Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.mft
File:                     721D5784DC4625E6A5D939A6F977FBC8A1242756.mft (raw, json)
Hash identifier:          Urxf+WaQMB7KYeUgXpxZvog7EVRPzgChIwZlfgQ8US8=
Subject key identifier:   2D:3D:FF:84:24:BE:60:36:30:26:E5:95:12:34:7B:0B:31:B1:32:55
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       6DF8167BED1A720089D70BE564A79A2E377EFEE4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.mft
Manifest number:          0133
Signing time:             Tue 22 Aug 2023 02:39:44 +0000
Manifest this update:     Tue 22 Aug 2023 02:34:44 +0000
Manifest next update:     Wed 23 Aug 2023 03:24:44 +0000
Files and hashes:         1: 3231362e3138352e3139392e302f32342d3234203d3e20383334.roa (hash: K9tt+vHs6plsFyeaZRSnGGU6EiGAUxnLco0q7vGpiA0=)
                          2: 3231362e3138352e3230332e302f32342d3234203d3e20383334.roa (hash: sJ8bswaBWokY9SQMTKABR8uPS+5QHMhwIGC65dCd0Gk=)
                          3: 3231362e3138352e3139362e302f32342d3234203d3e20383334.roa (hash: x/4x409M7xp00wAQ7EzXedZDi3X39/3f2HMne+Jvnps=)
                          4: 3231362e3138352e3139322e302f32342d3234203d3e20383334.roa (hash: fXToiQl6vVbHEvkOuS5uYDKaD1CNlFzQteU39g7GmPQ=)
                          5: 3231362e3138352e3139352e302f32342d3234203d3e20383334.roa (hash: lpID1xJjoar5nSsIpQl0FJnJAVuYekmNYacxocHvBEw=)
                          6: 721D5784DC4625E6A5D939A6F977FBC8A1242756.crl (hash: WOyWf4XwQCogqanrqA0kbJTDmKAf+aEGVE+dE312LnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f8:16:7b:ed:1a:72:00:89:d7:0b:e5:64:a7:9a:2e:37:7e:fe:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Aug 22 02:34:44 2023 GMT
            Not After : Aug 23 03:24:44 2023 GMT
        Subject: CN=2D3DFF8424BE60363026E59512347B0B31B13255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:7a:54:93:4d:2e:02:36:3a:14:23:c4:7b:
                    ed:89:13:aa:6f:89:8f:e4:d4:86:02:26:09:30:28:
                    19:78:a5:f0:49:04:bc:74:41:59:5c:91:1b:df:e2:
                    fa:ba:73:84:ed:2a:7e:a5:ce:88:ff:d2:fd:72:97:
                    57:c2:27:f4:2b:14:15:5d:e0:54:45:02:1b:ea:bc:
                    24:22:4c:0c:75:60:c9:37:60:59:4d:90:5a:ac:fc:
                    bb:03:98:d5:26:b9:05:e8:0e:13:3e:06:a9:3e:0e:
                    71:1e:e8:c2:f2:88:b1:43:9b:9b:fb:76:11:d9:27:
                    7a:b2:22:ff:fa:fa:c3:f0:9a:4b:dc:06:89:3a:28:
                    88:87:06:24:da:71:88:6a:f4:41:92:64:02:bd:b3:
                    5b:f8:5b:d7:d5:85:34:29:26:62:0e:ee:40:75:cc:
                    5f:97:14:1a:e7:bf:af:b8:2b:3c:82:76:d3:ab:d4:
                    81:af:ac:c9:c9:aa:d5:d7:1e:00:01:25:e5:2a:81:
                    81:8d:2c:00:5e:5a:c0:04:6c:a2:c6:5e:07:55:7e:
                    59:f1:72:3b:0d:09:fe:27:30:20:bd:49:cb:e2:e2:
                    1b:b3:40:00:8b:b1:6c:ca:f8:95:8f:49:5a:a1:c2:
                    ae:47:0b:7c:e8:c3:36:40:ec:a9:bb:fa:f7:64:f8:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:FF:84:24:BE:60:36:30:26:E5:95:12:34:7B:0B:31:B1:32:55
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:39:54:78:64:df:14:f2:68:12:61:aa:84:86:de:6b:21:42:
         8c:37:ed:e3:21:06:df:08:3c:f9:6e:e7:9b:ea:02:99:c4:b5:
         c9:23:a5:30:18:ed:e4:2c:23:f3:2e:bd:08:35:08:cd:dd:b6:
         43:3c:29:d8:81:2c:64:06:ca:a0:26:a5:02:08:31:4d:da:cb:
         28:d3:aa:c7:68:84:b0:6e:46:e5:d2:de:55:73:f3:8b:d0:5d:
         f9:f5:30:6c:d5:0b:9e:53:4a:a3:82:e5:57:a3:92:eb:56:b9:
         54:f0:00:1b:a9:46:77:9e:dc:8e:bb:41:90:47:6d:95:4a:fc:
         df:fc:55:4a:2f:1e:38:db:db:14:e7:28:13:9f:0f:2c:8a:74:
         57:13:1b:d3:96:bf:c3:9d:d9:ee:2f:e1:5a:b3:80:6a:73:d8:
         04:05:d7:a1:72:35:0c:0c:93:86:6f:55:3f:8b:c8:15:b9:1e:
         2b:23:74:9e:fd:6a:d3:3e:3a:8f:66:ef:2b:23:86:51:f3:1b:
         5f:f4:29:7d:db:79:c3:8e:c4:b6:19:2a:cf:ef:db:9d:e7:fa:
         f7:23:b9:d1:b9:29:02:1e:d6:6f:ff:25:67:f6:41:10:2e:0a:
         ba:60:be:19:c0:a3:d0:d0:d0:3d:43:61:5f:6a:b2:00:50:7a:
         c6:50:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----