Manifest

$ rpki-client -vvf rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.mft
File:                     DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.mft (raw, json)
Hash identifier:          LWTgA70JfYUvDI3jjOHi2gU9S2b17sirs0gyDSaXO+A=
Subject key identifier:   9A:7B:78:0F:5A:95:8F:C4:95:5D:C5:9E:F8:31:30:62:77:26:84:BD
Authority key identifier: DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
Certificate issuer:       /CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Certificate serial:       77719D3C9F06667CF2CBA2A78C61AFD9D7954841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
Subject info access:      rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.mft
Manifest number:          0353
Signing time:             Thu 05 Jan 2023 13:40:00 +0000
Manifest this update:     Thu 05 Jan 2023 13:35:00 +0000
Manifest next update:     Fri 06 Jan 2023 13:40:00 +0000
Files and hashes:         1: 3139332e3136322e3133372e302f32342d3234203d3e20323132373935.roa (hash: tWRXOPAIbbwMsj2npnHdrtA2FjoIVvJYiCirI2yw5JI=)
                          2: AAFBF9DBE860335648F2AEABA124326B85374C47.cer (hash: hmeVrq4wQZ/aaYKZ9MwiRiP6YZ+7eaDCgypam3U1Of0=)
                          3: DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.crl (hash: ClG65UbNMdTdoUIJKsq7DNZLMenc/EWnkZ9OITRbKt8=)
                          4: 34352e3135352e3132392e302f32342d3234203d3e20323132373935.roa (hash: BvXzFQ0SciLMZxWA/sPlLwmuDinC0a41+xjwfQSPUXI=)
                          5: 34352e3135352e3133312e302f32342d3234203d3e20323038313632.roa (hash: ubh3RqDhF7jiUoBXCgy7SvP1usz4zlNe+9vZhAdrQOQ=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:71:9d:3c:9f:06:66:7c:f2:cb:a2:a7:8c:61:af:d9:d7:95:48:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
        Validity
            Not Before: Jan  5 13:35:00 2023 GMT
            Not After : Jan 12 13:40:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:30:87:02:d5:dc:5c:38:2f:96:5d:93:f2:
                    e1:df:c3:af:7c:9b:4f:9f:5d:f4:63:44:5e:b7:9e:
                    31:be:26:17:8b:31:48:57:b5:4b:6b:28:e0:92:f8:
                    52:fc:6c:9d:32:22:b6:00:63:3b:50:54:7b:64:a6:
                    50:1c:bf:98:2f:f2:99:f2:b1:28:5e:e5:c8:4d:3e:
                    83:c1:d8:f7:62:c4:c0:fd:d4:47:c9:0f:70:3f:41:
                    f7:e2:fe:3f:db:d7:15:43:43:85:e3:e0:0c:eb:ea:
                    77:ae:c5:a9:13:15:01:bd:4e:10:1c:b6:83:ee:0c:
                    d7:c5:0f:c8:6e:b7:81:eb:a0:ae:15:50:21:88:d4:
                    9e:fb:45:3e:7b:08:54:4b:9c:a4:48:f6:5a:86:2a:
                    ea:d9:c8:3a:f1:8d:ae:10:13:bd:d8:08:ba:3a:3c:
                    d7:7c:df:38:9b:65:fc:3d:00:e3:39:5f:6e:3f:a0:
                    f6:79:33:f3:5f:6f:d8:dd:9c:8a:63:ff:4c:f0:71:
                    17:00:87:04:99:fe:15:a4:c9:03:de:92:f9:fc:0e:
                    72:8e:0e:e2:04:8d:ed:2c:98:65:b1:64:1e:72:a5:
                    ba:d9:0d:64:4d:ae:a6:7a:6c:54:30:a8:df:04:c2:
                    67:15:b1:9a:73:12:87:2b:82:97:aa:17:58:8f:e4:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7B:78:0F:5A:95:8F:C4:95:5D:C5:9E:F8:31:30:62:77:26:84:BD
            X509v3 Authority Key Identifier:
                keyid:DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:09:e9:6d:16:f6:7a:99:4b:03:4d:d2:15:ee:0b:74:a9:25:
         00:1e:48:a0:fd:01:e1:35:1b:56:5b:46:d4:bf:73:25:ce:ce:
         8e:fb:ca:e7:d8:33:92:00:3d:9f:87:a2:9d:cd:65:9a:fe:d1:
         97:54:7b:e6:d4:88:b9:52:28:aa:fd:fc:18:83:02:c1:85:1d:
         b6:a7:50:3c:95:a8:42:74:9a:55:5a:aa:76:59:9a:74:7a:14:
         e1:2e:84:9c:14:3e:44:b0:58:a2:34:27:64:49:84:21:81:6f:
         20:a8:c0:1c:94:93:d3:3b:4d:ff:fb:dd:a1:9c:22:1f:34:c2:
         b5:1b:5e:c1:4e:a4:ba:1b:8a:69:20:23:06:85:e9:49:13:00:
         3a:ba:89:5c:9a:35:f9:75:34:88:79:46:33:a4:04:fd:e2:24:
         9b:7f:4b:38:cf:1e:5f:ef:a5:09:69:5b:77:1d:5b:b3:5b:6f:
         1b:1c:ff:b0:f6:91:96:b6:5f:23:d1:6e:1b:74:0f:e2:c7:ae:
         a9:68:c3:95:5e:8d:80:e7:6c:3b:3f:0a:4f:46:98:52:36:ad:
         12:39:9b:a1:09:e6:c1:61:11:ff:71:74:97:d7:0c:cf:91:e8:
         63:de:cc:73:10:ec:99:20:2e:82:00:91:5b:4c:74:1c:71:12:
         db:49:f2:ae
-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgIUd3GdPJ8GZnzyy6KnjGGv2deVSEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY1YTMxZTU0OTE1ZWIxMGViMDE1ZWQ4ZjA0NzZkOGMz
ZjY0ZmZmMTAeFw0yMzAxMDUxMzM1MDBaFw0yMzAxMTIxMzQwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTRBODMwODcwMkQ1REM1QzM4
MkY5NjVEOTNGMkUxREZDM0FGN0M5QjRGOUY1REY0NjM0NDVFQjc5RTMxQkUyNjE3
OEIzMTQ4NTdCNTRCNkIyOEUwOTJGODUyRkM2QzlEMzIyMkI2MDA2MzNCNTA1NDdC
NjRBNjUwMUNCRjk4MkZGMjk5RjJCMTI4NUVFNUM4NEQzRTgzQzFEOEY3NjJDNEMw
RkRENDQ3QzkwRjcwM0Y0MUY3RTJGRTNGREJENzE1NDM0Mzg1RTNFMDBDRUJFQTc3
QUVDNUE5MTMxNTAxQkQ0RTEwMUNCNjgzRUUwQ0Q3QzUwRkM4NkVCNzgxRUJBMEFF
MTU1MDIxODhENDlFRkI0NTNFN0IwODU0NEI5Q0E0NDhGNjVBODYyQUVBRDlDODNB
RjE4REFFMTAxM0JERDgwOEJBM0EzQ0Q3N0NERjM4OUI2NUZDM0QwMEUzMzk1RjZF
M0ZBMEY2NzkzM0YzNUY2RkQ4REQ5QzhBNjNGRjRDRjA3MTE3MDA4NzA0OTlGRTE1
QTRDOTAzREU5MkY5RkMwRTcyOEUwRUUyMDQ4REVEMkM5ODY1QjE2NDFFNzJBNUJB
RDkwRDY0NERBRUE2N0E2QzU0MzBBOERGMDRDMjY3MTVCMTlBNzMxMjg3MkI4Mjk3
QUExNzU4OEZFNEMyM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5KgwhwLV3Fw4L5Zdk/Lh38OvfJtPn130Y0Ret54xviYXizFIV7VL
ayjgkvhS/GydMiK2AGM7UFR7ZKZQHL+YL/KZ8rEoXuXITT6Dwdj3YsTA/dRHyQ9w
P0H34v4/29cVQ0OF4+AM6+p3rsWpExUBvU4QHLaD7gzXxQ/IbreB66CuFVAhiNSe
+0U+ewhUS5ykSPZahirq2cg68Y2uEBO92Ai6OjzXfN84m2X8PQDjOV9uP6D2eTPz
X2/Y3ZyKY/9M8HEXAIcEmf4VpMkD3pL5/A5yjg7iBI3tLJhlsWQecqW62Q1kTa6m
emxUMKjfBMJnFbGacxKHK4KXqhdYj+TCPwIDAQABo4ICHDCCAhgwHQYDVR0OBBYE
FJp7eA9alY/ElV3FnvgxMGJ3JoS9MB8GA1UdIwQYMBaAFN9aMeVJFesQ6wFe2PBH
bYw/ZP/xMA4GA1UdDwEB/wQEAwIHgDB/BgNVHR8EeDB2MHSgcqBwhm5yc3luYzov
L3Jwa2kxLnJwa2ktdGVzdC5zaXQuZnJhdW5ob2Zlci5kZS9yZXBvL3Jwa2kxX2Zy
YXVuaG9mZXIvMC9ERjVBMzFFNTQ5MTVFQjEwRUIwMTVFRDhGMDQ3NkQ4QzNGNjRG
RkYxLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzFveDVVa1Y2eERyQVY3WThF
ZHRqRDlrX19FLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUFBzALhm5yc3lu
YzovL3Jwa2kxLnJwa2ktdGVzdC5zaXQuZnJhdW5ob2Zlci5kZS9yZXBvL3Jwa2kx
X2ZyYXVuaG9mZXIvMC9ERjVBMzFFNTQ5MTVFQjEwRUIwMTVFRDhGMDQ3NkQ4QzNG
NjRGRkYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEApgnpbRb2eplLA03SFe4LdKklAB5IoP0B4TUbVltG
1L9zJc7OjvvK59gzkgA9n4einc1lmv7Rl1R75tSIuVIoqv38GIMCwYUdtqdQPJWo
QnSaVVqqdlmadHoU4S6EnBQ+RLBYojQnZEmEIYFvIKjAHJST0ztN//vdoZwiHzTC
tRtewU6kuhuKaSAjBoXpSRMAOrqJXJo1+XU0iHlGM6QE/eIkm39LOM8eX++lCWlb
dx1bs1tvGxz/sPaRlrZfI9FuG3QP4seuqWjDlV6NgOdsOz8KT0aYUjatEjmboQnm
wWER/3F0l9cMz5HoY97McxDsmSAuggCRW0x0HHES20nyrg==
-----END CERTIFICATE-----