Manifest

$ rpki-client -vvf 0.sb/repo/sb/40/DCD78EAB86A4645956B555A449F72CBABFD43B9E.mft
File:                     DCD78EAB86A4645956B555A449F72CBABFD43B9E.mft (raw, json)
Hash identifier:          cNoOpf8AYOgsLsQCxfQmgxSxSGs5kNVpXmkNMK8ccuQ=
Subject key identifier:   09:E3:45:F8:D2:FB:72:29:D4:30:2C:C7:8D:12:28:F2:07:5A:24:33
Authority key identifier: DC:D7:8E:AB:86:A4:64:59:56:B5:55:A4:49:F7:2C:BA:BF:D4:3B:9E
Certificate issuer:       /CN=dcd78eab86a4645956b555a449f72cbabfd43b9e
Certificate serial:       604BD687D55982D1F1597CC05E3EC324F2ECAF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3NeOq4akZFlWtVWkSfcsur_UO54.cer
Subject info access:      rsync://0.sb/repo/sb/40/DCD78EAB86A4645956B555A449F72CBABFD43B9E.mft
Manifest number:          0238
Signing time:             Thu 14 Dec 2023 07:36:26 +0000
Manifest this update:     Thu 14 Dec 2023 07:31:26 +0000
Manifest next update:     Fri 15 Dec 2023 11:16:26 +0000
Files and hashes:         1: 3231332e3233322e3233382e302f32342d3234203d3e203136353039.roa (hash: 5BcwPB0fhRenhu1Nr0qQwpGldW4Y9NTd/XE9Je+qeC0=)
                          2: DCD78EAB86A4645956B555A449F72CBABFD43B9E.crl (hash: eNg7IkI2dd6Blg0GYO72cf5KtYjHoPQc+/DR2SeHTV4=)
                          3: 3231332e3233322e3233382e302f32342d3234203d3e203134363138.roa (hash: AnG4YL6y8K8P5tq7owTTJQgFmsE7MbalpJygKyILMso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4b:d6:87:d5:59:82:d1:f1:59:7c:c0:5e:3e:c3:24:f2:ec:af:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcd78eab86a4645956b555a449f72cbabfd43b9e
        Validity
            Not Before: Dec 14 07:31:26 2023 GMT
            Not After : Dec 15 11:16:26 2023 GMT
        Subject: CN=09E345F8D2FB7229D4302CC78D1228F2075A2433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:38:de:f8:17:11:d6:0a:9a:9b:50:08:4e:8e:
                    d3:24:1b:89:7f:80:1d:52:73:78:d7:d3:c6:8f:0d:
                    4a:88:13:9e:38:08:14:85:72:b5:76:59:86:f8:60:
                    56:7d:ea:8b:2b:26:c4:12:27:42:2b:42:f9:9c:97:
                    a7:68:be:72:83:94:00:11:2b:3c:66:26:07:25:7c:
                    fc:80:30:be:c6:38:77:83:30:1c:4a:70:d5:2f:af:
                    2f:1f:cd:d0:0f:38:4e:eb:5e:2d:61:90:a4:55:a0:
                    bb:81:9a:ba:c4:df:9c:d0:ea:4a:e8:40:33:2b:6c:
                    4e:7d:7b:bd:24:16:d6:73:32:fe:5c:67:cc:19:ae:
                    29:7e:1e:8b:46:96:ad:70:de:6e:6f:25:70:57:09:
                    f1:f3:95:5f:f5:e4:7a:d0:3e:99:9c:3e:77:97:3a:
                    77:e6:36:c5:cc:a4:27:b4:ea:75:32:f1:10:76:2f:
                    6c:47:de:66:45:57:42:14:8d:a0:fd:a6:49:1b:98:
                    41:00:e2:53:2a:f0:8c:48:1e:cf:82:cb:a5:1f:2b:
                    19:27:18:e9:91:78:41:de:a1:08:c6:ad:6c:d9:8a:
                    35:32:96:d9:56:04:83:36:90:8e:39:55:7e:a4:be:
                    99:b3:47:b3:18:54:35:ae:58:05:3c:90:68:ec:f5:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:45:F8:D2:FB:72:29:D4:30:2C:C7:8D:12:28:F2:07:5A:24:33
            X509v3 Authority Key Identifier:
                keyid:DC:D7:8E:AB:86:A4:64:59:56:B5:55:A4:49:F7:2C:BA:BF:D4:3B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/40/DCD78EAB86A4645956B555A449F72CBABFD43B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NeOq4akZFlWtVWkSfcsur_UO54.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/40/DCD78EAB86A4645956B555A449F72CBABFD43B9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:80:0e:0f:cf:1a:3c:04:44:49:99:9b:cd:e8:cb:6b:fc:fe:
         ab:87:a3:e4:7a:e2:08:a2:ef:87:72:b9:35:b2:ad:ef:da:39:
         42:d8:e7:1f:40:a6:23:59:7b:57:2e:3d:79:18:13:35:9c:fc:
         91:ed:99:f8:0e:07:0c:77:53:a0:2a:19:38:fb:48:36:9a:bd:
         1e:2f:14:1c:d8:05:37:a6:ea:31:35:2d:ab:ec:15:4d:3f:5b:
         a4:47:d6:bd:dd:79:e3:18:5a:db:e9:7d:7c:29:5b:83:a8:99:
         ca:c6:32:df:75:19:5a:28:51:89:24:11:3b:2c:ba:b9:bd:c8:
         b0:1a:0d:4d:d0:0e:88:83:98:06:8c:e7:c5:4f:85:fd:04:3f:
         8f:00:ea:fe:02:24:ad:c3:d3:7a:09:f4:7f:8a:ee:0f:38:fe:
         03:49:4d:f4:6c:bc:a4:60:a3:14:9b:21:11:af:02:b8:92:a7:
         91:65:d7:05:c0:a9:25:52:81:79:92:6f:a5:1d:df:a8:ed:c7:
         3d:01:95:0d:fb:ff:08:8f:19:ca:a6:73:37:28:01:37:46:8f:
         36:f0:53:a5:25:2d:f7:82:ac:ef:3e:18:56:42:31:42:aa:b1:
         2f:e4:81:9d:81:26:7d:4c:ba:c5:a6:60:0b:c6:da:97:f2:3b:
         3c:e6:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----