Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.mft
File:                     2C7A75FC351BFD249E61CB99ACA4A2F63F706333.mft (raw, json)
Hash identifier:          KfelDAoM9Trygc2MPVM7IYgdCPvcF11ym8bf4XMrBIg=
Subject key identifier:   2C:B0:44:E8:6C:01:A7:B6:0B:CE:D2:EC:AE:54:89:B5:66:E1:03:5A
Authority key identifier: 2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
Certificate issuer:       /CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
Certificate serial:       2C6815C91315B7DABA2D634A364195F9829EB988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.mft
Manifest number:          B9
Signing time:             Sun 05 Mar 2023 22:34:40 +0000
Manifest this update:     Sun 05 Mar 2023 22:29:40 +0000
Manifest next update:     Tue 07 Mar 2023 02:18:40 +0000
Files and hashes:         1: 39312e3232382e3136382e302f32342d3234203d3e20393834.roa (hash: ojY1lqPsj6YwCgGV2P4Oxk9j/8h9BGow5RtdZahh73s=)
                          2: 34352e3135362e3131392e302f32342d3234203d3e20323039323630.roa (hash: hbpaoKVDG6ug6vP94TFZB6BGZsWNr7lUPHXHgMogTXM=)
                          3: 34352e3135362e3131382e302f32342d3234203d3e203631333137.roa (hash: ha/GKqVNy/FGb8GFncyzn62Q7lzq/g6OR/v7tW4M9B4=)
                          4: 34352e3135362e3131362e302f32342d3234203d3e203539343332.roa (hash: 1mEgG1l95TwHurKc6/Bfhc3m99HR67mtIkE+AT8Yk4I=)
                          5: 2C7A75FC351BFD249E61CB99ACA4A2F63F706333.crl (hash: BIHHJwmPeAoRiKCWq/QSPIGK5ovP9U/HhpTL57ZSlbM=)
                          6: 34352e3135362e3131372e302f32342d3234203d3e203631333137.roa (hash: 7j4XTHWhhRhGSOItMbOOnrvSS7qyik6cgcdl17xH3VE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:68:15:c9:13:15:b7:da:ba:2d:63:4a:36:41:95:f9:82:9e:b9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
        Validity
            Not Before: Mar  5 22:29:40 2023 GMT
            Not After : Mar  7 02:18:40 2023 GMT
        Subject: CN=2CB044E86C01A7B60BCED2ECAE5489B566E1035A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:60:45:9d:36:38:fa:81:af:ac:47:05:b3:
                    7a:8a:b4:c3:a7:6b:b4:1f:62:46:dd:c1:1d:50:6d:
                    ab:e6:0a:ad:d7:db:d7:95:6a:25:7e:cc:78:a4:ea:
                    81:c7:95:9e:45:9f:ec:07:33:bf:fd:a8:7c:28:26:
                    a9:cd:4e:b2:57:73:01:d8:ab:ae:18:3e:e3:d9:38:
                    be:e2:6b:68:1b:73:42:9c:cc:0e:73:c0:51:53:bf:
                    d2:37:02:4e:54:fd:a0:5c:92:17:6c:49:09:3a:1a:
                    3e:31:f2:b9:f7:f1:24:7f:67:69:3a:94:e3:1a:7b:
                    4d:74:0b:be:44:54:c7:8e:13:08:a9:6a:25:51:67:
                    15:3e:86:75:0e:50:d7:3d:4a:4f:e9:3a:29:88:99:
                    e6:86:a0:cd:33:1e:d3:f2:cf:a6:f6:e3:ba:7f:cc:
                    23:ce:3d:41:66:3d:5f:3e:fd:db:70:03:3a:cd:47:
                    e1:85:d2:a5:c4:c5:21:6c:a5:ec:82:5d:e4:ed:a9:
                    31:dc:c3:18:c8:3e:b5:43:71:ec:7a:d2:1e:1c:dd:
                    88:99:b4:86:3f:3f:dd:f3:e2:7e:5c:18:09:9b:d5:
                    28:e5:8a:fb:b7:10:a5:cb:36:09:45:95:fa:f7:87:
                    18:45:ad:1b:00:a3:d4:2e:1b:1d:04:71:f8:1d:bd:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B0:44:E8:6C:01:A7:B6:0B:CE:D2:EC:AE:54:89:B5:66:E1:03:5A
            X509v3 Authority Key Identifier:
                keyid:2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:56:59:00:76:9b:d2:fb:e3:e9:63:98:59:cb:d9:e1:83:
         80:6f:ef:8f:0b:a2:80:d8:03:f2:05:99:e4:3f:f4:a5:4e:96:
         e3:c1:d2:d7:3d:a9:64:f6:97:ea:ec:a1:6c:a0:c1:bd:ab:30:
         0a:2d:e6:08:06:2f:46:a9:3b:03:10:82:63:86:5f:f4:72:6d:
         36:c3:26:f3:17:8a:c5:94:2d:f5:b4:dd:98:a1:2a:11:cf:06:
         27:a9:7d:51:81:bb:c9:0f:a3:e3:29:a0:cb:5a:b4:26:9f:3c:
         11:2f:14:85:22:01:7c:ec:ef:cd:7b:8c:4f:f3:e6:f2:ab:28:
         bd:b1:fb:b8:3e:01:d0:cb:27:4b:c0:63:40:72:f7:a0:00:b2:
         b0:44:38:1c:f1:b8:75:98:87:0d:26:ab:74:77:81:85:23:e9:
         86:c7:4f:32:fa:c3:c0:02:02:f5:c2:21:74:b4:66:92:bf:92:
         e1:2a:e2:10:aa:c5:64:cb:ab:25:af:15:dc:90:44:2d:69:1e:
         d1:1c:dc:17:e1:69:44:79:d3:97:1f:60:37:88:b7:03:bf:a4:
         56:5d:4c:dc:5a:99:ac:b6:4d:1a:04:6b:fd:18:e1:0d:fb:bd:
         be:85:32:d1:5d:0c:f3:06:4a:31:04:78:81:44:49:de:9f:df:
         c0:d2:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----