Manifest

$ rpki-client -vvf rpki.co/repo/August/4/9CEC4948552456B5279642E132DBEF9ED069D3FA.mft
File:                     9CEC4948552456B5279642E132DBEF9ED069D3FA.mft (raw, json)
Hash identifier:          OkEm1vvpcOyZJPCqDy0bDZ2cV/OBVAdp1Q4TnqKbizk=
Subject key identifier:   4A:5B:3B:F2:32:4D:69:82:7C:04:FF:9F:BB:BD:5E:84:AA:EC:CD:EB
Authority key identifier: 9C:EC:49:48:55:24:56:B5:27:96:42:E1:32:DB:EF:9E:D0:69:D3:FA
Certificate issuer:       /CN=9CEC4948552456B5279642E132DBEF9ED069D3FA
Certificate serial:       7B7F8253411300EC649FA76642476262026EFDF3
Authority info access:    rsync://rpki.co/repo/HYSP/15/9CEC4948552456B5279642E132DBEF9ED069D3FA.cer
Subject info access:      rsync://rpki.co/repo/August/4/9CEC4948552456B5279642E132DBEF9ED069D3FA.mft
Manifest number:          17
Signing time:             Sun 09 Apr 2023 21:06:23 +0000
Manifest this update:     Sun 09 Apr 2023 21:01:23 +0000
Manifest next update:     Mon 10 Apr 2023 21:54:23 +0000
Files and hashes:         1: 9CEC4948552456B5279642E132DBEF9ED069D3FA.crl (hash: 9ChilruwVfAvpKeKp1v97IlOUCX/NGajhMAPtPuXQvc=)
                          2: AS49867.asa (hash: 7ldoAtGYSRTdZLRTiW2QLs7yo0DlS6ta8MaivtvmM8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7f:82:53:41:13:00:ec:64:9f:a7:66:42:47:62:62:02:6e:fd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CEC4948552456B5279642E132DBEF9ED069D3FA
        Validity
            Not Before: Apr  9 21:01:23 2023 GMT
            Not After : Apr 10 21:54:23 2023 GMT
        Subject: CN=4A5B3BF2324D69827C04FF9FBBBD5E84AAECCDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:4d:09:1f:ee:ba:26:c8:eb:b4:3e:58:c2:
                    37:2c:dc:7f:ff:d0:5a:bc:63:5e:9b:c8:cf:ea:17:
                    e4:e0:8c:1f:80:12:9d:2a:34:0c:0a:ab:fa:44:d2:
                    11:b8:85:e0:6d:4e:2e:03:4b:01:ff:48:5c:7b:1d:
                    cf:a3:f3:44:6b:da:a4:8c:18:a5:ea:af:8b:d2:ee:
                    b6:a3:b0:f5:cf:3c:0b:6c:02:d5:1a:37:dc:c5:3b:
                    f3:cb:28:6e:29:f6:78:02:5c:2a:bd:fd:0e:bb:14:
                    2d:94:9c:13:88:6e:d8:2f:e2:9e:4e:59:b8:71:99:
                    f6:05:3b:b8:8a:73:fb:33:a8:da:e1:71:63:41:9c:
                    f8:29:e5:97:ed:e8:e4:df:a0:50:59:ef:83:6c:66:
                    24:07:6d:65:0e:e7:44:a9:43:10:d7:cb:b9:02:59:
                    2c:2a:52:9c:2d:c6:8e:27:cd:08:ab:44:f6:42:1c:
                    11:d6:fb:56:69:99:2a:6b:a7:36:05:fc:48:1d:a0:
                    42:80:b9:dd:77:da:ed:d7:8f:4c:07:50:4a:e9:4c:
                    03:16:d3:6b:87:cb:c9:5c:9e:1a:1e:c2:84:92:71:
                    0a:4d:b7:36:e3:4d:22:4a:c3:52:b7:8b:a8:1a:c2:
                    f9:b6:90:9d:6b:65:ef:7c:71:e7:57:3b:06:44:b0:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:3B:F2:32:4D:69:82:7C:04:FF:9F:BB:BD:5E:84:AA:EC:CD:EB
            X509v3 Authority Key Identifier:
                keyid:9C:EC:49:48:55:24:56:B5:27:96:42:E1:32:DB:EF:9E:D0:69:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/4/9CEC4948552456B5279642E132DBEF9ED069D3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/15/9CEC4948552456B5279642E132DBEF9ED069D3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/4/9CEC4948552456B5279642E132DBEF9ED069D3FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:45:e8:86:8e:91:a0:0a:c2:3a:14:f5:77:25:91:79:74:
         a6:f2:98:75:3e:e5:b0:8d:69:8a:a8:8f:11:37:a4:3a:4b:97:
         92:5d:24:9c:bd:55:1f:29:9c:bd:aa:50:08:15:6f:e5:5f:e5:
         c6:d8:3c:6b:b4:de:c8:72:48:b1:3e:5c:a0:b7:24:a8:ba:a1:
         e3:7f:3c:d3:6b:a6:9a:2e:ac:c4:d1:9b:e2:5b:d7:d5:92:9f:
         75:cd:82:32:a4:a3:aa:1d:b3:73:78:b3:bc:9e:08:d8:57:2d:
         8d:56:34:e5:0e:91:8c:28:ec:7a:03:7a:8b:7e:d6:a5:fb:8f:
         a9:b7:3a:2f:36:bb:64:64:40:4c:9a:95:c3:20:99:0f:74:e8:
         01:53:94:8e:08:8d:42:66:de:43:2e:19:19:21:a0:da:a4:0a:
         28:fb:2c:e6:55:33:61:90:48:60:d3:ec:8d:78:9e:70:4e:e4:
         87:e1:7f:13:a1:d7:73:f5:78:fd:eb:aa:52:27:40:3c:d9:27:
         08:5f:2b:ad:f8:a9:37:48:9a:ab:a7:8d:9c:b7:48:9b:c3:22:
         c5:23:25:08:37:5c:c4:1e:0d:f8:0b:be:e9:61:cf:17:95:7b:
         0e:ea:2d:2a:c3:1f:40:d6:c7:87:26:d7:bb:eb:34:68:c2:d2:
         b2:28:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----