Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
File:                     B21BD1771A96D79F70796091512F278111148EF0.mft (raw, json)
Hash identifier:          3uSTzjOdHEaaCTQz/BjZeIUBpglV0tM/AJRp798zaE0=
Subject key identifier:   8C:49:2F:CA:F8:20:37:AF:10:01:12:96:96:46:05:0D:F5:B2:3E:E6
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       199DBCBBFA4999579BC356CCB163DBBA94169ED2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
Manifest number:          0429
Signing time:             Fri 31 Jan 2025 04:29:00 +0000
Manifest this update:     Fri 31 Jan 2025 04:24:00 +0000
Manifest next update:     Sat 01 Feb 2025 04:41:00 +0000
Files and hashes:         1: 3230352e3231312e3135342e302f32342d3234203d3e20383334.roa (hash: ydR1+DwOTXJsFHWx6voHhAnGbqOuPmls9v1tHohIIVA=)
                          2: 3230352e3231312e3135352e302f32342d3234203d3e203130373337.roa (hash: j9/nInW57uhcBfF6OVwoXmC5vrpOyOfO1s49XP1rLec=)
                          3: B21BD1771A96D79F70796091512F278111148EF0.crl (hash: FLE7HOmCs6zL75qYMVoL+2C4rR9sHlHsjqooK8uqX0k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9d:bc:bb:fa:49:99:57:9b:c3:56:cc:b1:63:db:ba:94:16:9e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Jan 31 04:24:00 2025 GMT
            Not After : Feb  1 04:41:00 2025 GMT
        Subject: CN=8C492FCAF82037AF100112969646050DF5B23EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:1e:2e:ef:33:77:7e:3b:03:90:1a:c4:ee:
                    53:fc:bc:f0:de:e6:15:0e:e6:b2:ea:fd:e4:c0:53:
                    7c:48:e0:4a:02:17:2c:22:06:5a:11:d1:02:81:48:
                    c2:81:06:34:5a:0f:c6:49:f0:20:44:6b:50:67:2d:
                    81:63:be:34:e3:9c:52:44:5c:f5:7f:85:5a:26:6b:
                    78:17:4d:ba:ba:4b:3c:eb:b6:16:6d:a2:7f:da:4d:
                    6f:80:04:28:f7:d3:d0:54:d2:9c:54:01:8a:ef:10:
                    99:97:2a:3a:7f:1e:e7:e6:41:80:70:2e:98:c9:ed:
                    29:11:b5:cc:83:a3:fc:92:b5:93:12:97:79:33:52:
                    8a:56:4e:10:57:f1:29:b0:c6:76:76:a7:a9:c0:be:
                    f8:c3:44:36:c3:0b:7f:a8:42:d2:6c:88:8b:80:11:
                    72:1e:2b:17:51:1b:0d:41:50:b4:13:80:a0:72:53:
                    8d:a3:13:9e:4f:08:bc:fa:f9:04:cb:9d:70:4f:6a:
                    f6:2a:35:51:20:e4:8c:03:de:4b:c1:e7:b4:46:cb:
                    f1:7c:fc:97:3b:71:72:f6:87:bc:06:1f:cc:7e:aa:
                    83:be:ae:4f:58:69:b2:db:1e:06:8a:9c:3a:87:d9:
                    ac:4b:9a:1b:32:4c:e4:1c:f6:38:86:39:8a:6c:7f:
                    df:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:49:2F:CA:F8:20:37:AF:10:01:12:96:96:46:05:0D:F5:B2:3E:E6
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:e8:d7:3e:f3:2a:9c:96:eb:ae:ff:f2:44:16:67:33:f0:
         3c:55:92:6b:46:13:8a:d9:8a:57:3f:50:e6:62:9d:93:43:6f:
         91:28:39:8c:5f:2e:8f:67:04:59:7c:72:7b:4c:c5:e9:a6:a6:
         14:e3:9d:ff:d6:1d:ab:a1:e8:49:e6:f4:96:24:bf:e7:a1:a5:
         0a:2c:a9:b8:26:d5:25:2c:46:4a:b5:79:31:a3:02:f3:de:24:
         5c:b3:fe:e1:4e:fa:a6:7e:1d:12:03:b5:93:70:f3:58:15:2b:
         36:e9:cb:a3:61:fd:31:eb:4a:c2:de:26:98:0e:84:6f:26:58:
         98:e1:20:cd:9f:fb:76:af:69:c0:14:c4:a7:ec:77:5a:d2:ce:
         86:58:c9:54:6a:cc:8e:9f:41:5d:b4:68:9d:b8:9d:fd:7b:cb:
         f0:d5:03:cc:e3:da:5d:89:a0:63:7f:89:c8:c6:73:0f:7f:74:
         96:6d:74:3c:6a:cd:2c:11:0a:c1:5b:83:77:4e:39:17:32:ff:
         b4:8b:2b:aa:fd:40:d5:7e:3b:35:82:02:02:d6:65:c2:8f:31:
         f0:28:a3:4e:84:8e:04:9b:2d:65:02:e4:10:d9:eb:48:cd:9a:
         40:40:d5:0c:50:11:12:a6:77:f3:16:9f:2d:45:11:8a:14:02:
         9b:7e:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----