Manifest

$ rpki-client -vvf rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.mft
File:                     B89704C2001CD96972786224D0DB20E501E08AB0.mft (raw, json)
Hash identifier:          JYflZ8te+OvyDs5HQfzIl1vFgFJEoeyqiE2L+TmN0AQ=
Subject key identifier:   C4:42:A4:28:F5:AB:A7:2A:F6:20:62:E4:92:F3:D7:EB:1A:C4:81:C2
Authority key identifier: B8:97:04:C2:00:1C:D9:69:72:78:62:24:D0:DB:20:E5:01:E0:8A:B0
Certificate issuer:       /CN=b89704c2001cd96972786224d0db20e501e08ab0
Certificate serial:       1EFA86AC4A577D4ADEFBD3EF02D27E97E6740A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJcEwgAc2WlyeGIk0Nsg5QHgirA.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.mft
Manifest number:          0F
Signing time:             Sat 08 Apr 2023 09:23:15 +0000
Manifest this update:     Sat 08 Apr 2023 09:18:15 +0000
Manifest next update:     Sun 09 Apr 2023 12:58:15 +0000
Files and hashes:         1: DA655D5755EF1DFCF5D9F7D9CD5577F6199A0E99.cer (hash: xEQ9Ur2KOGkcyZOGXAUAp9OyJ1P+LK/VfNZqlJYEuq8=)
                          2: 6D198923E0B9960D744113B139EDF2E1DF3F3200.cer (hash: syyzwcV0UASDdmdGdHpXy/tfrO6okSVGP4GU387IHmY=)
                          3: 568E3E4811EC6430E4BB6207559B68E74AB7A2F0.cer (hash: 5gLIRxLQ4J/ucaloAlknMcAg7qO23OJc+Ps96B9zBfo=)
                          4: 9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer (hash: nznm8Aa/TInKAmR90Pdo8QDBX+KBKQcGWsDO89mGSYY=)
                          5: 3A746C36EE6B214EC45EE380068D702171B08589.cer (hash: fWt9UWFeSy5GDWTD46UCN7BaZud3YzgGtHo5fE1LKIs=)
                          6: 66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA.cer (hash: BNPEWc51VQp7n4jL0M4mCOL62yTL83VYHW9R5VbKeW0=)
                          7: 34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer (hash: oQPgmRof4UMrwT+/MQhdezKEfV4AV8rV1K7FYY+creE=)
                          8: 481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer (hash: syhmE9ufQHxUcN5GSoP282XCZ1w6NwY7cke1FwApSK0=)
                          9: B89704C2001CD96972786224D0DB20E501E08AB0.crl (hash: sKrgxBkOK0pqHpmiDqeWcegAn+CYV/rjPxSuN8sMFJk=)
                          10: 5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.cer (hash: 9RsmCqSPDdxgsr4Hc4Hh4KwZ81kMtz6FiieIU/av6PI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fa:86:ac:4a:57:7d:4a:de:fb:d3:ef:02:d2:7e:97:e6:74:0a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89704c2001cd96972786224d0db20e501e08ab0
        Validity
            Not Before: Apr  8 09:18:15 2023 GMT
            Not After : Apr  9 12:58:15 2023 GMT
        Subject: CN=C442A428F5ABA72AF62062E492F3D7EB1AC481C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:a9:e7:6b:a1:42:b8:f6:da:f0:b0:a7:c4:
                    b1:c0:7b:9b:70:aa:41:63:01:64:01:79:bc:4a:1c:
                    0c:34:3e:ee:52:c8:3c:71:dd:80:79:c4:38:3a:5b:
                    55:39:48:27:7d:85:36:83:f8:31:30:d9:1d:e1:c9:
                    20:10:07:2b:cb:e1:60:e5:2a:6e:53:1e:7a:1a:be:
                    1e:7b:cc:ec:6c:90:55:f4:df:80:8e:23:4a:5b:3e:
                    71:91:ff:c9:82:e9:6c:34:d2:01:27:c7:ce:cc:73:
                    7d:13:02:37:e3:a4:3a:4c:9c:d8:39:68:06:1d:99:
                    2a:fc:70:31:38:33:f0:cc:01:7f:b4:42:6a:5d:ec:
                    36:c0:d1:12:64:de:68:50:1c:aa:f3:33:17:43:05:
                    30:2e:2f:97:6a:33:31:d2:a5:9d:6c:e5:93:71:92:
                    d4:4f:07:63:35:cb:74:8c:bd:55:20:65:b3:c8:c0:
                    38:7c:35:02:6c:44:04:2e:3b:fb:85:e0:21:f3:ca:
                    a9:f4:e8:38:95:74:f8:c0:8b:1c:f0:4c:05:43:54:
                    6f:cc:2d:4d:8a:a3:e2:db:1e:29:c3:1d:a5:89:d4:
                    e9:10:82:7d:0c:4d:c1:78:c9:ba:79:5f:38:73:4c:
                    0b:21:7f:7d:16:ce:60:61:6d:65:21:e9:6b:41:39:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:A4:28:F5:AB:A7:2A:F6:20:62:E4:92:F3:D7:EB:1A:C4:81:C2
            X509v3 Authority Key Identifier:
                keyid:B8:97:04:C2:00:1C:D9:69:72:78:62:24:D0:DB:20:E5:01:E0:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJcEwgAc2WlyeGIk0Nsg5QHgirA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/B89704C2001CD96972786224D0DB20E501E08AB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d1:2e:87:f7:de:7b:e9:a6:91:a8:49:cc:8f:83:89:09:5f:
         27:18:c0:77:4d:c4:9d:88:dc:e6:3a:46:e9:d2:d7:b8:83:a7:
         a2:be:18:11:0e:4b:cb:3b:ff:d9:30:4a:00:0b:ac:6b:8b:45:
         03:a6:0d:5e:d1:3c:2b:93:ce:3f:2e:b7:76:bf:f9:c3:ff:99:
         2d:bf:36:26:10:5a:e7:b2:fb:3a:fd:f6:62:34:8e:9a:14:90:
         14:25:c8:51:25:12:3d:51:f0:54:c6:09:c0:0a:60:2c:35:9c:
         a5:6d:d3:3d:94:2f:c0:09:b3:13:25:e0:e2:24:97:43:2d:d7:
         74:3e:4e:c9:1e:f5:3d:21:7d:37:8b:01:65:32:ec:6c:76:97:
         2c:0e:2c:ea:cf:7f:a6:d1:a5:07:77:6a:94:a3:9c:ef:7b:39:
         78:9c:df:e3:db:dd:5b:e4:9f:1c:70:a6:55:f9:a8:ac:c4:37:
         b4:9b:90:e3:01:86:8e:3c:76:bb:27:97:08:77:33:3d:27:1c:
         80:2f:0a:d2:e7:48:df:35:42:28:53:11:fd:ed:29:43:b5:33:
         6a:26:71:83:e3:23:df:e4:92:66:90:28:0f:5b:4b:14:92:d3:
         8e:e0:b9:31:16:37:73:f4:30:cc:7b:fd:47:3f:5f:40:af:a7:
         01:a3:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----