Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.mft
File:                     B89704C2001CD96972786224D0DB20E501E08AB0.mft (raw, json)
Hash identifier:          JHeKLwYVOspgelt523966yhQRx9A9rQVDgHGWmr5z1Q=
Subject key identifier:   AB:8F:80:42:00:69:24:71:BC:A2:4B:21:64:DF:3D:0B:40:72:7A:53
Authority key identifier: B8:97:04:C2:00:1C:D9:69:72:78:62:24:D0:DB:20:E5:01:E0:8A:B0
Certificate issuer:       /CN=b89704c2001cd96972786224d0db20e501e08ab0
Certificate serial:       1CE62E633A1083C0243EF80C0E2C4A0F6B84ED82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJcEwgAc2WlyeGIk0Nsg5QHgirA.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.mft
Manifest number:          12
Signing time:             Sat 08 Apr 2023 11:00:07 +0000
Manifest this update:     Sat 08 Apr 2023 10:55:07 +0000
Manifest next update:     Sun 09 Apr 2023 14:44:07 +0000
Files and hashes:         1: 568E3E4811EC6430E4BB6207559B68E74AB7A2F0.cer (hash: 5gLIRxLQ4J/ucaloAlknMcAg7qO23OJc+Ps96B9zBfo=)
                          2: 9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer (hash: nznm8Aa/TInKAmR90Pdo8QDBX+KBKQcGWsDO89mGSYY=)
                          3: 34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer (hash: oQPgmRof4UMrwT+/MQhdezKEfV4AV8rV1K7FYY+creE=)
                          4: DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.cer (hash: xEQ9Ur2KOGkcyZOGXAUAp9OyJ1P+LK/VfNZqlJYEuq8=)
                          5: 3A746C36EE6B214EC45EE380068D702171B08589.cer (hash: fWt9UWFeSy5GDWTD46UCN7BaZud3YzgGtHo5fE1LKIs=)
                          6: 6D198923E0B9960D744113B139EDF2E1DF3F3200.cer (hash: syyzwcV0UASDdmdGdHpXy/tfrO6okSVGP4GU387IHmY=)
                          7: B89704C2001CD96972786224D0DB20E501E08AB0.crl (hash: dHUJxmH1PAhcq1ykvE9MRrmZ+Xim7+/eh3LINAC1xoU=)
                          8: 5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.cer (hash: 9RsmCqSPDdxgsr4Hc4Hh4KwZ81kMtz6FiieIU/av6PI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e6:2e:63:3a:10:83:c0:24:3e:f8:0c:0e:2c:4a:0f:6b:84:ed:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89704c2001cd96972786224d0db20e501e08ab0
        Validity
            Not Before: Apr  8 10:55:07 2023 GMT
            Not After : Apr  9 14:44:07 2023 GMT
        Subject: CN=AB8F804200692471BCA24B2164DF3D0B40727A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:af:ca:4e:49:a7:7a:43:79:e7:cd:c9:13:
                    0e:63:18:1c:31:ce:43:68:58:7e:8c:6b:15:2c:c5:
                    4b:9b:18:3d:97:8f:98:77:c0:54:1f:57:40:14:38:
                    40:62:bb:2c:c3:33:b5:44:07:47:36:3c:fc:61:39:
                    0f:ea:65:3f:32:c4:30:53:bf:bb:92:5a:78:46:0c:
                    d7:84:f9:09:43:12:1e:d9:e9:5e:59:72:b3:62:0f:
                    f3:43:9b:d7:2d:1d:53:69:45:d8:a1:9a:a2:5f:ae:
                    3c:d0:b3:42:11:df:cb:67:03:b9:ee:30:11:91:d9:
                    87:fb:bf:25:47:0e:43:1c:85:4f:4c:66:3c:7e:16:
                    6e:bb:7e:ec:e8:89:7e:cc:d0:58:39:f4:51:c1:f6:
                    84:a9:ac:ed:76:e1:a7:e8:c0:c7:bf:a9:e8:67:dc:
                    df:e2:ea:fa:5c:09:b1:11:e2:3f:8d:e7:51:62:57:
                    42:eb:ab:50:28:e6:a5:70:00:c0:a8:2c:e2:06:83:
                    97:6d:d2:d1:1a:53:72:16:c8:f8:04:e0:c4:fb:ab:
                    6f:59:fd:94:c0:66:a0:b1:44:2d:e0:74:b4:ee:82:
                    dc:13:19:09:26:a1:4d:d1:13:45:1b:b5:5a:97:16:
                    10:74:6c:2a:b8:dd:a9:38:2d:4e:b1:26:fe:91:29:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:80:42:00:69:24:71:BC:A2:4B:21:64:DF:3D:0B:40:72:7A:53
            X509v3 Authority Key Identifier:
                keyid:B8:97:04:C2:00:1C:D9:69:72:78:62:24:D0:DB:20:E5:01:E0:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJcEwgAc2WlyeGIk0Nsg5QHgirA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:18:3c:7b:e6:00:1e:b1:75:0b:4d:27:58:33:4a:5e:af:8b:
         b1:ce:8c:b9:2c:59:00:cb:d1:ff:03:89:84:3c:98:a5:d9:4b:
         6e:7d:39:7c:78:4e:e3:14:95:eb:3c:30:cf:78:f3:12:62:13:
         b6:cf:00:ab:e5:53:bd:fd:e3:5c:88:fc:09:7d:9e:9a:f0:bd:
         24:69:be:16:fa:09:dd:e2:26:72:9e:bf:ef:02:7a:55:b1:c7:
         91:f4:24:de:30:2c:18:58:42:82:c4:7c:b2:32:08:09:de:19:
         23:e0:0a:78:e7:f1:d4:47:79:14:e5:13:84:c4:05:1c:34:50:
         70:52:1d:b0:de:cf:5a:30:ac:d7:1f:ea:f1:33:7e:43:53:d5:
         84:0f:6e:c2:e1:e0:31:7e:03:48:40:d5:9c:17:a7:99:2c:84:
         96:f8:9b:9c:c2:b9:2d:76:f6:3f:d7:5e:83:82:a8:29:23:7f:
         be:98:1c:98:8b:7d:86:7a:c4:4e:b6:54:93:45:3b:bf:9a:81:
         64:82:7d:d9:bc:77:17:6f:5e:80:b7:f8:79:bc:8d:b3:5e:39:
         75:26:e5:3f:7b:94:14:06:bd:d0:82:87:c7:65:80:96:fb:96:
         6a:f6:94:ab:a6:4a:4f:27:90:1d:48:b0:9e:4e:e4:9e:d6:39:
         a0:8e:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----