Manifest

$ rpki-client -vvf 0.sb/repo/sb/0/A0D68C72F1563ACE1485DBB5A894E58099E97ABE.mft
File:                     A0D68C72F1563ACE1485DBB5A894E58099E97ABE.mft (raw, json)
Hash identifier:          J/fQ4IM4I/rX7zLZGdqkuuT10mNgIsQftKWJ7hgvb+k=
Subject key identifier:   53:A8:49:07:AF:30:A8:7C:82:7C:BD:D9:B6:90:80:15:6C:DC:B7:2D
Authority key identifier: A0:D6:8C:72:F1:56:3A:CE:14:85:DB:B5:A8:94:E5:80:99:E9:7A:BE
Certificate issuer:       /CN=a0d68c72f1563ace1485dbb5a894e58099e97abe
Certificate serial:       2F45B89E3F2E54492825F8D375E170C6A353AED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNaMcvFWOs4Uhdu1qJTlgJnper4.cer
Subject info access:      rsync://0.sb/repo/sb/0/A0D68C72F1563ACE1485DBB5A894E58099E97ABE.mft
Manifest number:          046D
Signing time:             Thu 14 Dec 2023 08:56:42 +0000
Manifest this update:     Thu 14 Dec 2023 08:51:42 +0000
Manifest next update:     Fri 15 Dec 2023 10:00:42 +0000
Files and hashes:         1: 36322e3130362e37352e302f32342d3234203d3e2038383838.roa (hash: nPG8LvTdZIfERJbxpvrsIoeChynob2H/z1Jr2LnfVyU=)
                          2: A0D68C72F1563ACE1485DBB5A894E58099E97ABE.crl (hash: TaPGAetjATaevxN/8ygpwAGXJQGIdxi7b03v7NSdYKo=)
                          3: 36322e3130362e37352e302f32342d3234203d3e20313937373330.roa (hash: 8Tf938XlaF1upxi30/VbRxQ1slwRQ2UghIBJOdnMFIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:45:b8:9e:3f:2e:54:49:28:25:f8:d3:75:e1:70:c6:a3:53:ae:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0d68c72f1563ace1485dbb5a894e58099e97abe
        Validity
            Not Before: Dec 14 08:51:42 2023 GMT
            Not After : Dec 15 10:00:42 2023 GMT
        Subject: CN=53A84907AF30A87C827CBDD9B69080156CDCB72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:e5:cc:82:1a:a1:e7:ea:66:4b:82:74:37:
                    eb:c0:8c:a4:9f:33:dc:f2:18:18:ad:2b:d7:18:6c:
                    bc:ad:8b:56:a2:a3:56:d6:c3:07:2d:d5:86:48:10:
                    97:1b:86:bb:6e:4f:73:da:e6:35:19:43:f2:b7:d9:
                    a2:83:03:4c:b7:25:e4:3d:15:64:c0:e3:26:88:2b:
                    7d:2b:55:f8:47:c0:cf:10:57:d7:4b:71:b6:7e:a2:
                    cb:e8:df:1c:e8:02:7f:ca:65:c6:6c:31:2f:3e:ba:
                    32:83:6a:83:70:49:fc:80:a0:1d:8a:a3:ab:b9:97:
                    68:64:cb:f8:ed:70:9a:cd:53:5c:23:08:8e:c7:4b:
                    79:c2:ae:85:85:54:5c:b3:66:d5:9a:c8:0c:61:d7:
                    fd:10:3f:aa:d9:c2:92:94:2c:e4:86:e8:da:4f:c9:
                    83:14:cf:5a:39:76:9a:74:02:b4:3a:99:38:b9:30:
                    ba:c7:82:c0:77:8f:1f:d5:a4:71:34:1e:fe:4e:ca:
                    4c:15:ff:0d:0f:55:54:d4:62:83:6e:6b:49:f9:7b:
                    e3:8b:7c:e0:14:ab:85:cb:f8:51:b6:4a:2a:57:0c:
                    91:ba:af:81:f6:2e:30:7b:ab:e6:31:27:18:ec:39:
                    5b:9b:67:fe:4e:e2:50:eb:6f:ca:17:a2:3d:9f:91:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A8:49:07:AF:30:A8:7C:82:7C:BD:D9:B6:90:80:15:6C:DC:B7:2D
            X509v3 Authority Key Identifier:
                keyid:A0:D6:8C:72:F1:56:3A:CE:14:85:DB:B5:A8:94:E5:80:99:E9:7A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/0/A0D68C72F1563ACE1485DBB5A894E58099E97ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNaMcvFWOs4Uhdu1qJTlgJnper4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/0/A0D68C72F1563ACE1485DBB5A894E58099E97ABE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:28:57:e6:b4:89:74:99:fa:c2:82:13:6d:97:30:0b:3e:
         23:39:cb:a9:72:19:9d:ba:4f:59:80:52:49:c0:2b:b7:9d:57:
         a2:ec:91:e6:39:3c:7c:8b:10:7d:e3:50:cd:41:1d:85:e9:cf:
         d9:41:22:89:79:06:a9:01:29:cc:a6:c4:8e:4c:c7:cb:57:95:
         0c:87:55:bb:58:92:2b:ea:dd:7d:2e:d7:0d:0b:ce:0e:66:f6:
         31:97:c7:a2:64:f4:1f:0e:cf:6b:db:26:9c:08:0f:a0:2b:df:
         ac:eb:c0:f0:99:95:b9:98:8a:0e:9d:88:7d:92:5f:3b:9d:a4:
         ac:64:94:c9:dc:f6:1e:ea:74:23:ab:3f:b9:ac:2d:e8:3d:07:
         49:56:39:f0:a0:fb:c9:f6:b8:ed:ac:cf:84:f6:ba:04:4e:fb:
         0a:06:56:c6:a6:e1:8b:c5:b3:2d:c9:cc:31:6f:7f:9f:b3:45:
         57:70:2a:fc:02:df:59:ce:f2:9a:db:e9:69:82:33:0a:b5:82:
         10:c1:96:02:66:e6:50:25:96:36:0b:eb:fb:69:29:4c:3b:d7:
         5e:cd:b7:bd:b5:b3:5e:81:a1:09:66:1c:80:8c:bf:32:4c:7f:
         ab:d8:46:5f:04:80:e4:10:60:7e:58:78:82:38:e3:54:0f:94:
         5e:93:f5:90
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUL0W4nj8uVEkoJfjTdeFwxqNTrtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTBkNjhjNzJmMTU2M2FjZTE0ODVkYmI1YTg5NGU1ODA5
OWU5N2FiZTAeFw0yMzEyMTQwODUxNDJaFw0yMzEyMTUxMDAwNDJaMDMxMTAvBgNV
BAMTKDUzQTg0OTA3QUYzMEE4N0M4MjdDQkREOUI2OTA4MDE1NkNEQ0I3MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPuXMghqh5+pmS4J0N+vAjKSf
M9zyGBitK9cYbLyti1aio1bWwwct1YZIEJcbhrtuT3Pa5jUZQ/K32aKDA0y3JeQ9
FWTA4yaIK30rVfhHwM8QV9dLcbZ+osvo3xzoAn/KZcZsMS8+ujKDaoNwSfyAoB2K
o6u5l2hky/jtcJrNU1wjCI7HS3nCroWFVFyzZtWayAxh1/0QP6rZwpKULOSG6NpP
yYMUz1o5dpp0ArQ6mTi5MLrHgsB3jx/VpHE0Hv5OykwV/w0PVVTUYoNua0n5e+OL
fOAUq4XL+FG2SipXDJG6r4H2LjB7q+YxJxjsOVubZ/5O4lDrb8oXoj2fkbcjAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQUU6hJB68wqHyCfL3ZtpCAFWzcty0wHwYDVR0j
BBgwFoAUoNaMcvFWOs4Uhdu1qJTlgJnper4wDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzAvQTBENjhDNzJGMTU2
M0FDRTE0ODVEQkI1QTg5NEU1ODA5OUU5N0FCRS5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL29OYU1jdkZXT3M0VWhkdTFxSlRsZ0pucGVyNC5jZXIwXwYIKwYBBQUH
AQsEUzBRME8GCCsGAQUFBzALhkNyc3luYzovLzAuc2IvcmVwby9zYi8wL0EwRDY4
QzcyRjE1NjNBQ0UxNDg1REJCNUE4OTRFNTgwOTlFOTdBQkUubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7
FihX5rSJdJn6woITbZcwCz4jOcupchmduk9ZgFJJwCu3nVei7JHmOTx8ixB941DN
QR2F6c/ZQSKJeQapASnMpsSOTMfLV5UMh1W7WJIr6t19LtcNC84OZvYxl8eiZPQf
Ds9r2yacCA+gK9+s68DwmZW5mIoOnYh9kl87naSsZJTJ3PYe6nQjqz+5rC3oPQdJ
VjnwoPvJ9rjtrM+E9roETvsKBlbGpuGLxbMtycwxb3+fs0VXcCr8At9ZzvKa2+lp
gjMKtYIQwZYCZuZQJZY2C+v7aSlMO9dezbe9tbNegaEJZhyAjL8yTH+r2EZfBIDk
EGB+WHiCOONUD5Rek/WQ
-----END CERTIFICATE-----