Manifest

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.mft
File:                     5D2FD99DBAB0943F2C82D10B21D994E87090AF12.mft (raw, json)
Hash identifier:          Gt/wQ0Vgjbot7GRoTK2e0axY9fVpks0cKfYCOS8+l5Q=
Subject key identifier:   98:34:31:37:F2:01:8C:B4:C0:92:98:28:9C:55:04:41:00:59:90:9F
Authority key identifier: 5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12
Certificate issuer:       /CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
Certificate serial:       214429DE7720D1C16298A1D2B8E4A467AC58E272
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.mft
Manifest number:          1A
Signing time:             Thu 22 Dec 2022 20:24:25 +0000
Manifest this update:     Thu 22 Dec 2022 20:19:25 +0000
Manifest next update:     Fri 23 Dec 2022 21:40:25 +0000
Files and hashes:         1: 5D2FD99DBAB0943F2C82D10B21D994E87090AF12.crl (hash: WPbjqkQHwopTIeGJSKUD37OcRKsCrGvzNygx9ilhm3s=)
                          2: 32332e3134322e32342e302f32322d3234203d3e203631313338.roa (hash: fWdZC3Yinh/n9f5N1O0XURIVKdYK8TklEyD6d/5OalE=)
                          3: 32332e3134322e32352e302f32342d3234203d3e2037303138.roa (hash: CJf4W+7CUh2Y6RLjGuX1jIHeSFCQQ2Odhsev3rbIQII=)
                          4: 32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (hash: TYx+v67guHPQ4vGxt6AeQOZa1rah/xeKiKEdjzSEFEo=)
                          5: 32332e3134322e32342e302f32342d3234203d3e203632313634.roa (hash: HToX7DimwCvN+eq/tFCDlRikNxpWZV89l4+bn8Br4YY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:44:29:de:77:20:d1:c1:62:98:a1:d2:b8:e4:a4:67:ac:58:e2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
        Validity
            Not Before: Dec 22 20:19:25 2022 GMT
            Not After : Dec 23 21:40:25 2022 GMT
        Subject: CN=98343137F2018CB4C09298289C5504410059909F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:9b:ee:97:a3:76:79:57:6a:e7:ff:25:09:
                    03:f2:22:54:fc:4e:cf:07:8b:8f:29:46:cf:bf:a3:
                    27:8b:8f:bb:9f:d7:97:1a:a2:3d:49:13:e8:30:0d:
                    2f:a7:80:49:30:31:ff:bb:2c:67:e3:df:06:c6:57:
                    47:54:fc:2b:1a:34:d6:1d:ab:b0:e6:4e:66:fe:62:
                    89:bd:c5:25:76:be:ba:84:44:23:c0:ea:c9:21:03:
                    3a:fe:96:6e:ab:c8:55:3c:88:f4:50:a4:01:c0:3b:
                    4e:7e:6d:24:05:0d:62:78:9a:02:e4:05:63:cf:78:
                    ea:f8:77:d9:9e:e3:50:8b:f0:65:54:ef:ef:bf:26:
                    a8:86:5f:cd:b3:04:d6:d7:e7:61:83:c7:84:29:86:
                    e2:59:be:b7:c9:e2:c5:b0:5d:ce:24:b1:5e:ad:9f:
                    6e:93:cf:c4:9d:71:82:47:49:e9:2e:0a:45:f7:f4:
                    b0:d9:8c:62:de:16:36:30:86:8d:93:09:af:d4:08:
                    eb:99:f9:61:ee:dd:98:95:e6:61:c3:fb:56:c7:25:
                    1e:e4:d8:d0:b6:cd:73:e3:a3:37:09:fc:91:c1:12:
                    35:c1:4c:7a:3d:69:fc:b2:56:30:d8:a3:7c:31:54:
                    4e:fa:6a:9e:07:fc:66:49:51:4b:d3:d5:c0:26:f7:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:34:31:37:F2:01:8C:B4:C0:92:98:28:9C:55:04:41:00:59:90:9F
            X509v3 Authority Key Identifier:
                keyid:5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:64:fe:b1:86:bc:e5:e5:ac:f3:0f:6a:f0:da:8d:e1:95:e3:
         1b:9d:f4:68:9d:6a:8e:e3:c4:58:2b:7d:fe:10:9d:7f:65:d1:
         59:6b:8d:de:e0:ff:fb:8a:38:78:1a:ef:00:f8:5b:2b:7e:27:
         82:b2:4c:26:5e:11:59:3e:31:23:20:6c:f5:ca:20:f6:28:13:
         3b:8d:23:89:3e:42:1e:0b:04:23:5f:f6:41:59:65:b3:1e:73:
         1e:c2:b9:38:62:da:36:72:62:a7:bb:a2:11:a3:26:82:07:71:
         9b:db:24:f8:e9:91:b3:94:85:5e:d9:58:c7:04:11:00:f0:31:
         e0:58:7f:1f:4e:b4:62:d8:9e:d3:6f:7c:77:ac:95:58:47:ee:
         dd:6b:dd:b2:82:a9:4f:46:7a:ed:fe:7b:ae:28:28:5f:36:1e:
         55:19:58:4c:d7:54:4d:19:ea:56:6f:d4:c4:99:1c:f1:5d:4f:
         64:cf:c0:08:ea:55:59:47:e4:b9:98:a1:f1:33:da:96:a4:02:
         c7:c8:50:5a:ef:8b:4e:f6:0c:a8:90:6d:8c:3c:a8:cd:07:dc:
         a4:60:e5:b5:d4:5a:10:35:22:0f:04:7a:b0:65:94:c5:1d:36:
         eb:d4:ad:f9:b2:bd:41:71:04:90:be:45:3e:be:4f:c5:55:90:
         16:5e:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----