Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/3714444A3C87A55B1D9FA161A4C916E5F64911DC.mft
File:                     3714444A3C87A55B1D9FA161A4C916E5F64911DC.mft (raw, json)
Hash identifier:          mGHetHcIk1NFnLFrG7YNtas4bmIHfnen4P5KCGiCdkg=
Subject key identifier:   CA:1D:62:5E:90:0C:42:1D:F4:E2:B1:B6:C2:93:69:94:A8:AB:15:F1
Authority key identifier: 37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC
Certificate issuer:       /CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
Certificate serial:       56E5264842A4DAABE7F5A1D893DEC01ADB34FB02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/3714444A3C87A55B1D9FA161A4C916E5F64911DC.mft
Manifest number:          1D
Signing time:             Tue 01 Feb 2022 01:30:00 +0000
Manifest this update:     Tue 01 Feb 2022 01:25:00 +0000
Manifest next update:     Wed 02 Feb 2022 04:14:00 +0000
Files and hashes:         1: 323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa (hash: YeXZhGl+ezfx3ssTrGTZ0Hk6KWWIvnIjGA2WUfugFWc=)
                          2: 323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa (hash: COmKw2IIA+9qG2PPh3R7D9dpCA40QLg4wh6XBUtDBms=)
                          3: 3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa (hash: IrfPV6I4kN385nammaXeRb01EJsCEPGsV60hWOXDEd0=)
                          4: 3714444A3C87A55B1D9FA161A4C916E5F64911DC.crl (hash: uRoTihFGoKe1n32rD2q2VlBVNsaQlR5NeAl49d8+XZU=)
                          5: 323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa (hash: 6xTli59frR4ryHEOzEOuy4sXbnsco6xSkWGbkpiSNr4=)
                          6: 323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa (hash: 3xU+Mz+ycD4VQOig8KQfbjLQJ5Jfxan213/XlMDbiD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e5:26:48:42:a4:da:ab:e7:f5:a1:d8:93:de:c0:1a:db:34:fb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
        Validity
            Not Before: Feb  1 01:25:00 2022 GMT
            Not After : Feb  2 04:14:00 2022 GMT
        Subject: CN=CA1D625E900C421DF4E2B1B6C2936994A8AB15F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:bc:3c:3e:70:c6:da:ce:3c:0d:44:bd:1b:
                    29:7b:63:2b:72:0e:02:24:8f:8d:24:8f:6c:42:c8:
                    47:02:7e:74:f4:18:db:bd:72:5b:48:34:be:d9:1a:
                    d6:38:2d:f7:67:b1:51:e9:d4:7e:7b:1d:69:0c:49:
                    1e:5f:87:d9:85:7c:8a:a3:ea:b4:84:a7:d8:99:c0:
                    b8:2d:63:90:76:e8:dd:54:11:ce:7c:42:fe:8f:8b:
                    a5:d1:8c:fc:48:bc:44:3f:08:0e:33:7b:be:2f:10:
                    ce:0f:a2:a2:c0:d4:b9:5a:8d:e1:31:b6:4c:65:db:
                    17:23:48:7e:a3:65:f9:57:d5:4a:10:bf:53:af:68:
                    35:bd:5c:13:20:bc:fe:51:58:b7:a6:b3:0b:a2:4f:
                    64:f5:d3:68:a5:79:92:13:78:b2:5f:b0:08:d7:fa:
                    39:db:26:85:c3:8d:47:84:97:30:b1:a3:b2:5b:76:
                    9a:f7:6e:bb:e0:aa:3e:29:b8:48:ef:b8:54:d4:3c:
                    81:42:f5:e9:3b:c0:76:62:a5:49:fa:6e:47:00:76:
                    43:80:b6:66:f9:86:3a:90:d2:d0:fe:ab:d8:89:c9:
                    29:6d:e1:0d:93:53:df:f5:fa:57:d5:81:f4:bd:a1:
                    4d:73:4a:31:bf:7f:27:d9:b3:b3:5d:73:a7:a2:b4:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1D:62:5E:90:0C:42:1D:F4:E2:B1:B6:C2:93:69:94:A8:AB:15:F1
            X509v3 Authority Key Identifier:
                keyid:37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/3714444A3C87A55B1D9FA161A4C916E5F64911DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/3714444A3C87A55B1D9FA161A4C916E5F64911DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:b6:96:ad:82:10:e9:cd:ca:c0:b9:8a:84:86:44:76:79:
         c1:f9:0d:33:1e:d7:52:c1:5c:d2:a4:c3:4e:75:42:34:ac:06:
         5a:13:cb:ad:1b:47:f2:03:04:2c:4e:92:92:e2:b3:ff:8d:89:
         11:f4:8a:16:6a:b3:c2:b7:ad:37:30:67:a2:ca:03:47:7b:4f:
         5f:37:ed:eb:c8:d9:ff:3c:a5:5c:da:6d:56:de:c3:c0:a5:ab:
         0d:f7:40:53:bf:b4:d8:26:77:34:06:2a:d5:66:9c:47:76:11:
         1f:b4:59:40:8f:be:02:5f:86:23:1a:70:5c:1c:23:83:88:c8:
         fc:ac:e5:78:aa:50:e0:f3:4c:ca:15:35:2b:f0:98:97:c8:04:
         35:18:ff:ef:96:b5:2a:5c:5b:55:11:3c:d0:87:f2:98:d0:97:
         08:72:bb:0a:e9:ed:35:c1:9a:d5:fe:c4:22:ee:02:f5:bf:43:
         7b:34:9a:fd:81:a0:79:19:9f:b6:62:97:e5:e0:6f:4a:9f:16:
         54:49:4c:93:01:3f:c4:91:c9:08:37:c8:c7:63:2a:34:6f:b5:
         a1:0f:00:47:a8:83:7e:d5:b8:65:03:d4:aa:e6:23:c3:47:2e:
         21:ab:d1:dd:26:d3:25:44:e9:7b:e5:d9:aa:a6:7d:d1:ae:7c:
         cf:6f:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----