Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
File:                     HwZxfSr2LjgJByCEw6-PSJSOQOI.mft (raw, json)
Hash identifier:          1Hu+raxBTgRmGFs3X70agOY0+46aSzgG99tLl//w1Bc=
Subject key identifier:   5F:54:45:3B:09:0E:E5:EB:BB:C9:11:4B:FC:F6:B0:53:D8:5E:77:9C
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       7DBC4059E69B2ED6CF234CFED653CA2C8F11AFCB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
Manifest number:          03E4
Signing time:             Sat 29 Mar 2025 00:11:50 +0000
Manifest this update:     Sat 29 Mar 2025 00:11:50 +0000
Manifest next update:     Wed 02 Apr 2025 00:11:50 +0000
Files and hashes:         1: 0c492edd-c347-4b97-a816-01566f9d097b.roa (hash: HbMpEHKT1d+4YRvQvxp5GvQ7IbjOqHTzbYzzTh0bqKM=)
                          2: 4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa (hash: oyeJeAFlPCucmHGGgTiDe3n+n0tTTzegXBT8c+tH3Gs=)
                          3: 59031a63-ea1a-4943-86ab-19221a23ca42.roa (hash: Wqz4S1H8u/NPmnOghjlN/7n1GB6DF6Qmuu7gfMn91Mc=)
                          4: 6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (hash: 26iSH7NORxtkjx+0X8pyeTN7E7LRG+LuhykcjQ5/p4k=)
                          5: 91a27594-a038-483a-a558-a5377f4d266f.roa (hash: LqrsRvfZlutNLHvyd2F37YPDUzPhzr29imIzHinwB+E=)
                          6: 943694fe-e278-4d76-b786-7df26f151dd9.roa (hash: 4xfcsQVMkfyGARIfGoHAC1hToaokZFa0gZjx/Ob9d68=)
                          7: HwZxfSr2LjgJByCEw6-PSJSOQOI.crl (hash: 0Hib+NR4S0qU+ceb4aSvy37SDHQNR0fGxTUu9Ja+zqg=)
                          8: a86c8ffa-34ab-4a01-8f63-86207fe44159.roa (hash: SbF1f3A3i5Z7RYXIP/kK48G5gparoh9sNBG0wXfp1JA=)
                          9: c686f937-000a-490a-846c-e2773b637b26.roa (hash: bWAGnpICyp+1O81nge6B5g7Xsi6VyHdwkruN/QZfnHE=)
                          10: d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa (hash: wSPME//XMiImVtOqlOg8+nxZysYTG4/FrFojrNL6Vwc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bc:40:59:e6:9b:2e:d6:cf:23:4c:fe:d6:53:ca:2c:8f:11:af:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Mar 29 00:11:50 2025 GMT
            Not After : Apr  2 00:11:50 2025 GMT
        Subject: CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:be:4f:b6:63:76:56:e5:8d:cd:b5:d2:f4:
                    1b:b7:61:3d:b3:ed:42:0b:36:cb:c5:59:3d:48:5d:
                    3b:c3:c4:a6:0d:a6:5b:65:f7:c2:11:ce:3b:88:b5:
                    de:c7:3d:ab:fc:e4:05:74:51:dc:7a:79:c3:ae:2a:
                    09:97:5f:29:7d:e7:86:ae:15:7f:f3:eb:3d:45:86:
                    24:6c:03:99:69:47:a4:07:c7:90:97:5b:d8:b4:67:
                    80:87:f5:c8:0a:d9:fe:03:21:95:12:ee:a6:70:8f:
                    88:cc:d5:0b:6d:3a:75:d6:60:f0:ab:90:52:bf:6d:
                    a9:12:ba:10:01:51:c6:a3:70:ec:51:9f:59:ff:2a:
                    44:05:c1:c1:82:81:03:d6:a0:74:be:ea:2f:f4:7d:
                    67:e2:56:0d:7b:b9:0d:78:0d:8c:bc:ec:57:a2:85:
                    e8:27:92:9e:bf:70:0c:cc:96:a4:21:18:74:fa:07:
                    aa:d8:a1:72:84:fb:17:29:39:74:e3:19:ae:d0:ae:
                    d5:b8:68:a9:60:0c:74:bc:dd:d9:9f:10:5d:25:e8:
                    a3:b6:8f:fe:08:05:6c:10:ff:63:eb:a6:ee:3f:de:
                    87:7a:26:ef:ff:8d:b7:fc:7d:c2:97:57:34:06:6e:
                    85:3a:e1:40:0a:2b:20:93:e5:9f:60:dd:d1:f1:4f:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:54:45:3B:09:0E:E5:EB:BB:C9:11:4B:FC:F6:B0:53:D8:5E:77:9C
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d3:66:de:e2:b1:91:ad:cd:24:01:9e:0b:af:22:1d:bd:d8:
         1a:76:99:4d:69:56:ba:0f:5d:de:01:92:f0:ce:d6:4d:d8:4a:
         02:04:84:cf:8c:d8:09:ff:0c:58:37:d4:20:d9:27:75:97:a9:
         b1:e8:7f:77:47:7e:7a:98:2c:9d:45:28:1e:31:af:90:3a:9c:
         8c:1c:79:2d:9b:84:50:4a:b5:d9:11:15:74:f0:73:a2:a8:84:
         61:60:2d:da:86:54:72:e9:ad:25:33:86:db:b5:a4:d5:e8:70:
         ef:ea:db:55:e6:4a:62:97:a4:34:30:94:40:50:b0:54:11:30:
         35:aa:54:78:1f:36:7d:5d:56:c0:06:53:1e:25:63:e7:d4:c2:
         0f:65:9a:0b:ce:73:1b:0d:8b:59:52:2d:97:3c:a3:06:39:c7:
         ef:b6:b8:a4:9c:5a:82:62:00:5e:28:60:8a:53:2e:44:ac:c2:
         59:2b:6f:be:0f:ef:db:fe:2e:fb:fc:6a:00:1a:1b:f1:71:af:
         4d:35:53:4a:2f:fc:93:02:4c:fc:5d:9b:21:c8:85:31:19:52:
         3f:98:0c:8f:1a:86:ee:6e:19:0e:bc:65:3a:56:5a:a5:55:b8:
         ed:7e:0f:6b:b3:8a:d7:e7:76:86:af:57:a4:96:2d:19:c8:59:
         81:e1:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:44:50 2025 by rpki-client