Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/14/3E867D89D6C09D0841364853328DD8030DFBB0FD.mft
File:                     3E867D89D6C09D0841364853328DD8030DFBB0FD.mft (raw, json)
Hash identifier:          9IkcJvq8NwW/MP7sop4Cv5F/TQpOGhl+/HjWPnNxsuQ=
Subject key identifier:   F9:B7:0B:B6:FD:AC:58:E5:8D:0D:E3:03:EC:0E:F6:B5:55:64:71:48
Authority key identifier: 3E:86:7D:89:D6:C0:9D:08:41:36:48:53:32:8D:D8:03:0D:FB:B0:FD
Certificate issuer:       /CN=3e867d89d6c09d0841364853328dd8030dfbb0fd
Certificate serial:       07871B383D65DC74E044A5DD4048FC7966C811D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PoZ9idbAnQhBNkhTMo3YAw37sP0.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/3E867D89D6C09D0841364853328DD8030DFBB0FD.mft
Manifest number:          04
Signing time:             Sat 08 Apr 2023 08:02:52 +0000
Manifest this update:     Sat 08 Apr 2023 07:57:52 +0000
Manifest next update:     Sun 09 Apr 2023 09:34:52 +0000
Files and hashes:         1: 3E867D89D6C09D0841364853328DD8030DFBB0FD.crl (hash: gosk+9jFVLmEWjouGT218+BpPxI5vkmjNC+bDSMjMLQ=)
                          2: B2E23857943C24C5F8423ACCDC7BE84E01E328DB.cer (hash: 0SHDwQCyfBCafVzrCP79JrXOA7r86m10MTIg9MbV9N4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:87:1b:38:3d:65:dc:74:e0:44:a5:dd:40:48:fc:79:66:c8:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e867d89d6c09d0841364853328dd8030dfbb0fd
        Validity
            Not Before: Apr  8 07:57:52 2023 GMT
            Not After : Apr  9 09:34:52 2023 GMT
        Subject: CN=F9B70BB6FDAC58E58D0DE303EC0EF6B555647148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:b0:ed:56:c0:7a:1d:b5:6c:b8:1a:9c:29:
                    a8:f7:f1:64:36:16:8f:0a:1f:9a:c1:40:23:62:7b:
                    90:70:d5:ea:45:eb:5f:a1:6b:f7:2f:95:67:d6:84:
                    c0:99:33:d1:1b:b4:25:4c:47:19:a2:e8:9f:9e:0e:
                    d1:96:57:23:ce:52:96:6a:7b:00:b5:fb:ee:e8:14:
                    ba:f4:b5:61:11:14:d3:9b:a4:8b:75:af:95:26:4e:
                    14:b1:e2:aa:00:35:0a:09:de:fa:f6:3d:76:49:ad:
                    77:1c:7a:21:bd:0b:bd:a0:9c:f7:f3:1b:64:31:90:
                    8c:9b:1a:59:8c:1f:91:47:cf:8b:c8:f6:f5:0d:a1:
                    6d:5b:3d:0b:55:46:a6:c8:30:8a:bf:a5:be:c2:80:
                    f2:af:3f:95:09:a1:b8:ee:3b:3d:7d:24:57:23:ab:
                    16:95:c7:ae:15:24:d3:b7:2f:24:28:46:c5:33:eb:
                    58:68:8a:ec:c0:88:ce:32:41:10:02:19:85:5c:fb:
                    4a:eb:b2:25:38:6a:5e:7b:eb:c3:ee:7b:6f:80:0f:
                    bf:7a:08:2d:cd:f0:8f:9a:78:6a:65:5c:dc:b7:68:
                    87:4f:4e:54:e5:2d:7e:83:a4:c0:9c:c3:5b:7d:fb:
                    ef:85:a6:83:55:73:d6:d8:b1:d7:99:b4:4e:fc:67:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B7:0B:B6:FD:AC:58:E5:8D:0D:E3:03:EC:0E:F6:B5:55:64:71:48
            X509v3 Authority Key Identifier:
                keyid:3E:86:7D:89:D6:C0:9D:08:41:36:48:53:32:8D:D8:03:0D:FB:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/3E867D89D6C09D0841364853328DD8030DFBB0FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoZ9idbAnQhBNkhTMo3YAw37sP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/3E867D89D6C09D0841364853328DD8030DFBB0FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:a8:9f:45:17:b7:64:bc:ec:13:90:56:e7:70:05:f3:c8:
         cf:eb:81:24:0a:83:62:bf:3c:13:eb:78:39:01:8f:02:89:88:
         d6:89:cf:87:86:0c:81:3a:56:ee:59:b6:21:11:39:49:62:a8:
         e3:45:8b:86:ef:f0:76:83:fc:14:80:04:8a:77:2d:ea:71:d6:
         1c:d2:4d:ef:07:05:0f:ef:a9:29:12:91:d1:32:1f:1d:71:9f:
         72:e7:06:32:c2:d2:bb:24:6f:eb:21:b1:8b:02:3a:f1:5e:e1:
         ef:75:6f:02:a7:9f:5d:9a:cb:7b:39:e0:9c:29:00:ab:09:54:
         cf:e7:d2:54:63:36:72:73:c8:37:f1:1e:76:0b:98:13:15:6f:
         18:62:f7:74:fb:2d:35:04:38:12:d6:75:87:1b:a3:aa:6e:df:
         52:ef:4d:b7:02:8f:84:73:a7:f9:1b:37:7b:31:71:76:c9:b2:
         ec:96:64:3a:52:ec:e0:f6:19:e2:7f:d8:2f:1e:6c:00:46:e2:
         23:67:98:39:6c:07:24:0b:b8:a9:82:e9:25:36:09:2b:1b:0a:
         1c:6f:2e:7f:3b:ba:07:5a:f3:df:af:be:82:5e:c0:61:89:63:
         cf:9d:a7:30:af:d4:ad:48:38:72:7e:7c:51:48:d0:74:d0:74:
         c6:c6:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----