Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/18/224565A2B5EA44A464B0F32EE0F91574A2606CED.mft
File:                     224565A2B5EA44A464B0F32EE0F91574A2606CED.mft (raw, json)
Hash identifier:          zJ/280/6ngxm/LLaJM4h4dKUeqGvo6wYuZ+uBy2IrMQ=
Subject key identifier:   C8:E6:BE:B6:05:A8:56:C1:2C:AB:5D:BA:88:4F:42:54:43:DD:55:1F
Authority key identifier: 22:45:65:A2:B5:EA:44:A4:64:B0:F3:2E:E0:F9:15:74:A2:60:6C:ED
Certificate issuer:       /CN=224565A2B5EA44A464B0F32EE0F91574A2606CED
Certificate serial:       2B08A836239D18B268099306ABB24A35F0F15D57
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/224565A2B5EA44A464B0F32EE0F91574A2606CED.cer
Subject info access:      rsync://rpki.co/repo/HYSP/18/224565A2B5EA44A464B0F32EE0F91574A2606CED.mft
Manifest number:          0131
Signing time:             Sat 08 Apr 2023 07:20:11 +0000
Manifest this update:     Sat 08 Apr 2023 07:15:11 +0000
Manifest next update:     Sun 09 Apr 2023 09:41:11 +0000
Files and hashes:         1: D7C870EC9467CAADC4C3A6804075EF348D6FF120.cer (hash: GwWmzd0wz8o6PZfBqQHvGBKS3/07aRtBy/LoedHeB48=)
                          2: 224565A2B5EA44A464B0F32EE0F91574A2606CED.crl (hash: tYNFJEZhA9lSVda1xYyYmmp2z5yN/I7D9Mfclmr3mBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:08:a8:36:23:9d:18:b2:68:09:93:06:ab:b2:4a:35:f0:f1:5d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=224565A2B5EA44A464B0F32EE0F91574A2606CED
        Validity
            Not Before: Apr  8 07:15:11 2023 GMT
            Not After : Apr  9 09:41:11 2023 GMT
        Subject: CN=C8E6BEB605A856C12CAB5DBA884F425443DD551F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:46:11:59:76:18:a7:66:63:a9:15:b3:84:
                    10:cb:b4:51:68:2b:61:38:8f:82:00:a5:15:83:47:
                    62:14:b0:55:7a:9f:1e:61:04:c8:8a:85:3c:a9:49:
                    96:1a:d2:b3:f0:8c:65:32:01:3d:1f:71:5d:b2:18:
                    51:37:90:7f:dd:90:77:f0:36:13:c6:c6:96:b1:6a:
                    92:7d:c4:13:66:e9:ee:14:6c:fa:37:2a:8c:32:f8:
                    b1:17:a7:e9:82:cb:f8:ef:08:9c:83:0f:03:80:62:
                    ff:70:6b:bb:93:34:49:c8:b6:eb:13:77:4e:c2:4c:
                    2f:36:c8:ea:d3:a0:86:7f:f4:c5:92:8d:e2:91:b3:
                    b9:5a:31:1e:b4:0a:fd:f6:9a:48:f5:05:48:6a:49:
                    bd:c2:08:00:80:95:c4:12:f9:7b:10:4f:c6:98:3a:
                    28:0f:c4:0f:50:90:46:65:8d:5c:46:4f:c2:c0:d4:
                    f1:3e:d8:44:44:07:44:a1:81:9c:65:7c:f9:0b:98:
                    51:8c:1e:92:07:93:3a:5a:59:d8:0d:6a:6c:29:cb:
                    44:fa:14:e2:e7:60:62:0b:83:de:e5:d4:f2:32:b2:
                    45:d0:42:9f:2c:fc:28:7d:3d:1f:83:1a:ef:71:7e:
                    c2:3b:0c:f5:64:7c:77:36:78:41:f4:69:a9:99:c9:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E6:BE:B6:05:A8:56:C1:2C:AB:5D:BA:88:4F:42:54:43:DD:55:1F
            X509v3 Authority Key Identifier:
                keyid:22:45:65:A2:B5:EA:44:A4:64:B0:F3:2E:E0:F9:15:74:A2:60:6C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/18/224565A2B5EA44A464B0F32EE0F91574A2606CED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/224565A2B5EA44A464B0F32EE0F91574A2606CED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/18/224565A2B5EA44A464B0F32EE0F91574A2606CED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:91:c3:f1:78:25:91:2e:ce:5a:a0:94:00:9e:e8:b5:4f:a0:
         56:1e:6f:15:94:a5:5f:12:fd:84:74:16:d2:3a:9e:89:05:c8:
         21:63:1a:01:03:c2:31:55:bf:84:73:8b:e7:e8:0f:c3:17:45:
         19:74:91:bd:f6:b7:33:b0:a8:bf:d3:68:43:42:ec:db:9e:91:
         4d:32:60:df:8a:3f:bf:6b:e2:27:37:1a:6e:78:2c:15:21:e0:
         5a:d7:0f:fe:88:cc:84:b6:b8:12:72:61:82:53:99:96:6a:a9:
         1b:ac:45:a2:bf:82:65:8d:8a:ad:3e:f3:28:09:88:6a:22:b0:
         80:cf:72:e1:93:88:99:1c:5c:7a:14:06:63:72:df:95:62:ea:
         80:98:63:fe:32:56:1b:69:6a:b3:b1:ac:c4:b8:ab:f6:88:5d:
         d0:47:fc:00:ee:bb:91:f5:10:05:91:bf:fc:b8:58:7c:5e:99:
         95:15:d5:ee:4b:b9:37:5e:98:0f:4f:95:40:a6:7b:a3:fa:8c:
         34:96:37:3f:b4:22:2f:1a:af:e6:20:15:38:2c:f3:4a:62:a6:
         42:74:ee:a0:86:54:ae:75:5d:f9:1c:4d:38:27:e7:30:c7:eb:
         58:9c:b8:1b:4c:c9:c4:7d:37:ec:d8:a8:54:08:e3:07:e6:1e:
         c1:a4:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----