Manifest

$ rpki-client -vvf rsync.rp.ki/repo/aci/1/9B70CB46A8DB2249A269B7AAF30E429BDC9C8B42.mft
File:                     9B70CB46A8DB2249A269B7AAF30E429BDC9C8B42.mft (raw, json)
Hash identifier:          Mxih3xhXNO5D7t7qVrLVRPAoz18i9sMwD2RpmgwIRSA=
Subject key identifier:   DB:C1:BE:FA:DA:35:F7:61:EA:B9:92:E1:EF:7F:89:80:3D:8D:65:28
Authority key identifier: 9B:70:CB:46:A8:DB:22:49:A2:69:B7:AA:F3:0E:42:9B:DC:9C:8B:42
Certificate issuer:       /CN=446cfa381c20d4da1d33e186e8219beb09e4ec0a3c7c2df7fc
Certificate serial:       4765D5149C424E758B978B6D26E56B2EB935D7C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c20d4da1d33e186e8219beb09e4ec0a3c7c2df7fc.cer
Subject info access:      rsync://rsync.rp.ki/repo/aci/1/9B70CB46A8DB2249A269B7AAF30E429BDC9C8B42.mft
Manifest number:          02BF
Signing time:             Sat 02 Dec 2023 21:51:31 +0000
Manifest this update:     Sat 02 Dec 2023 21:46:31 +0000
Manifest next update:     Sun 03 Dec 2023 23:47:31 +0000
Files and hashes:         1: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: Mj1+LFw1sXg0wRe2gLsSNpT2OBq2Vu9KxrKsK/G4I8s=)
                          2: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: BrYRjDVr2tvVdUh8VRm73xZ814id2vCHA9OQilIe1a4=)
                          3: 9B70CB46A8DB2249A269B7AAF30E429BDC9C8B42.crl (hash: PUDpiRCk3YDSxgN3DvQO3qR9nGHqEvFeHME0Uz8Jf6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:65:d5:14:9c:42:4e:75:8b:97:8b:6d:26:e5:6b:2e:b9:35:d7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446cfa381c20d4da1d33e186e8219beb09e4ec0a3c7c2df7fc
        Validity
            Not Before: Dec  2 21:46:31 2023 GMT
            Not After : Dec  3 23:47:31 2023 GMT
        Subject: CN=DBC1BEFADA35F761EAB992E1EF7F89803D8D6528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:1a:ac:bf:b2:80:4b:5c:53:d5:bf:f5:ca:
                    65:81:db:8e:0c:80:8c:4e:e0:c9:c6:e3:41:d6:b4:
                    76:5a:8a:bc:cb:39:f3:7e:a2:56:90:48:6c:55:aa:
                    f2:49:ee:93:d6:87:14:15:1c:28:4b:cf:11:85:60:
                    ad:15:82:85:a6:92:3f:6c:32:a2:7f:b5:00:33:b8:
                    07:3d:56:4e:db:52:a8:0b:a8:4d:2a:a1:9f:d2:e0:
                    28:f0:d5:9d:a5:86:8f:ad:e1:35:e2:b3:c2:aa:06:
                    4c:c1:44:95:c6:c9:ef:a3:9a:05:2b:a2:2c:81:75:
                    c2:9d:b7:03:2b:75:d8:0a:c3:2e:9b:e6:27:0b:b2:
                    a4:6c:4d:57:54:b8:b2:4c:12:52:f0:3e:21:06:0d:
                    7b:94:96:0c:06:f2:e3:5c:66:b6:6c:0f:9e:cc:51:
                    38:83:da:a0:9a:d3:1f:37:31:8a:76:d4:19:61:36:
                    38:06:b3:f7:e4:24:1c:dd:fe:c2:8f:c8:86:80:b3:
                    5d:77:8d:ce:69:4b:2d:a0:1c:9c:37:90:64:0d:d5:
                    bc:4d:d8:05:02:e2:2e:1d:68:f3:66:53:45:75:08:
                    14:ca:49:c0:5d:37:97:88:d8:4c:9b:13:d3:1a:3a:
                    5d:75:f5:8c:92:f5:13:e1:4f:b8:10:d1:68:78:07:
                    ed:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:BE:FA:DA:35:F7:61:EA:B9:92:E1:EF:7F:89:80:3D:8D:65:28
            X509v3 Authority Key Identifier:
                keyid:9B:70:CB:46:A8:DB:22:49:A2:69:B7:AA:F3:0E:42:9B:DC:9C:8B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/aci/1/9B70CB46A8DB2249A269B7AAF30E429BDC9C8B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c20d4da1d33e186e8219beb09e4ec0a3c7c2df7fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/9B70CB46A8DB2249A269B7AAF30E429BDC9C8B42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b2:4f:16:bb:4c:7b:bd:56:4f:c5:89:53:05:02:1e:43:dc:
         12:3a:09:86:36:ba:8d:a2:00:90:b4:af:84:57:a6:48:c4:7a:
         aa:40:bb:c9:0d:30:9b:a2:44:b5:d1:dd:36:ef:cf:92:9a:e7:
         89:7c:a3:3e:22:62:95:9c:c6:d6:90:5d:8c:20:49:43:f6:e7:
         68:bc:77:9b:92:8d:6e:1a:ec:99:b5:10:da:6d:95:b1:9e:40:
         02:0f:33:ec:21:30:c5:ab:95:45:1c:1c:26:fe:ec:4c:77:e2:
         23:5c:25:0b:fb:f3:2a:e2:46:ec:73:cf:be:95:f8:68:9a:fb:
         24:de:f1:f9:81:38:b1:49:a4:c4:c2:90:67:e4:39:6e:35:b2:
         01:4e:c5:73:3c:3c:37:a7:ad:b9:5d:23:39:d9:72:e5:33:92:
         33:eb:04:27:fb:a9:6a:07:dc:5e:f7:4a:a8:c6:3b:1d:4c:57:
         ac:b3:9e:9e:c3:f5:e8:3f:79:66:df:22:90:e4:ba:49:ea:0e:
         14:98:a1:b2:99:93:75:4f:db:37:bc:da:5a:dd:97:a0:5f:71:
         f8:3f:59:50:5e:00:07:a1:62:0f:5f:1a:d9:20:84:36:02:70:
         5f:c3:0b:76:ed:4f:98:66:4f:2e:63:17:12:84:15:c5:0b:56:
         ec:e4:5f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----