Manifest

$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.mft
File:                     73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.mft (raw, json)
Hash identifier:          g7e1S4OR/m2+sxhiFwIOci0vSQa/pD/UzSAmx+bWygk=
Subject key identifier:   47:4D:E3:18:91:CB:98:EC:66:CA:0C:71:F3:E8:D1:E5:EB:7A:7B:B6
Authority key identifier: 73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC
Certificate issuer:       /CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
Certificate serial:       DAAE1B29C56B2103B873F25D0622914CB4BA5A
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer
Subject info access:      rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.mft
Manifest number:          0328
Signing time:             Sun 11 Sep 2022 17:42:00 +0000
Manifest this update:     Sun 11 Sep 2022 17:37:00 +0000
Manifest next update:     Mon 12 Sep 2022 17:42:00 +0000
Files and hashes:         1: 323630323a666564613a6435313a3a2f34382d3438203d3e20313431373132.roa (hash: LE7jXoEp9cnB63Rc6jDG5z7RQUH2idIr0vGzhr6t60k=)
                          2: 73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.crl (hash: YvYRShdgYz0NFYIOrViCf6kZpKvNFKZMlS9/8sksSYw=)
                          3: 323630323a666564613a6435363a3a2f34382d3438203d3e20313431373132.roa (hash: VQiE1w1bqfLpjT6Y6tC4IGKHElf07f4i8zSCWYVZcxk=)
                          4: 323630323a666564613a6435373a3a2f34382d3438203d3e20313431373132.roa (hash: ILDo+GVDczK9AsngcAzD5qmkroi+JvEzOoEHevtfU1o=)
                          5: 323630323a666564613a6435353a3a2f34382d3438203d3e20313431373132.roa (hash: iOHpda39D9zHCXqO8mxNpC43z51QD0KV/gCNku4gT3Q=)
                          6: 323630323a666564613a6435383a3a2f34382d3438203d3e20313431373132.roa (hash: i65l04nEau3mpNKaD3HLU3R9nUpQmJzVDvRNQSNu1pE=)
                          7: 323630323a666564613a6435393a3a2f34382d3438203d3e20313431373132.roa (hash: tdkr7cK6bBcTI3GmYTeGESInNCtViN9r8SXodFOP3qM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            da:ae:1b:29:c5:6b:21:03:b8:73:f2:5d:06:22:91:4c:b4:ba:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
        Validity
            Not Before: Sep 11 17:37:00 2022 GMT
            Not After : Sep 18 17:42:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:92:f6:5d:5a:28:dc:93:9e:b4:50:8f:02:
                    4b:71:14:8d:92:c5:f9:5d:21:74:19:36:a4:cb:16:
                    77:c9:34:21:bf:b5:2d:41:65:50:e7:75:c1:0e:a0:
                    b8:34:ee:62:b2:3a:db:db:6d:1d:f8:ee:0c:1f:5d:
                    9d:44:80:dc:46:e8:01:9f:82:28:75:8c:7d:4d:6f:
                    e9:f1:c0:db:fe:03:f8:86:40:b5:e8:11:35:e5:05:
                    e2:19:ed:c1:f2:91:0e:7f:ea:b2:c1:20:7d:c1:cd:
                    f8:f9:52:e7:7e:a0:df:4a:81:af:8d:5b:ad:a5:6c:
                    06:6b:e5:9c:95:d9:0a:97:7d:50:77:86:f9:21:1e:
                    22:7b:2d:8f:b8:d7:eb:7b:5d:b6:e4:0b:86:7b:d9:
                    8c:ca:a2:c3:b1:be:f2:e2:eb:f7:26:f2:31:49:20:
                    73:7d:c0:da:98:fe:ed:8a:e2:8e:70:25:20:ba:4c:
                    5d:d4:e7:f6:51:c7:e1:df:b9:ed:03:e5:48:56:fa:
                    81:25:99:3d:18:8b:a0:50:e2:12:0e:7e:77:1a:bb:
                    72:ff:f3:eb:af:72:01:59:0a:23:42:5c:8e:69:86:
                    de:a4:de:1e:e2:ac:5a:c5:87:8a:a3:03:74:4c:b1:
                    f6:6e:20:80:32:ac:5b:93:7e:6f:71:99:89:8a:43:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4D:E3:18:91:CB:98:EC:66:CA:0C:71:F3:E8:D1:E5:EB:7A:7B:B6
            X509v3 Authority Key Identifier:
                keyid:73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:08:5b:d2:66:2e:a4:ea:62:8a:91:45:70:18:d3:49:a2:
         53:d0:46:82:d5:00:30:03:97:43:fe:e3:e9:d7:9d:6a:80:42:
         18:4b:b7:63:ba:1f:23:c6:52:7e:2b:01:71:23:d4:a5:1a:50:
         0b:ce:d7:97:46:60:3c:17:a0:68:6c:01:52:16:ff:3e:a1:54:
         31:19:fe:4f:cf:99:54:df:e9:1b:4d:da:9f:7c:17:d2:61:2e:
         a4:03:28:61:03:fc:b7:47:ff:46:88:ea:c3:23:3d:4f:68:66:
         17:e5:97:f1:bd:0a:16:78:15:c4:70:30:f4:64:34:d5:b2:4e:
         a3:18:ae:a6:83:d0:68:b9:02:a1:70:9a:a9:b8:4f:85:bc:99:
         9a:06:b8:18:5e:41:35:2a:c9:80:7f:6f:42:51:79:fd:a8:25:
         43:b2:91:ac:8d:e2:b8:d8:12:20:4e:d1:43:6d:8a:ac:d2:9f:
         04:b6:2d:f6:9a:2f:45:64:bb:f8:85:14:7e:f4:db:a8:be:47:
         ac:df:ad:84:18:7f:99:0c:e2:33:a3:c3:9f:2e:69:66:09:6f:
         fc:7d:d0:cd:de:19:50:a0:15:df:24:20:c5:5f:96:e2:fa:db:
         00:93:b5:c5:9a:87:f4:66:ab:04:3b:dd:34:36:60:13:a1:95:
         93:91:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----