Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/D21683961BC9BEA51CB0A67069E2BAA2E49F5FF9.mft
File:                     D21683961BC9BEA51CB0A67069E2BAA2E49F5FF9.mft (raw, json)
Hash identifier:          CZBZU+DkNOeDh04iynTjookMuxSXzg/iiCHj4qZDinU=
Subject key identifier:   67:8E:8D:0D:2F:AF:A9:5C:AC:58:67:8A:8F:83:A4:8D:DD:C6:4E:0B
Authority key identifier: D2:16:83:96:1B:C9:BE:A5:1C:B0:A6:70:69:E2:BA:A2:E4:9F:5F:F9
Certificate issuer:       /CN=d21683961bc9bea51cb0a67069e2baa2e49f5ff9
Certificate serial:       14B712EBA09F5C19388069DC7F9B3562F0360ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0haDlhvJvqUcsKZwaeK6ouSfX_k.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/D21683961BC9BEA51CB0A67069E2BAA2E49F5FF9.mft
Manifest number:          019D
Signing time:             Mon 13 Jun 2022 14:50:00 +0000
Manifest this update:     Mon 13 Jun 2022 14:45:00 +0000
Manifest next update:     Tue 14 Jun 2022 14:50:00 +0000
Files and hashes:         1: B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer (hash: OD6P6O7eS4tKMFEFhpwWkqpaJlOLBbdLKXN27/cNdE0=)
                          2: D21683961BC9BEA51CB0A67069E2BAA2E49F5FF9.crl (hash: PJ3MRWplf0oD/jof5j/P+2kWTov2ft8vs/wSfNEKNiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b7:12:eb:a0:9f:5c:19:38:80:69:dc:7f:9b:35:62:f0:36:0e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21683961bc9bea51cb0a67069e2baa2e49f5ff9
        Validity
            Not Before: Jun 13 14:45:00 2022 GMT
            Not After : Jun 14 14:50:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:21:b9:c7:2c:f7:36:31:0c:4f:e7:55:de:
                    66:dd:07:8d:99:5e:e2:45:e2:82:1b:67:92:e9:31:
                    a6:f1:89:b1:91:a6:07:da:26:c5:67:58:49:8b:81:
                    80:76:fe:1b:50:b3:b2:84:aa:4c:4c:97:1b:fc:a7:
                    cb:5b:e1:6b:44:9e:64:65:e7:82:4e:4d:5a:34:85:
                    df:01:97:c3:96:c8:bd:46:b3:c0:ce:7a:8c:cf:7b:
                    3b:88:5c:20:5d:df:24:16:2c:fc:3d:2d:5f:9f:6d:
                    62:14:f2:09:43:98:19:27:42:40:26:9b:35:4b:84:
                    57:60:9b:a7:17:50:bb:70:4a:1c:14:68:a3:92:e9:
                    c0:79:3f:af:84:4d:72:3c:36:a7:11:1a:6b:2a:b4:
                    74:28:44:44:3e:91:aa:56:67:ea:8a:b6:0a:c3:b9:
                    27:95:5f:c7:6e:57:df:ac:15:07:24:96:df:39:ac:
                    ef:15:3c:8f:32:29:93:ed:2d:f9:57:5e:6d:a1:5c:
                    f5:2d:09:32:26:e0:e3:c5:fa:71:80:69:8c:de:d6:
                    8c:f9:86:47:6d:74:16:dd:6d:07:3b:95:80:bf:24:
                    65:ae:01:60:02:7a:f1:25:42:74:9b:54:36:79:ed:
                    f2:d4:7c:03:79:f4:d0:1d:bc:ee:47:d9:90:7d:c8:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8E:8D:0D:2F:AF:A9:5C:AC:58:67:8A:8F:83:A4:8D:DD:C6:4E:0B
            X509v3 Authority Key Identifier:
                keyid:D2:16:83:96:1B:C9:BE:A5:1C:B0:A6:70:69:E2:BA:A2:E4:9F:5F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/D21683961BC9BEA51CB0A67069E2BAA2E49F5FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haDlhvJvqUcsKZwaeK6ouSfX_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/D21683961BC9BEA51CB0A67069E2BAA2E49F5FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:35:4d:ae:b2:0a:3d:14:10:8b:79:06:d6:ec:5d:33:f1:d3:
         be:b3:0a:88:9b:be:43:cc:52:51:f3:6b:3f:48:9a:b6:7d:d6:
         74:28:f2:1b:03:48:e9:2c:0b:bc:ea:bf:c6:f8:f2:3a:63:d6:
         6c:de:69:eb:b3:f9:9b:42:70:6a:1c:9b:62:e0:ec:01:c7:75:
         66:28:84:da:64:25:8e:e1:10:57:31:29:e5:3e:2a:b8:c8:22:
         2a:f5:70:95:26:ec:46:f8:b3:db:f6:52:fe:88:8b:1a:8e:e5:
         df:b5:16:12:3d:7b:54:0a:e3:72:0b:de:a0:85:f5:d5:31:29:
         43:04:6b:71:5d:74:b9:60:94:3c:63:f3:71:cb:97:20:8d:0d:
         ed:42:db:6f:ec:e0:4b:55:be:6d:1a:6c:71:67:a9:c8:58:c7:
         bf:44:11:21:0e:ab:89:58:8a:5d:03:0f:ba:d0:58:72:61:e9:
         80:79:ac:95:1a:ba:70:0d:2f:13:b5:60:f1:d4:86:1f:d7:46:
         65:ce:30:cc:43:68:26:92:71:a9:e3:1a:0f:fe:fc:18:d6:c8:
         44:0a:f6:76:4a:06:af:9f:b1:b1:5e:a4:8d:22:2d:92:8d:0d:
         62:db:1d:c1:9a:00:2a:91:ba:52:4e:af:0e:7e:45:76:6e:ed:
         25:37:d7:4c
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUFLcS66CfXBk4gGncf5s1YvA2DsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDIxNjgzOTYxYmM5YmVhNTFjYjBhNjcwNjllMmJhYTJl
NDlmNWZmOTAeFw0yMjA2MTMxNDQ1MDBaFw0yMjA2MTQxNDUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzMyMzIxQjlDNzJDRjczNjMx
MEM0RkU3NTVERTY2REQwNzhEOTk1RUUyNDVFMjgyMUI2NzkyRTkzMUE2RjE4OUIx
OTFBNjA3REEyNkM1Njc1ODQ5OEI4MTgwNzZGRTFCNTBCM0IyODRBQTRDNEM5NzFC
RkNBN0NCNUJFMTZCNDQ5RTY0NjVFNzgyNEU0RDVBMzQ4NURGMDE5N0MzOTZDOEJE
NDZCM0MwQ0U3QThDQ0Y3QjNCODg1QzIwNURERjI0MTYyQ0ZDM0QyRDVGOUY2RDYy
MTRGMjA5NDM5ODE5Mjc0MjQwMjY5QjM1NEI4NDU3NjA5QkE3MTc1MEJCNzA0QTFD
MTQ2OEEzOTJFOUMwNzkzRkFGODQ0RDcyM0MzNkE3MTExQTZCMkFCNDc0Mjg0NDQ0
M0U5MUFBNTY2N0VBOEFCNjBBQzNCOTI3OTU1RkM3NkU1N0RGQUMxNTA3MjQ5NkRG
MzlBQ0VGMTUzQzhGMzIyOTkzRUQyREY5NTc1RTZEQTE1Q0Y1MkQwOTMyMjZFMEUz
QzVGQTcxODA2OThDREVENjhDRjk4NjQ3NkQ3NDE2REQ2RDA3M0I5NTgwQkYyNDY1
QUUwMTYwMDI3QUYxMjU0Mjc0OUI1NDM2NzlFREYyRDQ3QzAzNzlGNEQwMURCQ0VF
NDdEOTkwN0RDODc5RTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwyMhuccs9zYxDE/nVd5m3QeNmV7iReKCG2eS6TGm8YmxkaYH2ibF
Z1hJi4GAdv4bULOyhKpMTJcb/KfLW+FrRJ5kZeeCTk1aNIXfAZfDlsi9RrPAznqM
z3s7iFwgXd8kFiz8PS1fn21iFPIJQ5gZJ0JAJps1S4RXYJunF1C7cEocFGijkunA
eT+vhE1yPDanERprKrR0KEREPpGqVmfqirYKw7knlV/HblffrBUHJJbfOazvFTyP
MimT7S35V15toVz1LQkyJuDjxfpxgGmM3taM+YZHbXQW3W0HO5WAvyRlrgFgAnrx
JUJ0m1Q2ee3y1HwDefTQHbzuR9mQfch54QIDAQABo4ICMTCCAi0wHQYDVR0OBBYE
FGeOjQ0vr6lcrFhnio+DpI3dxk4LMB8GA1UdIwQYMBaAFNIWg5Ybyb6lHLCmcGni
uqLkn1/5MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS01LzAvRDIxNjgzOTYxQkM5QkVBNTFDQjBBNjcwNjlF
MkJBQTJFNDlGNUZGOS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBoYURsaHZK
dnFVY3NLWndhZUs2b3VTZlhfay5jZXIwgZUGCCsGAQUFBwELBIGIMIGFMIGCBggr
BgEFBQcwC4Z2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2
NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9EMjE2ODM5NjFCQzlC
RUE1MUNCMEE2NzA2OUUyQkFBMkU0OUY1RkY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTVNrrIKPRQQ
i3kG1uxdM/HTvrMKiJu+Q8xSUfNrP0iatn3WdCjyGwNI6SwLvOq/xvjyOmPWbN5p
67P5m0JwahybYuDsAcd1ZiiE2mQljuEQVzEp5T4quMgiKvVwlSbsRviz2/ZS/oiL
Go7l37UWEj17VArjcgveoIX11TEpQwRrcV10uWCUPGPzccuXII0N7ULbb+zgS1W+
bRpscWepyFjHv0QRIQ6riViKXQMPutBYcmHpgHmslRq6cA0vE7Vg8dSGH9dGZc4w
zENoJpJxqeMaD/78GNbIRAr2dkoGr5+xsV6kjSItko0NYtsdwZoAKpG6Uk6vDn5F
dm7tJTfXTA==
-----END CERTIFICATE-----