Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/17/0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.mft
File:                     0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.mft (raw, json)
Hash identifier:          c789Vb3cOUDM2USw/pZoTGcmHrKzV5+iSJjUmTZCzrY=
Subject key identifier:   D3:C8:BF:02:02:4A:4D:FC:79:7F:3C:8A:D0:4F:41:56:CF:7D:C5:E1
Authority key identifier: 0C:C0:2D:0A:35:A6:DE:0D:22:89:8D:98:68:D6:A5:B3:E9:3A:39:FE
Certificate issuer:       /CN=a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57
Certificate serial:       3825DE53E09EAB816C668735D3ED5CAA78FC02A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57.cer
Subject info access:      rsync://rpki.co/repo/HYSP/17/0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.mft
Manifest number:          12
Signing time:             Sat 08 Apr 2023 11:00:07 +0000
Manifest this update:     Sat 08 Apr 2023 10:55:07 +0000
Manifest next update:     Sun 09 Apr 2023 12:36:07 +0000
Files and hashes:         1: 0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.crl (hash: n73ojVVu7KKBGQ0iAh92Uc0jbtaQ0vd7m3J09Ck5lxQ=)
                          2: F4DF07ED834F20CF7568CB795C226443F7EE040F.cer (hash: TTZL1zDN1pWXBWxgBT8ScaqCSwYS+hkISolTzNvt+H4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:de:53:e0:9e:ab:81:6c:66:87:35:d3:ed:5c:aa:78:fc:02:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57
        Validity
            Not Before: Apr  8 10:55:07 2023 GMT
            Not After : Apr  9 12:36:07 2023 GMT
        Subject: CN=D3C8BF02024A4DFC797F3C8AD04F4156CF7DC5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:25:10:ae:db:71:c0:d2:7f:95:19:09:56:
                    99:b4:d9:2b:0a:2e:b6:d6:79:78:74:7f:48:1a:10:
                    8f:fe:04:83:d0:93:8a:6f:c8:82:4c:b6:84:48:15:
                    f7:84:00:aa:41:16:7c:03:6d:84:29:ba:ad:24:1b:
                    d9:3c:77:ae:71:77:9e:59:71:28:a7:ab:d1:a4:0b:
                    50:26:a8:01:b0:df:b4:36:b5:8a:f5:dd:67:de:18:
                    1b:6f:45:e9:4c:a3:ee:8b:0c:7c:17:7f:7f:7b:55:
                    b9:cc:fd:68:07:8c:90:ba:03:aa:c4:d8:55:16:5f:
                    78:b6:15:bc:95:c4:80:e9:23:a9:96:ae:58:28:8d:
                    3f:ce:05:d8:37:c8:a6:3d:24:aa:ad:91:fb:69:01:
                    7d:50:38:c9:12:d8:7b:06:13:a3:dc:79:7f:ec:8f:
                    45:ab:7e:fc:21:04:f6:36:f2:1e:fe:e6:6e:3b:85:
                    c9:1b:f8:be:0d:13:15:07:d0:8c:79:ee:e5:3c:85:
                    da:1e:53:f0:87:b3:e9:43:2b:82:18:2b:b7:2b:e7:
                    dc:61:88:5b:01:33:09:4b:95:79:75:23:af:b0:61:
                    ad:d7:e7:f0:3a:a1:27:35:42:fa:55:1c:68:04:9a:
                    5b:60:b1:58:e2:e9:df:e7:5c:ef:68:f1:b4:84:17:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C8:BF:02:02:4A:4D:FC:79:7F:3C:8A:D0:4F:41:56:CF:7D:C5:E1
            X509v3 Authority Key Identifier:
                keyid:0C:C0:2D:0A:35:A6:DE:0D:22:89:8D:98:68:D6:A5:B3:E9:3A:39:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/17/0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566a5b282cb20fe3cfb47305689ee449ce63ca183f57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/17/0CC02D0A35A6DE0D22898D9868D6A5B3E93A39FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:46:dc:38:c2:fc:25:73:e6:55:f3:d4:36:f3:22:e0:27:07:
         ae:43:56:78:54:b6:ec:bc:d7:3f:40:89:2c:1e:b0:93:30:64:
         23:4e:31:2f:6f:0a:bc:a5:36:ed:d4:ad:6a:73:ac:55:29:4f:
         58:6f:7a:6a:82:90:85:db:d8:8c:7f:b5:43:22:1a:f8:0b:8a:
         7d:5c:2c:df:df:e5:88:ef:51:84:5c:73:2c:ca:ee:19:b5:c6:
         a0:e3:a4:73:10:e6:e6:d7:a0:1b:36:86:79:7a:b4:69:6a:8b:
         2f:fe:c7:2b:50:be:85:56:4a:d4:99:b0:bc:d4:40:30:4b:8a:
         f0:a1:12:59:06:e4:d3:41:68:f6:9b:3b:39:e8:77:fa:01:a3:
         9b:45:44:15:7f:2d:21:8f:da:29:1a:e4:90:cb:4b:b3:1d:90:
         ba:68:e4:46:7c:8c:a1:12:d7:49:34:3e:9d:8f:42:63:58:a6:
         5b:19:7c:bb:f9:17:c0:2f:46:42:49:a3:be:45:22:8c:e2:7a:
         3f:f7:c4:c7:ed:a2:78:63:0e:86:3e:cf:b0:5c:c5:86:6d:62:
         0c:4c:f3:bc:f2:61:d2:db:01:d1:ae:c5:20:ce:6f:03:be:28:
         69:f9:58:09:4e:8d:23:68:d2:80:56:14:96:af:ea:77:88:03:
         04:6f:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----