Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          b53AVKX1IQVxuwFxTXWnoM/Cwddz9IwksH0zBg5Rx3E=
Subject key identifier:   D5:F8:9B:6C:4F:27:53:72:E5:4B:C4:24:35:CC:4E:25:30:B5:D8:DA
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       69A22AF9EA3B7A639B9BA284E818518AFF6C819D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          0368
Signing time:             Fri 28 Mar 2025 23:00:46 +0000
Manifest this update:     Fri 28 Mar 2025 23:00:46 +0000
Manifest next update:     Tue 01 Apr 2025 23:00:46 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: a7e2BVfP332O+U805mcqSDi6cfk7dKqofGc8HmrEzwk=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: CzAwun/YY4cbtGLh2f3haHXyMFNoCC7e5gM4PW1s2Qs=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: 5DlhTFwelxTkCLQrn5MqidaiEx4TUFiRRYxjKGLzeNk=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: tXtGfWXUY8wuNrrc35EuFATRSbLECyNJB0tej/OnzqY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a2:2a:f9:ea:3b:7a:63:9b:9b:a2:84:e8:18:51:8a:ff:6c:81:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Mar 28 23:00:46 2025 GMT
            Not After : Apr  1 23:00:46 2025 GMT
        Subject: CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:fa:a7:ff:d7:14:31:56:79:e9:ab:ed:5e:
                    b8:17:ce:af:d3:4f:94:24:fb:fa:bb:81:ee:54:72:
                    69:73:4a:fb:f0:81:37:65:46:b8:56:f1:22:73:8f:
                    0b:c5:35:47:01:f6:f2:02:a8:e0:08:41:71:9d:29:
                    38:0e:3a:35:f0:83:53:be:45:e6:8d:d0:e6:1d:62:
                    0c:0c:d2:95:df:eb:4f:2d:fe:be:e8:ec:7e:34:b8:
                    58:72:a9:a3:9a:73:b5:44:cc:fc:3b:5e:da:51:83:
                    dd:4d:2c:7d:b3:1c:39:b3:08:a0:a1:a7:a1:f0:e1:
                    33:41:44:5e:60:90:94:de:7c:14:a1:1d:cb:4b:3d:
                    6d:62:c0:9c:43:d0:7d:93:14:19:3c:31:2a:9a:5b:
                    57:ae:a3:f6:5a:cb:62:7c:61:17:c5:42:7b:90:5b:
                    7f:73:f1:29:93:37:eb:11:e0:e3:c8:7e:55:d7:a4:
                    18:58:7c:30:29:3a:30:83:33:53:5b:90:93:6f:fc:
                    74:27:11:6c:c0:a2:a7:88:13:b7:0b:ae:11:a0:bd:
                    fd:e1:bc:9c:99:9f:87:9d:7f:6e:cb:95:ff:d9:00:
                    e6:28:51:8d:8a:b3:85:16:a2:27:01:e4:3c:80:05:
                    39:61:02:de:b0:cb:c5:2d:66:2f:f9:5d:3e:1f:8a:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F8:9B:6C:4F:27:53:72:E5:4B:C4:24:35:CC:4E:25:30:B5:D8:DA
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:67:ab:be:0e:2b:53:c2:5c:6c:e3:cf:1f:02:58:b8:9e:3a:
         ea:d8:98:45:5c:00:a0:a7:32:c0:ca:7f:e1:89:17:c8:b8:40:
         c6:58:14:a7:08:7c:09:bb:3f:d0:c1:eb:1f:ae:bc:c7:ea:77:
         4d:a2:85:12:7f:f8:87:b0:88:84:d6:ca:56:51:5d:7e:db:98:
         af:5d:9c:e6:7f:fd:db:9c:50:b2:e9:7a:98:f4:46:dd:df:6a:
         f2:f0:0f:c2:25:17:1e:6f:35:2b:7e:3b:92:2e:53:ea:c0:04:
         53:58:49:ed:c5:fb:2f:0e:d2:76:5d:9c:ba:6b:51:13:b0:7e:
         c5:2a:53:dd:45:55:26:7a:be:5e:31:a0:66:48:96:4b:ba:71:
         7b:fc:0a:9f:23:5e:3f:95:5a:3b:18:3d:6b:f8:ff:95:ef:70:
         ac:a2:04:3c:d6:1b:60:1c:fc:b0:84:9f:90:a1:bb:44:77:47:
         e4:be:2e:34:6a:97:31:c5:b5:7a:72:09:8b:1d:1a:e6:23:48:
         87:90:ef:46:b9:0e:32:7d:f4:8c:81:c1:fd:68:fe:ab:cd:f6:
         0a:ce:7a:93:19:ba:72:44:c2:b8:9a:96:78:cf:b4:34:df:1a:
         98:59:3f:88:ef:ba:7b:94:b4:a9:31:ef:9e:97:50:4d:7e:14:
         f1:55:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----