Manifest

$ rpki-client -vvf rsync.rpki.co/rpki/rsync/1/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.mft
File:                     2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.mft (raw, json)
Hash identifier:          6gK6dDzJ0VTiZ9it/TtjjOVUYre47qvz27MbKQViAKg=
Subject key identifier:   C4:CE:58:2B:9E:9C:1E:1D:7F:11:80:3F:58:8A:D3:88:82:4B:B4:93
Authority key identifier: 2B:5A:0F:F6:78:D2:DF:A6:FE:09:2B:57:BF:09:11:8C:6D:0D:81:2A
Certificate issuer:       /CN=2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A
Certificate serial:       04
Authority info access:    rsync://rpki.co/repo/AS945/10/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.cer
Subject info access:      rsync://rsync.rpki.co/rpki/rsync/1/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.mft
Manifest number:          03
Signing time:             Sat 28 Oct 2023 13:07:01 +0000
Manifest this update:     Sat 28 Oct 2023 13:07:01 +0000
Manifest next update:     Sun 27 Oct 2024 13:07:01 +0000
Files and hashes:         1: 2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.crl (hash: 9JdqcH/kht+6/+dEH3Lg1Yd3/XYkVgiETWZRqxrlIvo=)
                          2: AS1012.asa (hash: nTYNWEqwNu/f0/zXTxzMnUHnXd0NOoBlKbBe9Oobcog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A
        Validity
            Not Before: Oct 28 13:07:01 2023 GMT
            Not After : Oct 27 13:07:01 2024 GMT
        Subject: CN=2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:30:01:33:80:d3:3d:e5:f3:a6:9a:78:fb:1a:88:
                    ae:0c:ff:d0:4d:91:70:7c:a2:91:ba:17:5c:1c:fb:
                    6e:56:42:a8:6f:92:2b:5f:13:3e:10:78:49:b5:6e:
                    b6:4a:8a:3d:1b:e9:8d:22:39:a8:45:e1:7f:a0:b4:
                    9c:c4:38:95:65
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Key Identifier:
                C4:CE:58:2B:9E:9C:1E:1D:7F:11:80:3F:58:8A:D3:88:82:4B:B4:93
            X509v3 Authority Key Identifier:
                keyid:2B:5A:0F:F6:78:D2:DF:A6:FE:09:2B:57:BF:09:11:8C:6D:0D:81:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/10/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.cer

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.co/rpki/rsync/1/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.crl

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.co/rpki/rsync/1/2B5A0FF678D2DFA6FE092B57BF09118C6D0D812A.mft

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:4e:e5:44:e8:bb:cd:51:25:dc:ae:8a:68:51:73:98:8b:
         89:74:10:04:28:71:cd:88:e8:05:22:07:f2:b2:56:3c:bd:7c:
         4c:48:53:86:b9:4d:ed:6a:b6:a0:fa:d4:ed:06:8e:fc:5f:14:
         b6:43:b2:c5:4a:7d:bc:ba:25:a9:f9:8b:b9:3d:b5:bd:32:b3:
         51:03:0a:d1:cf:de:2d:41:43:78:12:55:db:27:6d:2d:5f:3b:
         59:b5:28:96:33:4d:ce:c5:26:6a:02:2b:85:f6:0a:7f:dd:66:
         41:7d:6f:d5:e1:85:c9:82:b0:90:5b:3d:b9:c4:8b:f0:2d:66:
         06:be:7b:50:e7:1d:ed:f9:c9:a3:db:b5:8b:74:e1:ca:2b:5d:
         eb:bf:0f:c5:41:80:6b:0e:d7:ff:de:d9:ff:28:ab:c1:aa:99:
         95:22:fd:33:1a:c0:cf:4c:ba:50:d0:4a:ba:78:75:9c:a8:e6:
         de:85:46:dc:4e:fa:99:48:d7:f7:7e:f9:51:2b:30:2b:c8:65:
         cc:1a:eb:c0:14:ef:7e:28:c2:db:19:5d:e2:78:3e:d9:e4:34:
         b2:7e:bc:97:1c:25:23:27:99:b8:fe:db:50:bd:5f:23:23:db:
         84:e8:77:1d:b8:7c:9c:9e:f9:b3:b0:ac:15:1c:ae:5a:81:aa:
         ce:03:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----