Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/0B571D046EE5DDB45973505832427E4002C57BBD.mft
File:                     0B571D046EE5DDB45973505832427E4002C57BBD.mft (raw, json)
Hash identifier:          7SFLGcJ1N6Wv82pKoFZX0MtNNQnXvOMbghQYXGkwe8w=
Subject key identifier:   5E:F7:E6:94:0E:57:C2:F8:66:C2:27:A6:B2:E9:B5:1C:AF:C8:FA:27
Authority key identifier: 0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD
Certificate issuer:       /CN=0B571D046EE5DDB45973505832427E4002C57BBD
Certificate serial:       1D1E3844F78B8027A151DA4A0BAAEFFF09BCBA08
Authority info access:    rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/0B571D046EE5DDB45973505832427E4002C57BBD.mft
Manifest number:          21
Signing time:             Tue 07 Jun 2022 15:10:00 +0000
Manifest this update:     Tue 07 Jun 2022 15:05:00 +0000
Manifest next update:     Wed 08 Jun 2022 15:10:00 +0000
Files and hashes:         1: 3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa (hash: RbVVbE6JoCskA2AWEjZJclIeRYSrO1Kaheo6oZcgFW0=)
                          2: 323430353a393234303a3a2f34382d3438203d3e203631333137.roa (hash: oK6LmDcSyK2LeuAJPa8tAPv9ETaSmQGmE6wGjLUXLUQ=)
                          3: 3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa (hash: FSEnxwyY4PmGJEu2KMZdEPAWdOsE7Si28G5LY6qqRYQ=)
                          4: 0B571D046EE5DDB45973505832427E4002C57BBD.crl (hash: yJ+lwS+C1R/437WDURfUTNUxDHhvOulPRuJrT0Wq/KE=)
                          5: 323430353a393234303a3a2f33322d3332203d3e203631333137.roa (hash: C+JHV8l6HYqrt07dWzylz/76WlkdNNzbE9T8a+jaYPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1e:38:44:f7:8b:80:27:a1:51:da:4a:0b:aa:ef:ff:09:bc:ba:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B571D046EE5DDB45973505832427E4002C57BBD
        Validity
            Not Before: Jun  7 15:05:00 2022 GMT
            Not After : Jun  8 15:10:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:9a:26:70:78:ed:bd:77:6c:01:65:ed:3a:
                    f7:94:83:b2:2b:47:00:0e:d9:02:22:20:07:25:2c:
                    7b:2c:c0:7c:62:aa:8c:c8:03:dc:17:5b:c4:27:eb:
                    e2:30:9d:e9:2f:3b:df:9c:37:23:df:36:c8:ff:37:
                    52:49:d6:b3:c3:4e:75:79:cc:70:db:29:0f:62:28:
                    2b:2a:6b:ad:f8:58:7b:ad:4d:0c:ac:a0:35:46:3c:
                    0f:05:cd:13:80:c8:7b:38:45:28:c0:86:23:c3:95:
                    b2:08:e8:1f:df:0d:b8:f0:ee:c6:51:79:b8:b3:b2:
                    51:d0:0b:a2:fc:e4:04:7d:d0:a3:5d:f5:ab:06:36:
                    34:9b:fd:7d:d9:12:e0:79:48:5e:6b:c3:1c:c3:70:
                    06:19:d1:f9:bf:b6:a7:da:18:4c:9e:db:42:93:00:
                    68:dd:e7:25:bf:64:60:72:61:b0:8a:8b:5d:fc:f2:
                    47:82:05:14:a2:88:2d:96:02:0b:73:37:ff:19:b3:
                    90:78:0e:a2:db:89:e3:67:9d:95:41:d9:cb:f1:94:
                    13:be:04:f3:69:09:3a:7f:63:41:b0:c3:84:a4:2f:
                    2b:05:b1:5c:67:27:b4:90:4f:9b:c9:99:41:db:f3:
                    bb:ef:d3:f2:43:fc:75:f2:4d:2c:84:76:40:78:d8:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:E6:94:0E:57:C2:F8:66:C2:27:A6:B2:E9:B5:1C:AF:C8:FA:27
            X509v3 Authority Key Identifier:
                keyid:0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/0B571D046EE5DDB45973505832427E4002C57BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/0B571D046EE5DDB45973505832427E4002C57BBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:49:0d:33:ba:6c:52:2c:84:bd:77:fb:75:6c:f1:a0:6a:83:
         f3:da:ea:e9:02:c3:99:01:61:52:62:36:ff:43:f8:35:2e:b8:
         2c:ed:cd:e5:14:fa:c6:d8:c3:19:41:fd:03:7b:c1:14:2b:49:
         78:fc:26:2a:07:e1:5d:6a:00:bb:4d:4c:25:4e:4b:37:e3:37:
         01:43:e5:14:0b:75:45:03:b0:4d:c4:99:bf:1d:ec:46:8e:9f:
         5c:3f:a2:93:03:43:92:45:67:9e:cb:df:fd:53:2f:1b:7b:87:
         8d:bd:9a:9d:b4:4d:05:87:a1:72:9e:b9:32:f8:88:92:e3:d7:
         6e:3a:e2:8c:4f:2a:ec:b0:1f:9b:2b:99:8c:21:6b:41:8a:5b:
         13:11:0b:6a:9c:c3:6d:43:5a:0e:03:c5:11:3d:84:80:62:b0:
         64:ad:97:fe:ac:77:4d:8d:10:89:09:26:2e:42:df:cb:c6:87:
         b4:72:e1:2f:67:2f:be:e5:5e:57:24:f9:93:3e:a1:3c:96:9d:
         9b:63:1b:e9:12:e1:6b:58:3f:9d:30:6f:f2:78:df:99:08:62:
         45:c0:2b:40:dc:ba:dd:63:f5:29:e9:3b:24:df:22:dd:26:44:
         c6:df:f0:bd:72:7b:7b:62:14:9a:57:7e:b9:79:a2:45:5f:f3:
         c8:d5:8d:f8
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUHR44RPeLgCehUdpKC6rv/wm8uggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI1NzFEMDQ2RUU1RERCNDU5NzM1MDU4MzI0MjdFNDAw
MkM1N0JCRDAeFw0yMjA2MDcxNTA1MDBaFw0yMjA2MDgxNTEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJBNzlBMjY3MDc4RURCRDc3
NkMwMTY1RUQzQUY3OTQ4M0IyMkI0NzAwMEVEOTAyMjIyMDA3MjUyQzdCMkNDMDdD
NjJBQThDQzgwM0RDMTc1QkM0MjdFQkUyMzA5REU5MkYzQkRGOUMzNzIzREYzNkM4
RkYzNzUyNDlENkIzQzM0RTc1NzlDQzcwREIyOTBGNjIyODJCMkE2QkFERjg1ODdC
QUQ0RDBDQUNBMDM1NDYzQzBGMDVDRDEzODBDODdCMzg0NTI4QzA4NjIzQzM5NUIy
MDhFODFGREYwREI4RjBFRUM2NTE3OUI4QjNCMjUxRDAwQkEyRkNFNDA0N0REMEEz
NURGNUFCMDYzNjM0OUJGRDdERDkxMkUwNzk0ODVFNkJDMzFDQzM3MDA2MTlEMUY5
QkZCNkE3REExODRDOUVEQjQyOTMwMDY4RERFNzI1QkY2NDYwNzI2MUIwOEE4QjVE
RkNGMjQ3ODIwNTE0QTI4ODJEOTYwMjBCNzMzN0ZGMTlCMzkwNzgwRUEyREI4OUUz
Njc5RDk1NDFEOUNCRjE5NDEzQkUwNEYzNjkwOTNBN0Y2MzQxQjBDMzg0QTQyRjJC
MDVCMTVDNjcyN0I0OTA0RjlCQzk5OTQxREJGM0JCRUZEM0YyNDNGQzc1RjI0RDJD
ODQ3NjQwNzhEOEEwOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu6eaJnB47b13bAFl7Tr3lIOyK0cADtkCIiAHJSx7LMB8YqqMyAPc
F1vEJ+viMJ3pLzvfnDcj3zbI/zdSSdazw051ecxw2ykPYigrKmut+Fh7rU0MrKA1
RjwPBc0TgMh7OEUowIYjw5WyCOgf3w248O7GUXm4s7JR0Aui/OQEfdCjXfWrBjY0
m/192RLgeUhea8Mcw3AGGdH5v7an2hhMnttCkwBo3eclv2RgcmGwiotd/PJHggUU
oogtlgILczf/GbOQeA6i24njZ52VQdnL8ZQTvgTzaQk6f2NBsMOEpC8rBbFcZye0
kE+byZlB2/O779PyQ/x18k0shHZAeNiglwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FF735pQOV8L4ZsInprLptRyvyPonMB8GA1UdIwQYMBaAFAtXHQRu5d20WXNQWDJC
fkACxXu9MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2Y4MWM0Y2VhLWE5YWYtNDE5ZC04
ZmE2LTU5Yzc0Y2I4OTRkNC0xLzIvMEI1NzFEMDQ2RUU1RERCNDU5NzM1MDU4MzI0
MjdFNDAwMkM1N0JCRC5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUFBzAChmFy
c3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTg1NzgxMDAw
MC8yLzBCNTcxRDA0NkVFNUREQjQ1OTczNTA1ODMyNDI3RTQwMDJDNTdCQkQuY2Vy
MIGVBggrBgEFBQcBCwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vci5tYWdl
bGxhbi5pcHhvLmNvbS9yZXBvL2Y4MWM0Y2VhLWE5YWYtNDE5ZC04ZmE2LTU5Yzc0
Y2I4OTRkNC0xLzIvMEI1NzFEMDQ2RUU1RERCNDU5NzM1MDU4MzI0MjdFNDAwMkM1
N0JCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBADRJDTO6bFIshL13+3Vs8aBqg/Pa6ukCw5kBYVJiNv9D
+DUuuCztzeUU+sbYwxlB/QN7wRQrSXj8JioH4V1qALtNTCVOSzfjNwFD5RQLdUUD
sE3Emb8d7EaOn1w/opMDQ5JFZ57L3/1TLxt7h429mp20TQWHoXKeuTL4iJLj1246
4oxPKuywH5srmYwha0GKWxMRC2qcw21DWg4DxRE9hIBisGStl/6sd02NEIkJJi5C
38vGh7Ry4S9nL77lXlck+ZM+oTyWnZtjG+kS4WtYP50wb/J435kIYkXAK0Dcut1j
9SnpOyTfIt0mRMbf8L1ye3tiFJpXfrl5okVf88jVjfg=
-----END CERTIFICATE-----