Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/50D7FC756FDF45C03A4D2DC3EEA6689DA158EFB1.mft
File:                     50D7FC756FDF45C03A4D2DC3EEA6689DA158EFB1.mft (raw, json)
Hash identifier:          aIrr+TtEh1go1E1qibwvwIkQFruaivZyrxwFmmMUKx0=
Subject key identifier:   D3:89:55:92:E7:E4:72:54:8E:DF:51:F2:31:23:12:70:AA:30:5E:12
Authority key identifier: 50:D7:FC:75:6F:DF:45:C0:3A:4D:2D:C3:EE:A6:68:9D:A1:58:EF:B1
Certificate issuer:       /CN=02d7785dc37761150c64c45c52d3d5bc370c6b083c5c3a2cdf
Certificate serial:       24387F320CF94FB6D552238D22FA1D731C4D9727
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc37761150c64c45c52d3d5bc370c6b083c5c3a2cdf.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/50D7FC756FDF45C03A4D2DC3EEA6689DA158EFB1.mft
Manifest number:          0119
Signing time:             Sun 10 Jul 2022 18:30:00 +0000
Manifest this update:     Sun 10 Jul 2022 18:25:00 +0000
Manifest next update:     Mon 11 Jul 2022 18:30:00 +0000
Files and hashes:         1: 3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer (hash: gspcVAZ35aKtAaOcRx7aRviZgtY0JVq16yUaxajGCA0=)
                          2: 50D7FC756FDF45C03A4D2DC3EEA6689DA158EFB1.crl (hash: PXvFmN7Y/dFLEoZAWQV8uT7aZTDQ1TxNd08tBFCK7G8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:38:7f:32:0c:f9:4f:b6:d5:52:23:8d:22:fa:1d:73:1c:4d:97:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc37761150c64c45c52d3d5bc370c6b083c5c3a2cdf
        Validity
            Not Before: Jul 10 18:25:00 2022 GMT
            Not After : Jul 11 18:30:00 2022 GMT
        Subject: CN=3082010A0282010100D39CABD451CE50C7D1C2B9DFB26E8625836503A8596F15DDE26E2404BC6D181305112D88AE190F49C72A15E70F341F74D712163C17F3B72D0AC04C7103CB66668D10CA72B931AFB28FAA6D3C5FF1FB1BCC9B177CA1C855079FC14FCBE1818A78D8AA4A9570FA35CAF648DB2849E26A62E9EA93F82C07648B6F59900BA64DCA9D853671C7C3512399F987073500084EE98DA26627A40E326FB634AE44EB9E95CCE23D641DADDEC1E5A605943C4653C8D77EFE1253E03BE1B46421C602A8D2319A28FFD45D24EA7AB481839175D6FEFFBDAA17C6B597DC29DDB1ED6674C042C277CFF03760C0F965FA0351F2D65186C243E76F978279A8D6AF01E706317A4334FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:ab:d4:51:ce:50:c7:d1:c2:b9:df:b2:6e:
                    86:25:83:65:03:a8:59:6f:15:dd:e2:6e:24:04:bc:
                    6d:18:13:05:11:2d:88:ae:19:0f:49:c7:2a:15:e7:
                    0f:34:1f:74:d7:12:16:3c:17:f3:b7:2d:0a:c0:4c:
                    71:03:cb:66:66:8d:10:ca:72:b9:31:af:b2:8f:aa:
                    6d:3c:5f:f1:fb:1b:cc:9b:17:7c:a1:c8:55:07:9f:
                    c1:4f:cb:e1:81:8a:78:d8:aa:4a:95:70:fa:35:ca:
                    f6:48:db:28:49:e2:6a:62:e9:ea:93:f8:2c:07:64:
                    8b:6f:59:90:0b:a6:4d:ca:9d:85:36:71:c7:c3:51:
                    23:99:f9:87:07:35:00:08:4e:e9:8d:a2:66:27:a4:
                    0e:32:6f:b6:34:ae:44:eb:9e:95:cc:e2:3d:64:1d:
                    ad:de:c1:e5:a6:05:94:3c:46:53:c8:d7:7e:fe:12:
                    53:e0:3b:e1:b4:64:21:c6:02:a8:d2:31:9a:28:ff:
                    d4:5d:24:ea:7a:b4:81:83:91:75:d6:fe:ff:bd:aa:
                    17:c6:b5:97:dc:29:dd:b1:ed:66:74:c0:42:c2:77:
                    cf:f0:37:60:c0:f9:65:fa:03:51:f2:d6:51:86:c2:
                    43:e7:6f:97:82:79:a8:d6:af:01:e7:06:31:7a:43:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:89:55:92:E7:E4:72:54:8E:DF:51:F2:31:23:12:70:AA:30:5E:12
            X509v3 Authority Key Identifier:
                keyid:50:D7:FC:75:6F:DF:45:C0:3A:4D:2D:C3:EE:A6:68:9D:A1:58:EF:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/50D7FC756FDF45C03A4D2DC3EEA6689DA158EFB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc37761150c64c45c52d3d5bc370c6b083c5c3a2cdf.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/50D7FC756FDF45C03A4D2DC3EEA6689DA158EFB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8a:5e:04:ef:f6:8e:77:c1:c9:9e:c4:2d:92:37:90:b2:59:
         49:7e:2e:d0:68:5c:91:6f:54:6c:0f:f4:8f:69:93:07:32:55:
         09:03:07:3b:55:73:d8:e9:db:82:72:91:fb:e2:ca:f9:03:c1:
         7d:39:1e:6a:c0:5d:c7:39:7e:22:80:9d:7d:2d:57:19:c0:fc:
         94:4e:77:28:bb:84:30:cb:75:5a:70:bf:f5:69:76:3b:cb:6e:
         17:61:e3:3c:b9:26:f9:04:96:7f:2f:e7:ab:36:a6:ac:ce:ba:
         07:ef:8e:0d:e7:ed:98:5e:f5:36:23:f6:95:75:76:3e:da:c6:
         7b:0b:b0:33:34:a2:90:46:6c:c1:05:44:c6:dd:23:35:0b:83:
         4b:73:21:85:55:4d:89:ee:36:0b:58:0a:1d:99:0b:bd:a1:42:
         0c:ef:18:99:68:cf:7e:1a:10:25:71:65:fa:78:45:c6:66:fb:
         ec:b8:20:c2:01:8c:e4:5b:99:93:e8:f6:1d:67:28:50:86:fe:
         09:a7:bc:b8:64:b0:13:c6:77:2d:f2:9d:0a:89:1f:18:d6:07:
         50:5f:93:ee:24:f2:d6:a6:c0:ee:89:bd:2a:b9:1d:25:11:b6:
         11:99:b8:d8:35:87:72:15:50:f6:c2:4a:0b:25:1b:11:7e:12:
         44:29:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----