Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/0/21E218AD0B563060C5E7A0FBF40D095A50D02786.mft
File:                     21E218AD0B563060C5E7A0FBF40D095A50D02786.mft (raw, json)
Hash identifier:          WU5upkI2YJZxtjerntkUeTy7atIHLV68VrYXJc5wIKA=
Subject key identifier:   D6:A0:81:6F:60:D0:A7:33:A9:70:77:6E:DD:2E:6E:A0:FB:0D:7D:EB
Authority key identifier: 21:E2:18:AD:0B:56:30:60:C5:E7:A0:FB:F4:0D:09:5A:50:D0:27:86
Certificate issuer:       /CN=6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20
Certificate serial:       15A2A2850EF0FD7E21ACAC0FF0AB06481563F522
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/21E218AD0B563060C5E7A0FBF40D095A50D02786.mft
Manifest number:          09
Signing time:             Sun 09 Apr 2023 21:06:50 +0000
Manifest this update:     Sun 09 Apr 2023 21:01:50 +0000
Manifest next update:     Mon 10 Apr 2023 21:29:50 +0000
Files and hashes:         1: BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer (hash: v7gUB9TY+CVuMm8+kjDSxURlRsMdv3SFkS30V3wvykM=)
                          2: 21E218AD0B563060C5E7A0FBF40D095A50D02786.crl (hash: l+kFwnlrj77KVv0IQE9+xfJ4NXuPaYQJG2op1vJCtu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a2:a2:85:0e:f0:fd:7e:21:ac:ac:0f:f0:ab:06:48:15:63:f5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20
        Validity
            Not Before: Apr  9 21:01:50 2023 GMT
            Not After : Apr 10 21:29:50 2023 GMT
        Subject: CN=D6A0816F60D0A733A970776EDD2E6EA0FB0D7DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:f2:30:4c:d1:24:5c:89:1e:a2:dc:ff:42:
                    a8:67:a0:34:ab:a9:6e:6c:2c:50:cc:dc:e0:e8:4b:
                    bf:2a:b1:34:d3:99:76:89:48:8c:eb:8a:a2:fc:30:
                    09:6d:06:ff:c6:af:ec:8b:c0:91:f3:51:d7:45:ec:
                    ea:cf:54:3c:58:bf:b7:03:b5:b9:4c:ad:42:e0:de:
                    aa:c9:17:f7:bf:92:be:63:30:e9:37:69:00:cd:98:
                    46:9f:3b:84:2c:52:ce:c8:85:8f:9e:81:71:7b:9c:
                    c6:be:1e:f4:fe:4f:9a:ea:e5:70:1a:d1:47:dd:0c:
                    f7:f1:86:7b:ed:04:66:2a:a6:a6:f6:2c:80:64:33:
                    f6:4a:e9:f6:49:7b:6f:e1:fa:d5:2f:a0:0a:26:36:
                    77:c9:71:78:a3:de:a9:73:83:ac:9e:56:a8:a4:c5:
                    fe:1f:35:90:7a:3b:b6:de:a3:ec:de:da:b8:d5:da:
                    80:52:e0:73:b0:28:bd:e3:13:5a:2d:dc:d7:0c:e6:
                    14:22:70:ab:af:5e:ea:b4:1c:02:01:48:6e:ed:5e:
                    3f:a3:fc:59:ec:4f:26:62:ad:ef:3b:ab:7c:6a:5b:
                    da:0d:8d:53:b4:91:00:20:e9:8f:61:5f:91:15:e2:
                    65:4b:71:5f:09:9a:c9:83:db:33:22:2d:ae:5c:a1:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:81:6F:60:D0:A7:33:A9:70:77:6E:DD:2E:6E:A0:FB:0D:7D:EB
            X509v3 Authority Key Identifier:
                keyid:21:E2:18:AD:0B:56:30:60:C5:E7:A0:FB:F4:0D:09:5A:50:D0:27:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/21E218AD0B563060C5E7A0FBF40D095A50D02786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed02e3a5effa65197fb3ae014da9ead7e118bcdea20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/21E218AD0B563060C5E7A0FBF40D095A50D02786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:d7:c9:38:f5:e9:c7:87:7e:86:06:18:d5:c8:86:f2:02:
         b8:b5:e2:6a:6c:34:f3:3f:b7:25:d1:68:e8:d3:94:9a:c9:14:
         5e:88:60:ed:30:df:0f:8a:5a:1a:e0:b3:f1:6b:23:ad:39:57:
         0a:d2:5d:e4:0f:9b:c4:9d:f6:77:13:ea:28:55:fb:48:c7:3a:
         e1:9b:ac:ad:de:21:d3:58:f0:71:69:06:57:ae:91:18:f9:fb:
         14:3c:5b:48:f6:30:06:3d:d8:95:87:a8:0e:d5:5e:8d:e9:5f:
         1c:42:90:6c:86:1c:57:a3:01:a1:5e:18:e0:3d:f8:9f:73:b7:
         25:b8:fd:07:5d:87:00:99:c2:dc:0c:7e:18:38:bf:90:47:05:
         b8:3c:5f:c0:a5:fa:d3:a9:6f:c0:4f:cb:97:97:2c:52:56:74:
         dd:1c:60:58:27:ff:15:86:ed:82:f1:f0:4e:b0:d8:f1:d8:69:
         5b:38:dc:14:13:d8:f6:96:eb:08:a1:fd:75:5b:07:65:5d:09:
         df:bf:4f:cc:1e:e6:8a:61:33:5e:4e:43:48:7c:57:f3:5a:46:
         57:29:45:a3:8e:20:0c:c4:8c:71:43:d1:38:dd:91:62:ec:ab:
         ae:4c:46:a7:66:d6:ad:54:0c:ab:af:98:69:60:7b:86:f9:0b:
         89:6c:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----