Manifest

$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.mft
File:                     D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.mft (raw, json)
Hash identifier:          K2wHb3wcNPrPAmr/2pvmxicyzIEVkOAS9u9ddZxBb3I=
Subject key identifier:   00:01:82:9A:61:8F:5E:B0:E8:6C:73:10:EE:12:EB:92:0B:71:AC:E3
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Certificate issuer:       /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial:       088C2C61F881A318B2E7938A6C2D7A3582C79DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.mft
Manifest number:          0361
Signing time:             Wed 02 Feb 2022 11:00:00 +0000
Manifest this update:     Wed 02 Feb 2022 10:55:00 +0000
Manifest next update:     Thu 03 Feb 2022 11:00:00 +0000
Files and hashes:         1: 3139332e32392e3235312e302f32342d3234203d3e203631333137.roa (hash: YzX6mxn361nL0lqL4ijLLCjBjBVmScbEczWu04eCpfE=)
                          2: 3139332e32392e34322e302f32342d3234203d3e20323039353236.roa (hash: tpM/osKx9AURidbWnd/K3xh5k5I23EUxiOiRIQF2FSY=)
                          3: 3139332e32392e34322e302f32342d3234203d3e203631333137.roa (hash: 82J8XrUEiwJvVPg2iWW1VRnQx2hE2JrCG5nd9MPbTkc=)
                          4: 3139332e32392e3235312e302f32342d3234203d3e20323030303139.roa (hash: +zso4UhoaevuDGbBSbeVa5AU8erYNa71y32aC0Se61E=)
                          5: 3139332e32392e3138392e302f32342d3234203d3e203333363936.roa (hash: EgxQkxpZPPRO4eXTi4JwSXl0C5YGUlVwMbeRyVzel7E=)
                          6: D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl (hash: 0OC/hoobiThzg1B6Ug5bfJV0Cpbrkf+FZODdtXvDHLM=)
                          7: 3139332e32392e3138392e302f32342d3234203d3e203631333137.roa (hash: 684h+rAxrV5H/0VcR1/U23OKQ2J5jH1fNw4Z4IQM16E=)
                          8: 3139332e32392e3137372e302f32342d3234203d3e203631333137.roa (hash: kfkoDWMYcdH6JZY6CtImTq5HfWRsjrPnY0p3l6R5vjo=)
                          9: 3139332e32392e3137372e302f32342d3234203d3e20323039353236.roa (hash: dziJ7In/FvHxIwM+qcK0S+VSytftsT9xusMHoBjqQ9w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8c:2c:61:f8:81:a3:18:b2:e7:93:8a:6c:2d:7a:35:82:c7:9d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Validity
            Not Before: Feb  2 10:55:00 2022 GMT
            Not After : Feb  9 11:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:70:db:7e:c6:b8:c0:56:11:ce:ba:99:70:
                    27:8c:ef:7b:e8:43:63:18:83:1e:f1:c3:d3:8c:49:
                    27:b8:46:ec:ff:4f:41:a4:61:0c:50:e0:54:14:da:
                    59:19:b9:58:15:be:f1:a9:4e:56:e5:2e:fa:e4:4f:
                    d2:9c:73:67:fc:c6:50:94:e1:c1:63:8a:a2:65:87:
                    b7:3d:08:72:8c:af:9a:e0:a5:82:c1:02:51:ba:a7:
                    ab:87:9c:44:f8:df:28:fe:64:d0:d0:29:6a:2b:bc:
                    7c:ac:1f:c6:9f:6e:89:aa:e7:10:4c:31:c4:39:d1:
                    e2:bd:42:f7:76:2f:05:80:c0:73:ba:e6:8a:30:8c:
                    f5:d6:19:cd:3c:89:85:42:42:82:7f:2a:a8:ef:eb:
                    37:7a:8a:7f:24:ef:7c:2f:36:e8:92:43:01:60:eb:
                    76:b3:2c:0b:1f:32:86:46:4c:72:bd:36:63:02:b8:
                    f7:54:22:04:f6:bd:53:7b:a8:f8:c8:36:4c:7b:be:
                    b4:1a:16:24:10:51:9f:81:21:d4:2d:9f:3f:aa:a3:
                    3a:3d:78:5b:38:59:11:e3:eb:87:7c:f9:ee:ea:58:
                    f0:39:c1:fa:99:90:11:1d:b5:fa:07:a8:7a:61:1d:
                    ed:23:74:47:5f:3f:ac:aa:85:83:2a:8a:31:b1:42:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:82:9A:61:8F:5E:B0:E8:6C:73:10:EE:12:EB:92:0B:71:AC:E3
            X509v3 Authority Key Identifier:
                keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:61:44:5f:80:68:2b:a5:41:de:34:b2:b3:ec:33:c4:fc:76:
         df:27:50:41:16:4e:6d:ec:17:3d:7b:fc:b7:9c:8b:40:57:d1:
         15:cf:21:f4:81:19:5f:36:2a:87:d4:93:3e:1e:fb:29:f2:11:
         30:96:63:35:cb:45:c6:44:94:aa:c6:bf:5e:8b:d8:dc:ba:83:
         8f:bf:43:e1:91:c6:95:a4:38:51:f0:f1:c7:4a:d3:be:9c:04:
         77:3a:19:85:30:88:03:d3:5d:4b:7b:a5:77:d8:cc:ef:73:81:
         1b:e6:b3:36:c7:3a:1d:ee:a3:65:ef:50:f1:6a:4d:f3:85:89:
         4b:44:d8:45:0a:a1:ea:9c:3e:a2:42:a0:0e:b6:48:1f:33:94:
         8b:52:8b:6b:7a:b1:5f:47:73:1e:c9:32:22:08:f1:2b:3e:0e:
         6e:f9:ee:f4:66:6a:8f:75:7b:45:05:0d:5d:15:4f:9f:bb:3b:
         29:8a:84:fb:e2:45:22:44:e6:fe:3d:f9:10:32:40:46:86:94:
         ff:b6:75:92:d5:d8:e7:fb:8b:93:37:58:bb:92:29:c7:59:31:
         a6:d9:51:36:e9:5c:fd:94:a5:5e:e9:09:25:d9:66:8a:a8:47:
         77:3b:0b:bd:55:60:fa:15:6b:c4:13:7a:be:15:bb:e1:bb:83:
         2d:83:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----