3D:67:76:E0:3E:C1:0F:70:64:0F:E5:FB:39:75:06:F6:2C:78:5E
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a7:13:33:e7:bc:b3:0a:cf:c8:bd:3d:93:e1:38:3f:66:46:
         0c:49:5d:81:be:1f:65:c0:73:a7:6f:4d:15:33:dc:90:f1:c4:
         6b:af:dc:a3:f1:7b:5f:45:98:78:d1:0b:d9:9b:d5:40:e2:6d:
         2b:61:fd:fe:0b:bd:b7:d0:13:2f:14:5b:f9:47:2b:bf:67:49:
         97:7a:af:e2:aa:db:99:b8:35:bc:43:1a:24:9e:6a:44:d1:9b:
         1c:46:7d:d5:54:ea:e5:0a:d9:71:4a:f2:e2:3d:75:d2:26:0f:
         b7:ca:d8:3b:d6:64:87:e4:b9:43:c4:b0:84:5a:30:a7:c9:8c:
         d0:38:33:4b:e3:eb:b7:6b:c4:34:97:f4:28:5b:d5:96:fc:72:
         d3:f0:c3:5d:74:cd:ad:5f:ab:f5:0d:52:76:f4:d3:8b:b9:86:
         fb:86:a5:10:29:fc:f8:b1:33:97:22:61:b4:93:40:7f:aa:eb:
         25:44:e2:db:78:ee:cf:e1:c5:52:34:4b:0a:24:46:b9:12:d2:
         93:7b:03:55:59:bb:03:c4:9e:20:d4:77:7a:60:0f:9c:67:ab:
         9d:2d:14:1e:ed:38:28:01:eb:b0:2d:39:4a:6e:99:9b:be:99:
         29:ef:2e:db:4e:f0:57:92:d6:78:12:da:0b:8b:92:2f:03:d4:
         58:0e:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----