Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2410520f-a6ff-46b5-91e9-abd919dd2d6e/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          9bUW7Gd339x3mFyl+0Sex3uFm27eDmZ090hlo4I2DFo=
Subject key identifier:   8A:E4:F3:18:2F:04:C2:11:DD:E5:25:ED:3A:12:94:BD:20:E5:D3:CA
Authority key identifier: EF:DE:1A:EC:21:2D:F2:A1:77:6D:CF:C2:C1:61:1E:D1:20:3F:35:63
Certificate issuer:       /CN=A91609040000/serialNumber=EFDE1AEC212DF2A1776DCFC2C1611ED1203F3563
Certificate serial:       2C32F21B77852D628651451DC0DCDC3D02CA605D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/794a7CEt8qF3bc_CwWEe0SA_NWM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2410520f-a6ff-46b5-91e9-abd919dd2d6e/manifest.mft
Manifest number:          5B
Signing time:             Wed 10 Aug 2022 17:56:53 +0000
Manifest this update:     Wed 10 Aug 2022 17:56:53 +0000
Manifest next update:     Fri 12 Aug 2022 05:56:53 +0000
Files and hashes:         1: b3e99104-0e37-48b9-bb68-c5ee6d291c04.roa (hash: gik3yLv16oXn7SpH0veBfjZJUEsttQjtGDHgh+5Lf2I=)
                          2: d46716b5-4e56-4ad5-a94f-600ab193eec1.crl (hash: GV7tILe3dhOrtCa+4zz4DYUzkIEtG8BqS/qTBKEX2yw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:32:f2:1b:77:85:2d:62:86:51:45:1d:c0:dc:dc:3d:02:ca:60:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040000/serialNumber=EFDE1AEC212DF2A1776DCFC2C1611ED1203F3563
        Validity
            Not Before: Aug 10 17:56:53 2022 GMT
            Not After : Aug 12 05:56:53 2022 GMT
        Subject: serialNumber=c56e4b6d93b399000c2497acffe40074f36235300dfa23cd4412bc2cc43cc6cf, CN=03aae949-20a0-4cc5-a19e-c4618f490972, OU=Amazon Test RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:5b:98:a3:9b:22:28:dd:6c:0d:d1:32:c8:
                    c4:4e:8e:a0:9e:91:a3:cd:b2:90:76:62:72:cb:73:
                    18:f7:95:90:05:1c:5c:0d:c1:90:b0:fa:ae:a3:3b:
                    73:fb:1e:63:93:67:2e:08:b2:54:ec:0e:35:dc:c8:
                    cc:2a:bc:ef:9a:aa:5d:e3:42:e3:15:80:98:0c:07:
                    35:20:72:9f:d9:0a:68:a0:47:29:f2:24:a8:72:3c:
                    19:9d:2c:a9:c4:70:78:ac:42:08:41:99:74:9a:a9:
                    f8:fb:15:f2:6a:ea:16:a0:64:7b:9f:c9:8b:15:a0:
                    dc:0e:12:d7:97:92:80:9e:cf:b0:88:ee:09:28:da:
                    c4:5e:20:c4:27:43:2a:48:ca:63:52:76:8f:cf:6e:
                    59:f1:0b:61:18:56:64:5e:44:fe:bd:76:07:8a:97:
                    39:32:e9:4a:5d:16:e5:28:d7:fe:91:24:32:a5:3a:
                    09:78:fa:b1:c0:09:dc:c0:77:42:bb:f0:e3:cc:cf:
                    c7:99:a3:94:33:67:c2:f8:92:5e:c3:82:86:50:05:
                    6d:22:13:b7:7a:f9:5a:35:8d:6d:0c:47:db:ed:f2:
                    f1:62:f1:87:8c:53:ca:bc:6a:00:8f:1b:1c:f2:a0:
                    5b:e4:6b:13:bc:11:8e:f5:67:64:b8:3a:a8:04:fd:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:F3:18:2F:04:C2:11:DD:E5:25:ED:3A:12:94:BD:20:E5:D3:CA
            X509v3 Authority Key Identifier:
                keyid:EF:DE:1A:EC:21:2D:F2:A1:77:6D:CF:C2:C1:61:1E:D1:20:3F:35:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/794a7CEt8qF3bc_CwWEe0SA_NWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2410520f-a6ff-46b5-91e9-abd919dd2d6e/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2410520f-a6ff-46b5-91e9-abd919dd2d6e/d46716b5-4e56-4ad5-a94f-600ab193eec1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f4:2e:1f:32:78:e8:2d:9e:2a:42:40:86:63:93:e8:1a:97:
         e0:3d:e9:12:13:76:a2:39:77:c7:a0:78:c1:40:35:06:81:a0:
         af:23:82:26:5e:be:aa:0d:f3:c4:ce:ec:30:49:d7:5c:8d:69:
         98:fc:47:4d:a4:1d:6a:42:87:4a:a9:47:36:cf:48:53:90:33:
         67:45:41:35:8e:55:8a:44:56:2a:22:97:d8:df:af:1c:64:fd:
         c0:8e:94:c8:a7:f1:3b:92:cd:55:c2:80:4a:07:3c:b1:bb:fd:
         74:99:da:4f:35:1b:76:73:8c:fb:97:50:d0:a9:5f:b4:d5:e8:
         ae:f5:af:3d:4a:93:9c:ad:3c:ec:35:58:93:ba:e7:23:ae:7f:
         85:c1:1b:d4:1d:7a:1f:b1:75:ca:46:fe:7f:49:b3:ca:0b:c2:
         24:90:cc:2a:4b:9a:8f:40:72:93:86:49:5b:af:c8:f0:f8:0b:
         2c:28:a5:bd:59:ec:5a:97:4d:21:1a:db:37:9a:46:2e:62:11:
         af:fa:2b:9b:b3:0e:ac:a1:84:89:98:70:e1:cf:e5:64:45:0b:
         15:af:5a:ba:1b:c7:89:0b:6e:16:df:8f:4a:8e:c5:a3:e6:95:
         9b:a6:ce:94:a5:6e:22:c3:56:ba:aa:39:27:7a:ce:8c:43:f9:
         25:33:b6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----