Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.mft
File:                     DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.mft (raw, json)
Hash identifier:          vTmO7yLnbhEgh6+moYX2yagbelyEr+dUzAMTZEzvOu4=
Subject key identifier:   77:6B:86:6A:57:23:A3:5C:13:E4:75:35:86:73:0D:AD:CF:77:DE:BE
Authority key identifier: DA:65:5D:57:55:EF:1D:FC:F5:D9:F7:D9:CD:55:77:F6:19:9A:0E:99
Certificate issuer:       /CN=DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99
Certificate serial:       1892739AEED02F877BB03E62D6A3AAEC14BC1C42
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.mft
Manifest number:          10
Signing time:             Sun 09 Apr 2023 17:51:18 +0000
Manifest this update:     Sun 09 Apr 2023 17:46:18 +0000
Manifest next update:     Mon 10 Apr 2023 21:29:18 +0000
Files and hashes:         1: DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.crl (hash: nNv3OlMHzl22VxdaGuKG6NtcmXShXJeTORBdxLyQr/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:92:73:9a:ee:d0:2f:87:7b:b0:3e:62:d6:a3:aa:ec:14:bc:1c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99
        Validity
            Not Before: Apr  9 17:46:18 2023 GMT
            Not After : Apr 10 21:29:18 2023 GMT
        Subject: CN=776B866A5723A35C13E4753586730DADCF77DEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:13:c0:1a:b0:30:66:23:6a:fe:b4:ee:af:76:
                    dc:01:52:cc:03:1c:82:00:ee:f3:c6:44:c6:49:e2:
                    19:3b:10:2a:a7:a0:36:41:cf:7f:e6:d9:85:56:13:
                    99:cb:6b:fe:d4:fb:94:81:c9:90:3a:83:61:64:91:
                    d1:3a:20:c4:14:19:77:f5:c3:03:75:14:8a:77:38:
                    bb:71:df:6d:47:b9:c9:57:0b:e2:73:fd:56:a4:ea:
                    55:7e:c9:0a:9f:2d:81:bf:2c:61:e5:f5:97:91:4b:
                    cf:e1:57:30:59:8a:86:70:c2:80:99:e2:6d:2c:9c:
                    42:69:a9:d1:88:92:74:d0:30:f9:07:da:0f:e6:40:
                    7f:04:52:22:81:91:21:72:95:dc:03:e1:63:50:bc:
                    4d:44:01:45:0f:e1:6a:dc:cd:dd:ce:6d:ca:1b:72:
                    3a:4e:02:eb:53:b2:1f:0a:68:2a:87:9a:1e:c9:7d:
                    c5:3f:77:7e:73:9b:dd:af:62:e1:a0:bf:d2:14:fd:
                    40:54:2b:a0:04:62:a0:cd:ff:b6:46:8c:25:1f:d4:
                    38:b3:3c:43:41:fb:9e:52:c4:ca:88:12:91:91:2f:
                    72:98:17:7c:e6:e0:5d:f1:c0:52:e4:1a:d6:b5:7b:
                    a2:8d:51:e7:60:54:bd:46:ff:d0:95:7e:2a:dc:a2:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:86:6A:57:23:A3:5C:13:E4:75:35:86:73:0D:AD:CF:77:DE:BE
            X509v3 Authority Key Identifier:
                keyid:DA:65:5D:57:55:EF:1D:FC:F5:D9:F7:D9:CD:55:77:F6:19:9A:0E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:3b:80:ab:55:e0:df:b3:3c:d4:df:74:e3:b7:f3:09:98:
         2d:1f:78:45:4a:d1:ee:84:25:20:d9:31:a3:3e:bf:43:21:9b:
         92:b9:db:cc:1d:73:27:5a:d9:e6:dd:ef:7b:c0:a3:2a:10:17:
         3a:f1:4b:40:dd:9a:fc:59:b8:10:f4:29:d2:08:06:f2:5c:b3:
         99:43:b3:4f:ae:be:a0:60:3e:d4:f1:44:70:f5:b1:59:ad:7a:
         15:fa:d1:68:42:15:24:97:1d:c0:5f:89:3e:ee:5c:e1:8f:02:
         72:1d:81:66:f6:af:40:22:89:fe:ec:ff:e6:80:e5:e2:72:9c:
         8c:d0:10:57:cc:b2:21:31:d3:4c:3d:bd:01:15:78:a7:e3:21:
         18:bc:19:c9:ad:aa:f0:a4:ed:88:5b:f1:2a:68:eb:8e:10:aa:
         d8:1a:a0:21:88:ec:7b:78:27:fa:81:3f:85:32:d0:31:11:73:
         c1:68:a7:17:18:fd:8d:9a:ed:c5:d1:76:59:23:c8:e2:00:35:
         bc:ef:0f:f6:ad:4d:ff:1f:77:7b:7f:ae:57:79:47:c9:b8:16:
         63:93:da:e7:23:8d:74:d1:29:a7:1b:a6:45:90:ad:f2:45:1d:
         dd:d8:9b:19:0d:75:11:9c:12:1d:04:2c:80:be:a2:4f:a0:21:
         09:28:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----