Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/7/8EE532C80E5D0AD0E1DB64BA87C840403A99EF1F.mft
File:                     8EE532C80E5D0AD0E1DB64BA87C840403A99EF1F.mft (raw, json)
Hash identifier:          /b9o4o4gzvxRNRcBhzUDzmB2wOZcU4fkclhpTnlubSs=
Subject key identifier:   AD:3C:27:60:AC:65:B6:B2:4D:65:05:89:B1:8D:3D:91:59:E3:44:46
Authority key identifier: 8E:E5:32:C8:0E:5D:0A:D0:E1:DB:64:BA:87:C8:40:40:3A:99:EF:1F
Certificate issuer:       /CN=8ee532c80e5d0ad0e1db64ba87c840403a99ef1f
Certificate serial:       63D2CB74EA8502DF5ED246A46B790EDFAB9F8890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/juUyyA5dCtDh22S6h8hAQDqZ7x8.cer
Subject info access:      rsync://rpki.co/repo/HYSP/7/8EE532C80E5D0AD0E1DB64BA87C840403A99EF1F.mft
Manifest number:          04
Signing time:             Sat 08 Apr 2023 08:02:50 +0000
Manifest this update:     Sat 08 Apr 2023 07:57:50 +0000
Manifest next update:     Sun 09 Apr 2023 08:36:50 +0000
Files and hashes:         1: 8EE532C80E5D0AD0E1DB64BA87C840403A99EF1F.crl (hash: s6hmYGM7Gvne9Fp3hcnfmJ1UsSMGfH2anYn63KAQpd0=)
                          2: 2DA9D1794ECCA35E488B5CCD77393287746E163C.cer (hash: wDzH9DOhudnnohjaO1c+huIPYZV19YXXBWdSjjYmMfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d2:cb:74:ea:85:02:df:5e:d2:46:a4:6b:79:0e:df:ab:9f:88:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee532c80e5d0ad0e1db64ba87c840403a99ef1f
        Validity
            Not Before: Apr  8 07:57:50 2023 GMT
            Not After : Apr  9 08:36:50 2023 GMT
        Subject: CN=AD3C2760AC65B6B24D650589B18D3D9159E34446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:f2:53:f1:f5:b0:2f:40:0c:a3:0e:29:7e:
                    eb:68:67:18:65:9b:c5:51:bb:70:f3:49:52:65:e6:
                    f4:82:d9:f5:d9:13:f3:ac:ef:c2:f9:ec:d1:75:b5:
                    f5:68:22:8e:8b:2e:db:9b:57:e5:10:7a:8c:c9:79:
                    7e:bc:db:d6:91:88:cf:95:fa:84:0d:7b:cc:d2:8a:
                    54:26:b3:48:36:56:1f:bf:ca:08:38:85:62:c7:e1:
                    7c:bb:d1:0e:67:58:5d:21:e4:da:52:dd:0e:52:ae:
                    5b:54:67:0e:19:41:9e:d0:67:a1:1d:ee:8a:73:fa:
                    db:65:54:d5:cb:be:e1:12:2c:fc:62:b0:f5:d8:61:
                    7d:7d:2a:08:cc:57:f4:1d:80:50:33:01:49:cd:90:
                    4c:71:56:9e:33:49:20:77:6a:90:6d:bb:2d:c3:fb:
                    97:21:70:82:57:9e:39:09:bc:4a:39:1e:a1:0d:2b:
                    6e:22:c1:0f:88:c8:fa:bf:60:8d:92:c7:40:1c:e7:
                    5d:9a:c7:43:e0:9a:77:dc:7e:18:64:ea:df:eb:be:
                    11:d0:6c:81:75:cd:6c:ca:56:78:01:15:85:11:09:
                    c0:50:81:bf:1f:a3:e2:1b:e9:10:66:82:c1:a3:5a:
                    e8:51:68:c5:92:36:71:3f:95:bb:d4:c7:5b:96:d9:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3C:27:60:AC:65:B6:B2:4D:65:05:89:B1:8D:3D:91:59:E3:44:46
            X509v3 Authority Key Identifier:
                keyid:8E:E5:32:C8:0E:5D:0A:D0:E1:DB:64:BA:87:C8:40:40:3A:99:EF:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/7/8EE532C80E5D0AD0E1DB64BA87C840403A99EF1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/juUyyA5dCtDh22S6h8hAQDqZ7x8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/7/8EE532C80E5D0AD0E1DB64BA87C840403A99EF1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:34:e8:35:7b:a1:43:3c:90:a0:42:86:aa:69:86:e5:ee:
         34:08:80:9b:b8:85:2e:e4:60:34:cb:b1:8f:1d:e4:b4:20:bc:
         0a:53:a2:c3:14:82:f8:fd:52:5e:31:0f:e0:27:f1:12:56:66:
         b6:5d:7d:f2:29:c8:a7:92:89:52:46:1b:e3:d4:78:63:e4:0d:
         28:7e:50:08:46:92:cd:e2:33:ed:c6:f8:da:85:e7:86:cf:11:
         f8:07:44:62:3c:65:24:7f:36:6b:43:4d:39:ac:c7:91:8b:30:
         ae:d4:23:ac:51:82:f6:0a:25:fe:4e:2e:c6:9d:8d:dc:e0:b7:
         47:f1:a1:53:f4:ed:5a:c0:ee:08:80:90:f7:bc:83:e1:c5:e8:
         87:60:98:30:82:7b:ce:b3:85:eb:86:3e:23:07:fe:89:bf:9b:
         32:56:9e:5b:f5:f3:a0:8a:c2:5a:f0:43:b0:52:1a:41:69:45:
         79:48:ef:3b:e7:17:16:cf:97:65:94:b3:29:5e:99:82:69:56:
         50:20:32:73:8b:2a:a9:b9:82:5a:a7:19:65:f3:eb:46:f8:8d:
         3b:89:eb:f3:2b:6b:bd:85:05:e1:4c:42:f7:13:d9:e2:31:8f:
         b5:a6:a2:76:08:3d:f7:43:04:92:d0:ad:5a:0c:32:7e:ed:21:
         43:57:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----