Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft
File:                     133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft (raw, json)
Hash identifier:          o0eVTsOt91Z8QoRWFvZMMqJdvEFXld6qRMm6uz9AMaE=
Subject key identifier:   1D:DF:1A:AE:33:72:E8:A4:85:78:3A:77:0F:0E:38:ED:1C:BC:3A:70
Authority key identifier: D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB
Certificate issuer:       /CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d
Certificate serial:       010D0C9F43285848BA739C624505B29998015C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft
Manifest number:          010D0C9F4328584073A85AB86E4C4FB8F40729F7
Signing time:             Fri 31 Jan 2025 15:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 15:00:00 +0000
Files and hashes:         1: 133f2e91-cc80-4b10-bfd8-32bfcceeb10d.crl (hash: VP4CJvjVkNrsOzE0+b8vGZdtj/rPRbD2ioCgGzjQryQ=)
                          2: 65a44a31-945a-3144-bd1a-64ec60da9055.roa (hash: c+X/UfoElNT2c5gLW63phdDcKqfOdIOxryBAKohyqpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:73:9c:62:45:05:b2:99:98:01:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d
        Validity
            Not Before: Jan 31 15:00:07 2025 GMT
            Not After : Feb  3 15:00:00 2025 GMT
        Subject: CN=b121e3da-4bec-46dd-9af5-110de1f240d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:4c:42:4d:21:92:79:52:60:d5:4e:7d:41:
                    be:25:07:38:63:97:62:99:22:4d:27:f8:37:82:72:
                    5d:4b:7b:90:69:c4:df:16:c7:6b:4a:bd:23:0c:26:
                    b3:fa:d2:be:54:06:15:fc:f0:fa:c6:3f:37:4c:89:
                    64:33:f9:f9:6d:86:ee:38:81:3a:ba:f7:8d:6b:c4:
                    88:07:0d:44:eb:2e:8c:13:ed:01:90:3b:e2:c7:6e:
                    d6:66:f2:f5:6d:28:a2:9a:c3:e5:62:58:4f:9b:3e:
                    7a:be:80:fe:07:b4:61:5c:07:a6:b2:1f:91:a6:69:
                    b3:3f:b8:27:2d:1f:44:9e:d3:ed:6d:bc:ff:80:27:
                    10:6b:e0:2e:be:df:e5:fa:ec:55:11:75:7b:53:67:
                    d6:a0:05:54:4e:67:59:a6:e8:81:42:17:20:4c:f3:
                    76:7e:6d:a9:be:da:50:b7:bd:f4:f3:13:a0:50:11:
                    34:0b:10:b8:67:7f:af:16:d5:0a:bb:5f:de:4f:e4:
                    f4:8f:e3:bb:ae:4d:20:d0:2a:4b:c3:dc:5b:e7:ca:
                    5c:1e:ba:52:2d:e7:ac:6d:02:8e:e9:b4:1e:c9:96:
                    da:2f:a8:b4:d2:56:07:a6:b1:52:fa:6f:dc:ac:6c:
                    80:6a:45:19:86:34:eb:8d:6a:10:6a:3b:a7:1a:ac:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DF:1A:AE:33:72:E8:A4:85:78:3A:77:0F:0E:38:ED:1C:BC:3A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.crl

            X509v3 Authority Key Identifier:
                keyid:D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:63:2f:68:0f:60:15:ff:85:7c:dd:41:97:6b:da:f6:75:
         a3:04:6b:cd:65:31:30:b9:d1:cd:3a:26:c1:47:ac:da:2e:3c:
         f0:fe:c5:7a:2d:39:9a:39:df:c6:3f:43:b1:25:29:6f:8a:37:
         6d:ed:b7:bf:29:65:c6:4e:96:73:9b:6b:23:e4:af:3b:29:24:
         16:f8:67:f1:60:12:ed:26:04:03:a5:e0:b8:88:1c:f0:21:38:
         68:09:00:b0:87:b3:3e:93:cd:c0:c7:fa:bb:96:f5:fd:aa:3f:
         6e:95:1b:7b:96:10:9a:9d:1c:40:d8:83:4c:26:b0:7f:7a:5b:
         fb:32:d5:50:4f:b0:f2:cc:7e:6a:8d:74:e9:d1:c4:77:f3:bb:
         9a:d6:ca:60:4d:7b:00:aa:d7:0c:a2:b6:46:d0:b5:88:e2:07:
         98:68:c8:2e:9b:d1:27:ba:f2:f6:e4:16:9b:10:fe:50:66:2c:
         63:d3:a8:4e:24:d8:ab:dc:d6:30:29:5c:bd:62:37:1d:2e:8a:
         45:45:8e:ae:c8:99:7d:02:15:4e:e6:c4:fa:db:a2:c4:c9:a9:
         5e:e8:07:c7:a4:6a:bc:2e:ce:ab:40:da:2b:f3:62:8a:e5:d1:
         0e:de:04:ad:47:c0:da:53:ef:e7:22:a1:6b:21:52:75:e7:5c:
         d3:db:f4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----