Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/18/D8934575D189EF7F17DA8118042496D41A4517DE.mft
File:                     D8934575D189EF7F17DA8118042496D41A4517DE.mft (raw, json)
Hash identifier:          fwpavDswWE5T+E+wJxKv9aC0F82lRlNVM/uvfzd83Ko=
Subject key identifier:   2B:EF:6A:1E:11:4C:76:E9:0D:84:A2:18:FB:BE:FF:30:58:63:19:BB
Authority key identifier: D8:93:45:75:D1:89:EF:7F:17:DA:81:18:04:24:96:D4:1A:45:17:DE
Certificate issuer:       /CN=D8934575D189EF7F17DA8118042496D41A4517DE
Certificate serial:       03E5E249C7C6C3547AA1F90FD45A2CEA5CD61802
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/D8934575D189EF7F17DA8118042496D41A4517DE.cer
Subject info access:      rsync://rpki.co/repo/HYSP/18/D8934575D189EF7F17DA8118042496D41A4517DE.mft
Manifest number:          0F
Signing time:             Sat 08 Apr 2023 09:23:13 +0000
Manifest this update:     Sat 08 Apr 2023 09:18:13 +0000
Manifest next update:     Sun 09 Apr 2023 09:53:13 +0000
Files and hashes:         1: 43A4A3594CD0D1DC5DA03A3C2F5694A50F43A977.cer (hash: vjQSid2kuoUcgpxIf+gXQP5RnWCeQcy7TfIlWV2YN+Q=)
                          2: D8934575D189EF7F17DA8118042496D41A4517DE.crl (hash: 6Jgk79YQBBKEgdpbY+XzzfDF7906RlLWGakbdrTkv+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e5:e2:49:c7:c6:c3:54:7a:a1:f9:0f:d4:5a:2c:ea:5c:d6:18:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8934575D189EF7F17DA8118042496D41A4517DE
        Validity
            Not Before: Apr  8 09:18:13 2023 GMT
            Not After : Apr  9 09:53:13 2023 GMT
        Subject: CN=2BEF6A1E114C76E90D84A218FBBEFF30586319BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:3d:16:c2:a1:fd:36:b4:fe:94:5f:77:a5:
                    90:44:0b:df:2b:4f:2f:c6:98:fb:a4:d1:14:1f:b3:
                    75:b4:a7:0a:c1:a1:e7:f6:db:cc:7f:72:33:08:a2:
                    27:b6:e8:0f:18:79:68:fa:9f:15:7f:54:c3:4a:6a:
                    78:85:02:b6:4e:9f:79:0e:d2:89:3d:bd:40:cf:43:
                    30:8c:86:f4:ad:01:2f:44:55:8a:e1:91:7e:5e:3a:
                    8f:9f:51:ed:51:fe:ad:0a:73:b4:4b:8e:a4:9c:65:
                    46:b0:23:7b:64:1e:fd:1b:02:7f:89:ae:c4:bc:fb:
                    ce:ec:be:0b:78:de:8c:ab:1f:8b:7a:63:d3:e6:1e:
                    4f:cf:0e:d3:90:b9:ce:67:b0:79:01:61:95:6a:fa:
                    9e:57:71:cc:f0:21:87:b7:d5:47:f2:22:06:c2:d2:
                    c6:80:1c:7f:78:c3:e9:ce:4b:1d:a6:57:9a:fb:13:
                    2e:00:97:e9:d2:b9:9d:92:8f:66:0c:68:41:9b:2e:
                    c6:31:b6:5a:f1:88:df:09:af:ab:2b:1f:c7:a1:b1:
                    a0:7d:9b:01:ed:03:46:87:39:f9:a0:9a:1c:9b:bc:
                    50:65:12:7d:e5:38:7d:30:40:85:70:94:f0:6a:63:
                    07:5d:62:d4:f3:c7:d4:3e:08:2c:26:83:3b:0b:87:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:6A:1E:11:4C:76:E9:0D:84:A2:18:FB:BE:FF:30:58:63:19:BB
            X509v3 Authority Key Identifier:
                keyid:D8:93:45:75:D1:89:EF:7F:17:DA:81:18:04:24:96:D4:1A:45:17:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/18/D8934575D189EF7F17DA8118042496D41A4517DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/D8934575D189EF7F17DA8118042496D41A4517DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/18/D8934575D189EF7F17DA8118042496D41A4517DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6a:9b:92:cd:e1:c9:d0:dd:22:28:bf:2c:ab:92:d8:55:0b:
         6b:67:d0:c8:3a:af:89:df:78:74:22:ed:ab:51:99:04:5b:68:
         6d:31:f5:c9:9b:91:71:ed:87:fc:9d:1b:fb:57:95:8b:cc:fa:
         27:19:5b:06:d5:df:75:30:84:e7:38:4d:1d:26:89:27:1a:35:
         f4:bd:cb:ce:7f:89:c5:13:92:85:48:f4:9b:33:f2:3e:3d:08:
         56:61:fd:a6:69:c0:f6:f9:43:68:87:54:fb:6a:bb:26:1b:b3:
         05:50:e5:39:f1:cc:e8:1b:08:c4:05:ad:66:5b:b9:ff:da:4c:
         46:39:e8:52:ad:5d:94:7c:e7:0b:17:2f:3c:c1:1a:8b:fd:66:
         18:75:01:a5:b6:14:f1:1b:71:bc:28:65:95:5e:de:c4:c5:d2:
         4e:22:29:e6:31:11:6e:1a:4c:b4:2e:8d:16:31:30:3f:f0:52:
         b0:80:da:27:60:96:d8:53:ea:93:b0:38:30:32:2d:34:8e:f7:
         1a:cd:76:06:55:39:d5:63:0e:07:6d:81:ed:fc:d5:2e:fd:f3:
         6a:cc:c5:1c:25:07:59:cf:c0:20:59:83:07:8c:37:00:58:05:
         e7:1e:bc:cc:20:6f:38:3a:fa:54:50:8d:7d:20:bd:97:6f:cc:
         0a:f5:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----