Manifest

$ rpki-client -vvf rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.mft
File:                     D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.mft (raw, json)
Hash identifier:          a5hYpns6t8oUWdhxHXcxLR0vxFPmCMaNqGxoWsYzyQs=
Subject key identifier:   E1:3C:0E:3B:20:E7:89:D3:3F:17:FE:2D:14:B1:FC:E6:71:3E:C5:65
Authority key identifier: D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E
Certificate issuer:       /CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
Certificate serial:       056CEBB97F65344E01AF298BB7519EB6BDE4867B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer
Subject info access:      rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.mft
Manifest number:          01E9
Signing time:             Tue 02 Mar 2021 12:12:00 +0000
Manifest this update:     Tue 02 Mar 2021 12:07:00 +0000
Manifest next update:     Wed 03 Mar 2021 12:12:00 +0000
Files and hashes:         1: 3135312e3231362e302e302f32332d3233203d3e203136353039.roa (hash: 0spkYLI8SnxG5lS9TvvVHndTQzOWZnyfYzywtc1sGIk=)
                          2: 3138352e34392e3134332e302f32342d3234203d3e203134363138.roa (hash: +EmxBBhkx0PBkdzcnvgQLu/U4Q2Bh/RxvBr9ORaB5eY=)
                          3: 3135312e3231362e302e302f32332d3233203d3e203134363138.roa (hash: P96SpDYfECXhR4JkJDCru2E+DFUfNQ3lOGgxpUPXTeE=)
                          4: 3138352e34392e3134302e302f32322d3232203d3e2038353837.roa (hash: bcyJP1NwwBGfysQDp5Gh6SH4aO16gUvNgvzs6+7WKyw=)
                          5: 3138352e34392e3134332e302f32342d3234203d3e203136353039.roa (hash: FlyRZhdYChnFSs5qsTvcfisGQIWPzKO7+6anSHvRJ4c=)
                          6: 326130343a623930303a3a2f32392d3239203d3e2038353837.roa (hash: VCbpGS/8ANU2sX8jFkVfjtx1NAaB16wj5Oxe/kDtdW4=)
                          7: 323030313a3766633a3a2f34372d3437203d3e203136353039.roa (hash: GWV89B1K+Kijb4rGNqXeNuyXA561UCLk9DNU515j3Jg=)
                          8: 323030313a3766633a3a2f34372d3437203d3e2031313333.roa (hash: ejg+jEbuL2i1hDUn1R9MOwaxcWmnigjTZCECnuc2ogQ=)
                          9: 3135312e3231362e302e302f32332d3233203d3e2031313333.roa (hash: 3HaKksAJrEo75W2L9/T0ksHeJ1djusgD+scn5z6Icfg=)
                          10: 326130343a623930323a3a2f33322d3332203d3e203136353039.roa (hash: yTKSibefGxIKPpor6geGOsI/TPDB7Ue93GqbGhSGIaI=)
                          11: 326130343a623930323a3a2f33322d3332203d3e203134363138.roa (hash: qXsTbtDR0wwOfmdVWz18qL6eQHG6xsr8VsytnWJ+W2I=)
                          12: D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.crl (hash: PRQAy0aosqUTnNzy6pzoFFn4NFF2PxN5/RloNRZdEwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6c:eb:b9:7f:65:34:4e:01:af:29:8b:b7:51:9e:b6:bd:e4:86:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d724c2d90d5bcc9fda54755efc8c903acb01d02e
        Validity
            Not Before: Mar  2 12:07:00 2021 GMT
            Not After : Mar  9 12:12:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:dc:ca:0f:42:96:e7:eb:cd:61:08:18:d7:
                    ef:d0:21:dc:d6:39:ef:32:76:65:2a:dc:8a:2e:47:
                    ab:1e:57:e9:26:33:0d:ce:78:d7:20:cf:6c:33:ac:
                    b6:13:cf:50:2d:76:6a:b0:18:73:38:03:86:08:44:
                    1f:76:15:72:c6:45:ae:cd:7f:41:52:cf:e5:c3:06:
                    cf:2f:d7:a6:d9:93:e3:47:c1:5e:33:52:54:2b:0a:
                    a4:83:28:09:a8:8e:b5:89:bf:24:94:de:47:26:d9:
                    8c:eb:c5:d2:98:a9:9c:e8:29:3c:56:c7:9f:8e:48:
                    cd:2e:44:d2:d2:cf:76:4e:a0:61:6d:0c:ca:76:3a:
                    55:d1:9c:9d:75:cd:03:f9:8f:01:eb:9b:c0:6b:31:
                    26:34:bf:f3:eb:5c:f6:f8:d7:e0:73:f4:dc:a0:e6:
                    23:a5:df:6e:4a:c6:d3:6f:56:9d:2a:db:38:6e:dd:
                    b8:37:a1:49:ad:7f:be:a8:cf:74:95:65:f5:ab:6a:
                    11:fe:43:bb:2c:f3:db:87:92:02:80:d4:b0:91:66:
                    2d:70:7a:09:df:ba:70:99:8d:04:71:6a:f5:d9:19:
                    e2:09:c2:72:bb:df:99:48:b0:14:25:e1:7f:63:0a:
                    2f:7a:4d:66:0e:d2:7f:1d:be:47:28:3e:cd:12:7b:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3C:0E:3B:20:E7:89:D3:3F:17:FE:2D:14:B1:FC:E6:71:3E:C5:65
            X509v3 Authority Key Identifier:
                keyid:D7:24:C2:D9:0D:5B:CC:9F:DA:54:75:5E:FC:8C:90:3A:CB:01:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yTC2Q1bzJ_aVHVe_IyQOssB0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.nlnetlabs.nl/repo/ca/0/D724C2D90D5BCC9FDA54755EFC8C903ACB01D02E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c3:ca:f4:6a:74:78:0a:87:76:0b:aa:d7:a2:11:6b:13:c4:
         9c:e6:4d:13:3a:55:e1:8d:ad:83:43:57:b3:41:6d:8f:0f:41:
         f7:97:b0:7a:d5:45:d1:5c:01:ee:40:49:cb:c9:d4:77:d1:83:
         f8:9c:42:b0:7b:ce:f9:00:25:f7:cf:ea:f8:b1:0b:f3:15:de:
         c7:49:d9:d1:32:65:b2:69:45:01:2a:c9:34:3b:c0:eb:47:12:
         d4:d7:74:fd:5f:3c:24:05:8a:57:b6:df:96:ef:2c:b0:97:48:
         f9:c6:ed:d9:2c:2e:fc:97:c2:25:b5:b9:4e:ab:e1:1a:c5:32:
         ec:62:6e:f4:a9:68:f6:a5:2e:34:0f:3a:88:99:ab:d8:b7:11:
         37:4f:02:a9:bd:16:0d:de:0d:10:b9:db:01:a5:d5:c2:8f:bc:
         f3:74:90:86:be:cf:8f:86:2e:e3:6d:31:ec:ff:14:d5:33:2c:
         d5:26:31:0c:9b:af:8a:d4:ed:03:40:b2:b1:99:fc:a1:6b:b3:
         44:95:82:09:a7:f3:d2:87:25:7c:70:7c:96:aa:be:24:b6:48:
         84:fb:f7:34:70:ef:a0:f2:1e:01:1d:42:ae:ad:86:66:33:d0:
         15:e9:3a:80:d4:9e:19:bf:e6:df:4a:19:72:94:bd:f3:cd:f2:
         89:f6:6c:d8
-----BEGIN CERTIFICATE-----
MIIG3TCCBcWgAwIBAgIUBWzruX9lNE4BrymLt1Getr3khnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDcyNGMyZDkwZDViY2M5ZmRhNTQ3NTVlZmM4YzkwM2Fj
YjAxZDAyZTAeFw0yMTAzMDIxMjA3MDBaFw0yMTAzMDkxMjEyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTM0NURDQ0EwRjQyOTZFN0VC
Q0Q2MTA4MThEN0VGRDAyMURDRDYzOUVGMzI3NjY1MkFEQzhBMkU0N0FCMUU1N0U5
MjYzMzBEQ0U3OEQ3MjBDRjZDMzNBQ0I2MTNDRjUwMkQ3NjZBQjAxODczMzgwMzg2
MDg0NDFGNzYxNTcyQzY0NUFFQ0Q3RjQxNTJDRkU1QzMwNkNGMkZEN0E2RDk5M0Uz
NDdDMTVFMzM1MjU0MkIwQUE0ODMyODA5QTg4RUI1ODlCRjI0OTRERTQ3MjZEOThD
RUJDNUQyOThBOTlDRTgyOTNDNTZDNzlGOEU0OENEMkU0NEQyRDJDRjc2NEVBMDYx
NkQwQ0NBNzYzQTU1RDE5QzlENzVDRDAzRjk4RjAxRUI5QkMwNkIzMTI2MzRCRkYz
RUI1Q0Y2RjhEN0UwNzNGNERDQTBFNjIzQTVERjZFNEFDNkQzNkY1NjlEMkFEQjM4
NkVEREI4MzdBMTQ5QUQ3RkJFQThDRjc0OTU2NUY1QUI2QTExRkU0M0JCMkNGM0RC
ODc5MjAyODBENEIwOTE2NjJENzA3QTA5REZCQTcwOTk4RDA0NzE2QUY1RDkxOUUy
MDlDMjcyQkJERjk5NDhCMDE0MjVFMTdGNjMwQTJGN0E0RDY2MEVEMjdGMURCRTQ3
MjgzRUNEMTI3QjczQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo0Xcyg9ClufrzWEIGNfv0CHc1jnvMnZlKtyKLkerHlfpJjMNznjX
IM9sM6y2E89QLXZqsBhzOAOGCEQfdhVyxkWuzX9BUs/lwwbPL9em2ZPjR8FeM1JU
KwqkgygJqI61ib8klN5HJtmM68XSmKmc6Ck8VsefjkjNLkTS0s92TqBhbQzKdjpV
0Zyddc0D+Y8B65vAazEmNL/z61z2+Nfgc/TcoOYjpd9uSsbTb1adKts4bt24N6FJ
rX++qM90lWX1q2oR/kO7LPPbh5ICgNSwkWYtcHoJ37pwmY0EcWr12RniCcJyu9+Z
SLAUJeF/Ywovek1mDtJ/Hb5HKD7NEntzyQIDAQABo4IB6zCCAecwHQYDVR0OBBYE
FOE8Djsg54nTPxf+LRSx/OZxPsVlMB8GA1UdIwQYMBaAFNckwtkNW8yf2lR1XvyM
kDrLAdAuMA4GA1UdDwEB/wQEAwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzov
L3JzeW5jLnJwa2kubmxuZXRsYWJzLm5sL3JlcG8vY2EvMC9ENzI0QzJEOTBENUJD
QzlGREE1NDc1NUVGQzhDOTAzQUNCMDFEMDJFLmNybDBkBggrBgEFBQcBAQRYMFYw
VAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RF
RkFVTFQvMXlUQzJRMWJ6Sl9hVkhWZV9JeVFPc3NCMEM0LmNlcjByBggrBgEFBQcB
CwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vcnN5bmMucnBraS5ubG5ldGxhYnMu
bmwvcmVwby9jYS8wL0Q3MjRDMkQ5MEQ1QkNDOUZEQTU0NzU1RUZDOEM5MDNBQ0Iw
MUQwMkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQAFw8r0anR4Cod2C6rXohFrE8Sc5k0TOlXhja2DQ1ez
QW2PD0H3l7B61UXRXAHuQEnLydR30YP4nEKwe875ACX3z+r4sQvzFd7HSdnRMmWy
aUUBKsk0O8DrRxLU13T9XzwkBYpXtt+W7yywl0j5xu3ZLC78l8IltblOq+EaxTLs
Ym70qWj2pS40DzqImavYtxE3TwKpvRYN3g0QudsBpdXCj7zzdJCGvs+Phi7jbTHs
/xTVMyzVJjEMm6+K1O0DQLKxmfyha7NElYIJp/PShyV8cHyWqr4ktkiE+/c0cO+g
8h4BHUKurYZmM9AV6TqA1J4Zv+bfShlylL3zzfKJ9mzY
-----END CERTIFICATE-----