Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          qf5srd+WgsGxTtDGWarIuXjWb5NlnzwdD3pmXuyCmQE=
Subject key identifier:   14:C3:18:FE:57:90:0A:2C:7F:7D:48:90:8C:E4:F3:92:11:84:E2:10
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       3C91BC32AA31C9364D16BA31F8D82CEDF32B3DFB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          032E
Signing time:             Thu 30 Jan 2025 23:57:52 +0000
Manifest this update:     Thu 30 Jan 2025 23:57:52 +0000
Manifest next update:     Mon 03 Feb 2025 23:57:52 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: 6Cls8caxul7ZMn11OaLNDBAkjVCfUDmxeBdwzGlmMH0=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: eA7fwdp3NUz0CsS7DMS+6g7xDl2EcwKPqUKAuBi7E+E=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: ElIztC9A/PuKjT+DQpi8QHUOUb3qi/8DSl4V7NUTbHY=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: CLsK9pYtypvmrrNxE+gowqTW0AMBiGlA8Omn/Ph2NKo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:91:bc:32:aa:31:c9:36:4d:16:ba:31:f8:d8:2c:ed:f3:2b:3d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Jan 30 23:57:52 2025 GMT
            Not After : Feb  3 23:57:52 2025 GMT
        Subject: serialNumber=4748d8dee73aa447c469a5dce62745cfd5acd345994654f1d23cd22e620963e5, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:26:b2:12:4c:ce:74:65:17:13:80:0f:83:
                    58:ce:7f:b4:a6:1a:9c:da:6d:90:15:df:72:c6:32:
                    cb:74:c5:2f:01:1f:5c:f4:9e:5c:bc:a2:f1:fa:cc:
                    db:90:e1:87:9d:e1:e5:0b:4f:c9:a3:a8:f9:86:57:
                    9b:83:d1:f7:ad:9e:bc:48:93:96:5b:da:78:7d:57:
                    db:74:81:d3:69:19:b7:c2:f8:55:58:00:ed:1e:6a:
                    9c:f8:02:34:13:3b:df:f3:ef:4e:63:c9:1b:41:f3:
                    e9:3f:9f:1a:74:e9:aa:7a:32:78:11:7a:81:26:d7:
                    6e:6d:22:c6:f3:a3:e7:7c:f4:53:41:fa:eb:dc:7d:
                    de:65:04:f1:9e:0a:6f:c1:62:e3:59:e8:b5:15:87:
                    43:69:a8:b8:c4:b2:b1:bd:30:5c:a4:43:24:6a:37:
                    76:35:63:4e:8c:b6:c3:5b:9c:f8:8e:5b:74:80:c4:
                    36:27:32:71:1c:df:9a:e2:5e:98:37:cc:bd:07:cc:
                    12:64:00:c7:b3:37:c2:7f:c6:66:ec:09:ff:02:1a:
                    00:c5:a2:b0:ed:fb:60:fe:c2:3b:91:ee:1f:50:ed:
                    6b:e6:e2:c1:0b:f4:31:04:cb:c4:91:04:ee:4b:fe:
                    d8:a6:b1:27:a3:30:e5:c0:91:fa:09:d4:d4:23:4d:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:18:FE:57:90:0A:2C:7F:7D:48:90:8C:E4:F3:92:11:84:E2:10
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:41:0f:3c:0a:98:de:dd:d1:54:c3:72:38:94:a6:62:e3:10:
         f0:57:ac:3b:d6:bd:95:ce:e2:eb:b4:ee:bd:b6:98:86:93:7e:
         ff:1c:cd:dc:65:2f:e9:31:d3:a4:35:f9:49:52:6b:92:4d:88:
         51:88:ab:f8:69:d5:42:b4:3d:98:7f:be:6a:31:2d:7c:a9:54:
         55:cd:0b:b2:e9:86:45:58:22:86:d3:f5:87:3b:e4:40:06:8e:
         94:18:3c:4c:04:b2:73:d9:b9:42:2e:26:d7:6f:6a:eb:8d:af:
         11:7e:03:6c:7e:4a:d4:b8:7c:42:23:c3:7e:a6:f3:47:65:fa:
         a9:dc:08:d6:a6:e2:d9:a4:97:13:d8:42:33:11:c8:26:55:b7:
         2c:ab:4e:59:b3:d8:2f:ce:a1:3b:bc:b2:ce:27:8b:74:39:3d:
         28:ca:22:7e:fc:15:31:1c:3e:b2:e2:f8:b1:c7:dd:46:0f:fb:
         1f:cc:07:e3:c2:49:b2:6f:a1:ca:3b:1d:5c:29:22:34:5e:52:
         dd:a2:ed:35:0f:21:b3:73:42:27:5a:85:40:d5:1d:d0:5e:93:
         4a:d8:45:5f:5d:7f:fe:66:90:9c:33:ab:1d:0b:5b:d2:e5:22:
         60:0a:ab:a9:16:fe:64:f2:aa:6b:29:af:10:ea:90:e2:07:fe:
         e0:4b:fa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----