Manifest

$ rpki-client -vvf rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.mft
File:                     3BA983EEBB46F21543D09A39DFFF49E89EE92912.mft (raw, json)
Hash identifier:          E/4UfiC3ZuWs7M0VWaqVI8v47gst654+TkfGoy9iqpg=
Subject key identifier:   EC:FE:8F:79:71:87:15:7F:93:AE:6E:45:D5:37:33:C7:21:9C:09:71
Authority key identifier: 3B:A9:83:EE:BB:46:F2:15:43:D0:9A:39:DF:FF:49:E8:9E:E9:29:12
Certificate issuer:       /CN=3ba983eebb46f21543d09a39dfff49e89ee92912
Certificate serial:       5CD894B83655420E278103FEE45F22EF2502644D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6mD7rtG8hVD0Jo53_9J6J7pKRI.cer
Subject info access:      rsync://rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.mft
Manifest number:          D6
Signing time:             Sat 07 Oct 2023 06:14:12 +0000
Manifest this update:     Sat 07 Oct 2023 06:09:12 +0000
Manifest next update:     Sun 08 Oct 2023 07:15:12 +0000
Files and hashes:         1: 3BA983EEBB46F21543D09A39DFFF49E89EE92912.crl (hash: d+uINPMPUN5f0lJ/oTipyC+B8ZyltGK0OL2fuqBb9j4=)
                          2: AS212252.asa (hash: Sqo5jyFEWZusm+twsg0VICxmfsm8TfOiBGZ3X++mziY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d8:94:b8:36:55:42:0e:27:81:03:fe:e4:5f:22:ef:25:02:64:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba983eebb46f21543d09a39dfff49e89ee92912
        Validity
            Not Before: Oct  7 06:09:12 2023 GMT
            Not After : Oct  8 07:15:12 2023 GMT
        Subject: CN=ECFE8F797187157F93AE6E45D53733C7219C0971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:d5:e4:74:6b:e1:2e:1b:61:af:c6:06:4b:
                    9b:1b:73:d8:34:bf:a7:c2:9a:bf:48:25:71:c7:31:
                    84:62:cf:84:1b:41:50:b8:67:13:dd:7b:b0:5b:4d:
                    29:52:49:8f:ab:e8:47:ee:7f:9c:28:bd:87:40:6e:
                    3f:bc:31:46:41:b8:09:95:e2:89:49:9a:32:67:b9:
                    0b:1e:cd:76:bf:1f:b5:2d:b0:22:e1:45:fd:e4:d9:
                    da:3f:6c:b1:7c:86:5d:06:b6:fd:ff:2e:5a:c4:56:
                    1a:4a:46:71:f2:f4:f5:ca:4b:d9:86:c3:d6:5f:2b:
                    c9:f4:16:da:11:04:e5:28:f8:a0:48:b5:da:db:66:
                    8a:0d:f4:29:b7:3b:10:60:d5:cd:5c:a1:91:4b:87:
                    d9:63:57:91:5e:26:c0:09:16:4b:aa:70:50:c6:03:
                    13:4a:53:64:b8:1e:88:ac:7f:1d:93:a5:d9:01:1a:
                    9c:d0:9d:a8:d8:6a:b4:d0:cb:72:4c:d9:fa:96:ae:
                    06:5e:17:2b:87:a0:60:74:87:01:b3:79:46:27:46:
                    6e:31:27:4a:7d:27:4d:db:fb:95:0e:91:1b:0c:dd:
                    d2:27:22:01:78:2d:b1:78:a1:d3:6c:ac:1e:b6:f0:
                    7a:9d:23:dd:6a:31:20:48:35:94:c0:da:3d:22:69:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FE:8F:79:71:87:15:7F:93:AE:6E:45:D5:37:33:C7:21:9C:09:71
            X509v3 Authority Key Identifier:
                keyid:3B:A9:83:EE:BB:46:F2:15:43:D0:9A:39:DF:FF:49:E8:9E:E9:29:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6mD7rtG8hVD0Jo53_9J6J7pKRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:8b:d5:b9:29:37:a4:9f:cc:08:5b:ee:29:3a:8a:e2:07:
         cf:d2:38:32:33:71:9b:d7:d5:8e:b8:c0:54:54:64:91:e6:70:
         c6:f3:5d:95:ea:e5:bb:5a:a0:f4:5e:d7:4e:e8:58:c0:a0:c0:
         2f:be:38:72:d9:31:49:2e:56:d1:fc:7d:78:7e:e6:16:78:45:
         52:be:39:2a:cf:1c:a1:54:a5:48:84:5c:34:b5:00:fe:da:ba:
         61:a3:d1:6f:7a:26:92:80:fd:37:71:11:75:55:ff:14:28:44:
         d1:6e:67:47:55:11:9a:07:b5:61:41:18:ab:15:de:44:ed:86:
         52:ac:41:ad:65:36:ea:58:77:84:67:3c:b4:6a:27:c3:74:5a:
         81:a1:ae:37:76:c5:49:0a:20:1f:29:25:28:00:86:db:3f:ac:
         57:e4:39:dd:b1:10:25:2a:ba:71:21:d0:30:98:6f:fb:30:1c:
         7d:41:b6:17:19:54:b5:a3:d3:1b:e3:72:f6:e1:90:09:cb:b3:
         4b:45:0d:25:dc:9f:74:8e:3f:7a:f6:8a:6d:82:7f:61:8b:48:
         6c:62:75:84:c5:bc:ce:0b:60:50:29:60:a1:24:32:aa:5d:9e:
         f7:58:ee:6f:c2:ae:dd:38:53:ec:fe:8f:25:ea:b6:4d:db:69:
         6d:8d:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----