Manifest

$ rpki-client -vvf rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.mft
File:                     2CA7ECD419E28CD586D408C2CC54157A7A586FB6.mft (raw, json)
Hash identifier:          iq9CQv59LJYLdpH6uvNkEmWqAxtAqPeybRNPP+aOHoM=
Subject key identifier:   B5:92:54:6B:2D:D8:78:81:04:FB:E9:D7:E0:29:53:4A:FB:78:4E:4C
Authority key identifier: 2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6
Certificate issuer:       /CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
Certificate serial:       62EF746F7601C7148BFF8372F4FE78B36DDE93F5
Authority info access:    rsync://rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer
Subject info access:      rsync://rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.mft
Manifest number:          17
Signing time:             Sun 09 Apr 2023 21:06:23 +0000
Manifest this update:     Sun 09 Apr 2023 21:01:23 +0000
Manifest next update:     Mon 10 Apr 2023 22:19:23 +0000
Files and hashes:         1: 3130342e33372e34322e302f32342d3234203d3e203530303538.roa (hash: g6ORmDmeHjC0xJq6gpN/GQ+QDn6WKShnQzPkyzQmS3M=)
                          2: 3130342e33372e34322e302f32332d3233203d3e203530303538.roa (hash: 0yFBzAKxFkZm+Yt4tk8GlHIqzpKNLfvafDKSLOlgVJI=)
                          3: 2CA7ECD419E28CD586D408C2CC54157A7A586FB6.crl (hash: XjaUM3wL4EJ9faALHBGVOpkMFJd0AnxJNAa1n3e2GPU=)
                          4: 3130342e33372e34332e302f32342d3234203d3e20393435.roa (hash: 7i1DiZrLiOSF62+jpGqCrRYHKE6gGqrA+60UfHF3hEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ef:74:6f:76:01:c7:14:8b:ff:83:72:f4:fe:78:b3:6d:de:93:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
        Validity
            Not Before: Apr  9 21:01:23 2023 GMT
            Not After : Apr 10 22:19:23 2023 GMT
        Subject: CN=B592546B2DD8788104FBE9D7E029534AFB784E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:ac:74:42:18:27:3c:df:76:b7:56:a9:08:
                    82:8f:a0:ef:a1:d7:71:44:b0:c3:81:48:1d:02:b4:
                    55:1e:af:8f:52:05:d8:55:44:3e:16:73:a0:c5:8e:
                    b5:bb:75:ae:06:ad:2a:24:62:d7:fe:3c:5b:3b:7a:
                    6e:8a:d0:47:50:2f:8c:92:c8:fa:e6:ea:e3:82:c8:
                    25:94:90:1d:b9:d0:76:eb:87:9e:0b:e5:86:dd:62:
                    c6:de:6e:8f:1e:df:d3:87:6d:dd:94:42:66:74:a5:
                    b8:9d:ce:a7:70:db:9a:0b:6c:34:eb:ef:8f:0c:d6:
                    45:55:14:15:7a:aa:20:47:6c:31:70:94:51:cd:8e:
                    9c:ab:b2:fb:6b:61:5e:09:b1:d8:8e:ca:1b:b4:4b:
                    65:c6:e9:b1:a3:b8:08:98:77:60:74:83:8e:d2:84:
                    05:3e:fc:15:bc:75:70:3b:ef:7f:16:8a:17:c7:74:
                    f7:58:fe:ed:c6:8b:d4:6e:42:43:67:d6:c2:e9:30:
                    af:ad:87:b4:cf:28:9e:cd:06:05:e5:7d:12:35:83:
                    41:84:f1:cf:bd:c0:48:1f:19:41:25:bd:d7:99:01:
                    29:8a:78:ca:ea:51:d9:e3:fc:6a:1c:64:cc:c7:fa:
                    0d:86:f0:6a:72:86:99:06:58:50:3e:28:f8:1e:85:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:92:54:6B:2D:D8:78:81:04:FB:E9:D7:E0:29:53:4A:FB:78:4E:4C
            X509v3 Authority Key Identifier:
                keyid:2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d7:38:26:1a:44:66:9a:5e:ff:4b:d4:66:b5:51:ae:aa:22:
         22:6e:5f:69:b7:a1:3d:85:6c:0b:84:7c:6d:2a:4a:6b:4c:fb:
         29:d3:78:f1:f0:83:4b:4f:77:07:21:98:f5:ed:10:00:7c:3b:
         58:7b:43:11:0d:4a:8a:ac:7d:3d:9a:2e:6c:12:ca:1a:3c:0e:
         f3:f2:b2:92:12:f9:bb:22:fa:13:3e:df:2b:05:b8:f3:7b:26:
         74:d7:50:c9:57:6a:54:03:e0:9b:82:4c:7e:d3:db:fa:6d:de:
         cc:13:48:ff:57:98:19:db:f7:32:3f:70:41:e6:f1:66:ee:8c:
         9a:54:8b:aa:47:b5:94:f1:04:3c:1a:d7:87:9e:9c:ef:4e:df:
         06:93:0a:c5:3a:c4:99:25:e6:0e:c5:b7:05:de:ad:da:47:08:
         4f:b1:98:af:e4:4d:ab:f4:41:ce:12:88:65:47:3c:c7:1c:4b:
         b0:62:a8:4a:33:78:5a:a3:3f:a1:e7:65:5b:9d:ed:f4:d4:5c:
         66:8a:f2:22:33:a7:e5:e1:f1:71:0f:fe:89:56:6d:c2:90:87:
         04:a2:66:84:77:55:84:95:22:6a:21:88:02:a2:5a:76:37:8a:
         32:dd:e5:e3:7c:63:fd:32:9c:1e:db:a3:d9:56:9f:e7:0a:34:
         2c:d7:fa:93
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgIUYu90b3YBxxSL/4Ny9P54s23ek/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBN0VDRDQxOUUyOENENTg2RDQwOEMyQ0M1NDE1N0E3
QTU4NkZCNjAeFw0yMzA0MDkyMTAxMjNaFw0yMzA0MTAyMjE5MjNaMDMxMTAvBgNV
BAMTKEI1OTI1NDZCMkREODc4ODEwNEZCRTlEN0UwMjk1MzRBRkI3ODRFNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNqx0QhgnPN92t1apCIKPoO+h
13FEsMOBSB0CtFUer49SBdhVRD4Wc6DFjrW7da4GrSokYtf+PFs7em6K0EdQL4yS
yPrm6uOCyCWUkB250Hbrh54L5YbdYsbebo8e39OHbd2UQmZ0pbidzqdw25oLbDTr
748M1kVVFBV6qiBHbDFwlFHNjpyrsvtrYV4JsdiOyhu0S2XG6bGjuAiYd2B0g47S
hAU+/BW8dXA7738WihfHdPdY/u3Gi9RuQkNn1sLpMK+th7TPKJ7NBgXlfRI1g0GE
8c+9wEgfGUElvdeZASmKeMrqUdnj/GocZMzH+g2G8GpyhpkGWFA+KPgehZxPAgMB
AAGjggHWMIIB0jAdBgNVHQ4EFgQUtZJUay3YeIEE++nX4ClTSvt4TkwwHwYDVR0j
BBgwFoAULKfs1BnijNWG1AjCzFQVenpYb7YwDgYDVR0PAQH/BAQDAgeAMFwGA1Ud
HwRVMFMwUaBPoE2GS3JzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8xMy8yQ0E3
RUNENDE5RTI4Q0Q1ODZENDA4QzJDQzU0MTU3QTdBNTg2RkI2LmNybDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1Av
MTEvMkNBN0VDRDQxOUUyOENENTg2RDQwOEMyQ0M1NDE1N0E3QTU4NkZCNi5jZXIw
ZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2kuY28vcmVw
by9BdWd1c3QvMTMvMkNBN0VDRDQxOUUyOENENTg2RDQwOEMyQ0M1NDE1N0E3QTU4
NkZCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBADHXOCYaRGaaXv9L1Ga1Ua6qIiJuX2m3oT2FbAuEfG0q
SmtM+ynTePHwg0tPdwchmPXtEAB8O1h7QxENSoqsfT2aLmwSyho8DvPyspIS+bsi
+hM+3ysFuPN7JnTXUMlXalQD4JuCTH7T2/pt3swTSP9XmBnb9zI/cEHm8WbujJpU
i6pHtZTxBDwa14eenO9O3waTCsU6xJkl5g7FtwXerdpHCE+xmK/kTav0Qc4SiGVH
PMccS7BiqEozeFqjP6HnZVud7fTUXGaK8iIzp+Xh8XEP/olWbcKQhwSiZoR3VYSV
ImohiAKiWnY3ijLd5eN8Y/0ynB7bo9lWn+cKNCzX+pM=
-----END CERTIFICATE-----