Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/0/A42B07311D8182274F770BF8E3E680B982A57359.mft
File:                     A42B07311D8182274F770BF8E3E680B982A57359.mft (raw, json)
Hash identifier:          6OIF6yVT3zWYvhdBGckSwRL8+WY8vRWnuU4F3XX2ghw=
Subject key identifier:   20:7E:C6:4C:D2:12:6E:6A:0B:E6:96:A6:18:53:8A:DC:B4:8E:26:66
Authority key identifier: A4:2B:07:31:1D:81:82:27:4F:77:0B:F8:E3:E6:80:B9:82:A5:73:59
Certificate issuer:       /CN=6506a66ed0ec02e534e80cfc11bffd45e9f6184708f18f65e0
Certificate serial:       39424403AF4B29352D17ADBBE3E74A8753830845
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ec02e534e80cfc11bffd45e9f6184708f18f65e0.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/A42B07311D8182274F770BF8E3E680B982A57359.mft
Manifest number:          12
Signing time:             Sat 08 Apr 2023 11:00:09 +0000
Manifest this update:     Sat 08 Apr 2023 10:55:09 +0000
Manifest next update:     Sun 09 Apr 2023 12:32:09 +0000
Files and hashes:         1: EDC1C680F0FB113CFC3BD4824DD65CF36F55F1DE.cer (hash: OmTnhvHfX8lJ61Jm88bKQd6HwBc2aQO2oj2+6BVqoI4=)
                          2: BC69AB64D4D3EF18BDE6926C0E50605F91877A2F.cer (hash: btHfc77VEUOSLdQoaKPiIvVorUif4GPt17tyXp0v5So=)
                          3: 96D0EC0D9F1A81636AABCEEFA2CE1521EFD2D2CD.cer (hash: oPA3t09R/NA9kF1q2Mp8ggotuJwFpN/lAtRWyvE4+v4=)
                          4: A42B07311D8182274F770BF8E3E680B982A57359.crl (hash: xxXafrn5uOxfqjAXUfxtIkTEY3MHJe9th7paOzRq95g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:42:44:03:af:4b:29:35:2d:17:ad:bb:e3:e7:4a:87:53:83:08:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ec02e534e80cfc11bffd45e9f6184708f18f65e0
        Validity
            Not Before: Apr  8 10:55:09 2023 GMT
            Not After : Apr  9 12:32:09 2023 GMT
        Subject: CN=207EC64CD2126E6A0BE696A618538ADCB48E2666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:f2:5e:38:95:5e:5e:65:42:19:2f:f9:88:
                    17:e4:c7:77:c6:3a:77:be:44:7e:45:72:d6:dc:ce:
                    a7:52:a4:b7:93:13:0a:c0:46:5f:f1:16:c6:0a:94:
                    fb:fd:7f:9c:a9:3b:95:74:26:54:97:f5:58:62:bd:
                    1f:17:2c:02:d2:c8:54:cd:a1:6e:1e:f4:6f:f5:c3:
                    41:d8:d8:42:df:1d:ea:87:13:2a:f0:6a:7e:96:87:
                    dc:18:fe:84:49:68:93:52:7b:91:92:00:0c:3e:5f:
                    6d:da:6d:41:fd:e9:d2:7d:b9:4b:03:d2:fe:be:7f:
                    af:46:a3:3c:ae:7e:b0:66:1d:78:10:db:1c:25:e2:
                    d7:4f:2e:1a:86:47:39:81:37:87:76:2c:28:bf:6a:
                    98:bc:3f:b7:27:c6:6d:c3:9e:25:fe:7d:88:d6:4d:
                    11:e6:75:24:31:43:8e:c4:43:fe:63:f6:3a:04:07:
                    78:8a:8d:fc:19:a0:01:82:97:de:c7:10:14:77:7e:
                    cd:94:f4:c5:63:0a:f2:b3:c2:98:4b:66:ab:f6:b9:
                    9a:f4:3d:cf:88:68:e9:84:13:be:37:da:24:dc:90:
                    79:42:71:9d:6e:6a:4b:21:b2:db:bc:21:7e:37:97:
                    b1:6a:f2:ff:e5:8c:8e:2b:8c:e8:9a:49:77:ba:e5:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7E:C6:4C:D2:12:6E:6A:0B:E6:96:A6:18:53:8A:DC:B4:8E:26:66
            X509v3 Authority Key Identifier:
                keyid:A4:2B:07:31:1D:81:82:27:4F:77:0B:F8:E3:E6:80:B9:82:A5:73:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/A42B07311D8182274F770BF8E3E680B982A57359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ec02e534e80cfc11bffd45e9f6184708f18f65e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/A42B07311D8182274F770BF8E3E680B982A57359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e3:b1:83:a8:4e:d4:38:6e:aa:3c:8c:5e:b1:72:a7:47:ee:
         1a:4d:4a:82:d2:ea:c2:44:c5:9c:1a:a4:d3:5c:5e:88:8a:69:
         83:b9:fc:1e:71:36:bb:00:58:37:bf:2a:43:ee:cf:67:9e:07:
         e8:a7:f8:62:b5:4c:68:f6:af:38:3d:d9:f3:2a:cc:80:20:6a:
         90:f9:60:31:3a:61:6a:df:03:9d:84:95:85:d4:78:d1:27:4a:
         60:bd:19:9f:d3:8c:b5:c2:35:6d:ae:e4:31:d0:22:c3:cd:35:
         6f:1d:5a:60:86:1b:fe:4d:aa:7a:49:88:44:e5:b8:41:60:f4:
         a8:31:73:14:8a:6a:91:63:0f:77:b8:47:fd:64:ff:dd:01:6c:
         70:bd:9c:6c:80:82:5d:2b:4f:df:92:33:8b:32:c7:52:70:05:
         9b:80:9b:e4:6f:d0:c2:cf:84:39:81:4a:bd:39:ac:9a:55:a1:
         ab:41:46:02:0c:6c:a1:0a:5b:b5:ca:0b:f5:9d:b6:d0:27:c9:
         f3:9f:39:f0:e8:1b:28:7f:e7:78:35:61:61:c9:f6:80:c8:00:
         3b:75:40:37:71:d0:50:7b:2d:cf:32:52:a6:40:fa:10:fd:0f:
         85:94:58:49:be:a3:6e:6d:b4:2f:18:97:a2:31:0a:61:80:c8:
         18:19:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----