Manifest

$ rpki-client -vvf nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.mft
File:                     D432CE1D7A6097498E450960CB8E2EB38F2813D3.mft (raw, json)
Hash identifier:          +j/zd35zoyqv3V8nL4dzrkgRvp8yB2R+Yf2CsZIdjj0=
Subject key identifier:   50:A3:67:0A:49:92:A6:53:71:4E:03:86:1E:E8:48:7A:6C:E2:10:5F
Authority key identifier: D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3
Certificate issuer:       /CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
Certificate serial:       758EC69DC2C7972CB2296FE059A1E2E027D377D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.mft
Manifest number:          0396
Signing time:             Wed 02 Feb 2022 10:00:00 +0000
Manifest this update:     Wed 02 Feb 2022 09:55:00 +0000
Manifest next update:     Thu 03 Feb 2022 10:00:00 +0000
Files and hashes:         1: D432CE1D7A6097498E450960CB8E2EB38F2813D3.crl (hash: id4a2CuZsMBuwFb3sB/Ogif8S/VkfwYuSzWkLZ0fTlk=)
                          2: 3139322e3130392e3131302e302f32342d3234203d3e203631333137.roa (hash: PJEZMkj9Y3OMAwbLrv8duJPLiYveya9JYbB4FuabTkY=)
                          3: 3139322e3130392e3131372e302f32342d3234203d3e203631333137.roa (hash: Cy1lEfvMzwdVYYlo2uHNY5dPIz3KnS3GRhp+SdoQWFE=)
                          4: 3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa (hash: ya+PlZbj74ZKLvTNBgI9wi25SGDuCKDDYvGC8pPO9E8=)
                          5: 3139322e3130392e3130392e302f32342d3234203d3e203631333137.roa (hash: k7CMXTC6qdLTq523VD/HCIYr6K/M2ZRLcbDYyPyBEnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8e:c6:9d:c2:c7:97:2c:b2:29:6f:e0:59:a1:e2:e0:27:d3:77:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
        Validity
            Not Before: Feb  2 09:55:00 2022 GMT
            Not After : Feb  9 10:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:03:f3:8a:40:b0:dd:86:15:d5:25:70:c2:
                    8e:d5:84:9f:5c:b8:c4:5d:35:1f:dd:ad:27:6b:73:
                    c0:1b:3c:7b:cc:4c:bc:71:63:19:f3:30:e6:c2:29:
                    b9:57:f2:fc:ed:07:f7:6b:87:2d:58:a5:a0:f6:10:
                    2e:a9:93:a8:2e:97:c3:27:6c:54:80:e9:6f:c5:c7:
                    93:42:2d:1a:fe:4a:b5:2d:b2:1b:b4:4e:a4:4d:6f:
                    34:77:6b:c3:20:17:68:ed:62:2c:14:e6:0e:61:8f:
                    73:52:ca:23:bf:c6:07:e4:54:e3:4a:f9:8c:38:30:
                    bb:ba:4a:df:e0:ee:60:9b:71:02:eb:be:59:f5:77:
                    97:6b:5c:b6:53:63:bf:ee:4a:b8:26:18:40:ce:63:
                    cb:26:b2:b6:ac:63:07:af:f2:21:0e:7c:9b:c0:d9:
                    c7:97:21:de:97:42:56:ac:c0:cf:7f:85:11:60:94:
                    b8:f7:14:69:86:2f:30:27:49:90:e2:87:e7:5e:3e:
                    79:7d:4b:f7:8e:a3:3a:89:65:66:8a:f5:c9:b3:a0:
                    35:6d:90:b1:85:35:1c:1a:85:6f:97:29:00:31:a2:
                    09:fa:98:dd:d4:dd:4a:c5:ec:02:8b:49:ab:2d:6d:
                    15:de:b9:da:f1:45:36:39:1c:23:9c:50:8a:d5:0e:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A3:67:0A:49:92:A6:53:71:4E:03:86:1E:E8:48:7A:6C:E2:10:5F
            X509v3 Authority Key Identifier:
                keyid:D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:13:7a:50:0e:46:1c:7a:9c:93:d4:97:65:bc:af:e7:9b:b1:
         a4:fd:46:10:6d:78:71:7a:92:0d:78:fa:88:e0:d9:b6:07:8d:
         4d:a9:2f:72:8c:e2:44:d2:53:47:69:2c:36:87:b9:91:47:18:
         99:f7:c7:a2:96:69:62:87:c2:45:b2:cf:a8:c5:61:d2:ff:7a:
         cc:04:b7:fb:fb:56:01:7d:46:9a:dd:2b:ef:29:95:3b:d8:ec:
         37:3a:fe:31:14:95:82:c2:f9:1d:66:ef:51:1c:65:5f:2c:70:
         a4:62:cd:00:a7:be:31:53:6b:06:a4:26:f2:b7:e5:cc:23:1a:
         cc:54:2d:70:a9:c0:56:02:da:12:c5:ea:c8:79:71:34:50:5d:
         bc:6f:0c:ba:fe:e9:05:4b:be:fe:85:50:33:06:4a:74:cd:8f:
         39:0a:7f:9d:4e:13:b1:6b:4a:e5:9a:71:f0:dd:23:37:f8:71:
         bd:8c:e1:ac:70:20:f1:f6:27:2a:22:ee:ee:78:4b:00:89:7d:
         06:92:ae:35:7c:29:be:d6:d4:40:a3:a7:cb:c5:e3:22:7e:51:
         fc:f5:57:ee:38:8f:41:d6:f2:53:74:88:6f:6f:25:26:59:ab:
         f4:e2:ad:67:dd:ca:30:53:19:91:42:7a:99:cf:c8:c8:e5:31:
         e4:9e:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----