Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c/c222b9e1-d773-4359-8c1d-0699ca26e63c.mft
File:                     c222b9e1-d773-4359-8c1d-0699ca26e63c.mft (raw, json)
Hash identifier:          zdIf8cwNxDzy6ZXde2sasmYDqj5vf3znpif7684YKWg=
Subject key identifier:   B8:1B:1C:55:FD:89:5A:75:2E:41:EA:51:8A:69:95:DF:45:7B:BD:E8
Authority key identifier: FB:BA:E0:ED:60:7C:00:B0:F1:CB:0C:E9:DD:64:54:9D:07:4A:6C:90
Certificate issuer:       /CN=c222b9e1-d773-4359-8c1d-0699ca26e63c
Certificate serial:       010D0C9F43285840B14ABD3689D001288436C900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c/c222b9e1-d773-4359-8c1d-0699ca26e63c.mft
Manifest number:          010D0C9F4328584073A82099F06CD4BD19FA8D96
Signing time:             Wed 25 Jan 2023 18:00:02 +0000
Manifest this update:     Wed 25 Jan 2023 18:00:02 +0000
Manifest next update:     Sat 28 Jan 2023 18:00:00 +0000
Files and hashes:         1: a16a9160-4282-33e4-92b8-f61a3de9b831.roa (hash: iL0XOnE4rU3vSxUpH/7HuLWgCM3BPt6O+bgl2QwQt1A=)
                          2: bc5fe162-80eb-3a81-8557-687c956e9bb1.roa (hash: dI+I26GZsPE+2mcUan35LoOJ8Ey6oh8T+zdXyNhETa8=)
                          3: c222b9e1-d773-4359-8c1d-0699ca26e63c.crl (hash: Q2vdAXOC6VSBKen0o0eGhGWJXhmeyL1+BZJzJDctqyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b1:4a:bd:36:89:d0:01:28:84:36:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c222b9e1-d773-4359-8c1d-0699ca26e63c
        Validity
            Not Before: Jan 25 18:00:02 2023 GMT
            Not After : Jan 28 18:00:00 2023 GMT
        Subject: CN=b5979eac-1f86-4669-a449-a5655c2a2141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:3a:64:57:2f:5d:61:02:e3:ab:dc:2a:0f:
                    27:48:16:6d:f3:25:29:76:ed:6c:0e:33:03:8a:91:
                    64:63:d6:20:62:af:ae:c4:d2:3d:7f:d3:0c:a5:7b:
                    96:14:96:86:b7:aa:d0:28:32:5d:0c:56:75:c3:25:
                    e0:86:d1:af:d1:94:3a:51:3b:dc:a9:27:6f:56:97:
                    48:01:2c:7f:ce:bc:76:9b:68:aa:56:93:35:fd:6d:
                    8c:38:b6:31:70:d4:ae:8a:56:79:70:f2:2e:f5:df:
                    bf:e9:94:c0:83:ed:83:66:c5:38:84:2d:07:71:24:
                    2c:35:34:86:3a:4d:a6:51:d3:b9:dd:9d:81:8b:3c:
                    00:6b:e1:59:bc:3c:e3:69:f8:8a:72:4c:b5:93:74:
                    69:8a:d5:35:bc:e5:0c:fd:97:28:a9:ee:cc:1e:05:
                    d6:63:94:7f:e5:76:3e:bf:f0:c4:3c:e8:3b:0c:11:
                    70:95:56:ea:c8:cc:fc:7c:c5:9f:37:4e:f5:54:f0:
                    5c:50:bd:20:b1:3c:d0:fd:d3:e4:1e:63:d9:0c:6b:
                    d7:4a:44:bd:81:a1:d9:2f:80:6d:f1:e6:2f:b3:1d:
                    c1:54:51:f0:37:f7:d3:a2:97:cf:9f:eb:fd:51:8d:
                    25:3a:9f:14:f3:fb:ee:43:ff:24:0c:b6:ab:5e:6d:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1B:1C:55:FD:89:5A:75:2E:41:EA:51:8A:69:95:DF:45:7B:BD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c/c222b9e1-d773-4359-8c1d-0699ca26e63c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c/c222b9e1-d773-4359-8c1d-0699ca26e63c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BA:E0:ED:60:7C:00:B0:F1:CB:0C:E9:DD:64:54:9D:07:4A:6C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c222b9e1-d773-4359-8c1d-0699ca26e63c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:01:15:80:43:dc:32:f8:2f:f0:c8:42:1a:1c:bd:2e:0e:
         df:8b:ac:c4:88:20:8b:f8:24:4b:f7:e7:6b:56:52:ad:09:84:
         ee:cf:bb:c7:5b:5f:a0:c7:a8:a0:5f:69:ea:65:1d:c0:df:a5:
         d0:da:1a:e7:dd:c4:58:03:ef:f2:37:51:c5:dc:b1:09:95:9b:
         21:99:e2:c4:aa:cc:77:cd:99:4e:5b:c3:f9:2a:42:3b:6e:3b:
         7d:5a:ff:7f:e2:53:0c:0f:52:7d:a4:ed:85:3b:d6:97:e6:f3:
         47:47:5d:2a:14:4a:ca:52:45:7e:39:d9:5a:1d:69:2a:6f:a0:
         12:07:34:d2:60:e3:00:87:1a:74:0e:31:1a:9c:4d:8c:8d:47:
         be:e1:3e:7f:10:35:5c:fd:ae:92:db:0f:3e:e3:84:59:1e:15:
         ed:2e:69:68:68:d6:e0:bc:b5:6a:d3:87:52:ef:63:2c:85:b4:
         7c:2f:15:76:f2:e9:44:27:82:62:6f:71:08:ae:71:64:54:44:
         c7:37:62:97:3c:87:78:d9:de:ae:00:df:70:be:d2:61:47:56:
         19:ac:5b:75:f5:e7:bf:2b:a3:c5:95:32:e1:62:57:ea:02:b3:
         a2:3d:03:f2:6e:59:e5:5a:1f:f3:2d:ed:2d:54:9c:ef:d5:05:
         d4:09:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----