Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
File:                     513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft (raw, json)
Hash identifier:          q78qgfSiK9zAjAizfBi1HNGF0ZFvHpcreSlaqv7urLE=
Subject key identifier:   36:B3:74:E5:83:2A:6F:E8:3F:57:11:1F:77:4E:6E:9F:50:48:7E:DE
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Certificate issuer:       /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial:       116CD2C0F58BF21597F8720422281F3883B86456
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
Manifest number:          06F7
Signing time:             Tue 15 Apr 2025 02:54:19 +0000
Manifest this update:     Tue 15 Apr 2025 02:49:19 +0000
Manifest next update:     Wed 16 Apr 2025 04:55:19 +0000
Files and hashes:         1: 513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl (hash: 0u75Din1ElvLsqteURlMVjQfw42WjQ3mkz8/v+Zrf8Q=)
                          2: 323630353a3963303a3a2f33322d3438203d3e2036323333.roa (hash: jzljdIIfaM2sidsxEIR+5NVo+O9rd3g0SgH8sZObXhc=)
                          3: 32332e3135392e3136302e302f32342d3234203d3e203236353438.roa (hash: wpz1vLMtnqJxCONctBXDAt7YrO6fEamd4bli9UWcVfA=)
                          4: 323630353a3963303a3a2f34382d3438203d3e203535313538.roa (hash: mB5wuHZUHI3qP8vGEybTFYgt8noCurUWvuvc4vXmxIM=)
                          5: 323630353a3963303a3a2f33322d3438203d3e203535313538.roa (hash: wPIjqCqEGjK87/iqBG97Zlz5vFDjkow+GyKWXSi3fQQ=)
                          6: 323630353a3963303a3a2f33322d3438203d3e20393439.roa (hash: p0lGhk0Q/r6KmEloPSh3M8LbpJdvMXmXfuckmlA4/pI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6c:d2:c0:f5:8b:f2:15:97:f8:72:04:22:28:1f:38:83:b8:64:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
        Validity
            Not Before: Apr 15 02:49:19 2025 GMT
            Not After : Apr 16 04:55:19 2025 GMT
        Subject: CN=36B374E5832A6FE83F57111F774E6E9F50487EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:7d:ed:bf:51:98:35:c4:d6:49:04:50:2c:
                    55:cc:64:f6:b2:a4:da:f4:e5:69:3a:42:0f:b7:96:
                    b8:2c:76:eb:1d:6c:aa:4c:44:f0:58:c1:52:a4:eb:
                    75:07:c9:32:ca:52:b8:d2:01:8f:39:00:d7:ab:d8:
                    d6:9e:8a:92:8c:85:4b:d4:f5:cb:87:05:6e:81:98:
                    70:ab:29:d1:62:b5:cc:f8:a4:d7:b2:b7:f0:54:ec:
                    be:bb:e0:7f:b8:b0:cb:49:f4:c9:26:5b:6d:c7:e2:
                    3f:be:cf:54:62:08:f8:5c:ab:45:52:b9:37:bf:62:
                    39:b5:db:2a:8f:be:e5:a0:60:03:3c:c4:dd:7d:a7:
                    e3:8f:b2:1c:d5:e2:75:1f:07:70:28:27:2a:45:17:
                    e6:5a:63:a0:5f:d4:9c:69:a3:4f:ea:f9:2c:9a:6f:
                    f6:ec:98:63:63:86:eb:f6:e1:10:0f:ad:14:77:15:
                    3b:25:a9:f9:76:cd:02:c2:cd:a8:5a:6d:1e:f3:40:
                    83:44:23:d9:56:e2:35:20:82:ba:f3:6f:2a:8c:eb:
                    78:93:25:0a:90:fe:5e:be:dd:de:2e:ef:5a:54:56:
                    4a:21:dd:9b:2d:98:14:02:67:17:5e:31:c6:3d:22:
                    18:47:d2:64:36:f5:23:64:d4:02:14:29:27:a2:16:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:74:E5:83:2A:6F:E8:3F:57:11:1F:77:4E:6E:9F:50:48:7E:DE
            X509v3 Authority Key Identifier:
                keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:42:c0:1d:71:31:bc:95:1c:7b:8b:f5:85:24:6a:67:df:
         2a:cf:60:fa:25:be:78:a9:25:a0:ed:e0:11:55:63:3b:c6:af:
         49:2b:62:f8:ce:43:22:29:93:f8:0a:66:72:7e:62:9b:09:42:
         04:6f:c8:3d:ab:8b:23:a4:ca:be:ab:12:b3:f5:be:97:07:64:
         1c:5d:b9:1d:63:f0:a4:c7:55:c4:d9:a7:66:1f:5e:55:82:8a:
         f2:ea:fd:cf:27:15:c8:f9:fc:d1:71:fd:bf:2d:92:01:97:5a:
         26:73:62:10:8f:06:32:1e:cb:38:27:60:1d:c8:6e:4b:bd:ab:
         0d:30:0c:4f:9f:d5:51:78:77:0a:09:52:c8:32:86:c5:81:0d:
         f8:99:4f:52:a8:7e:4d:cb:6c:29:35:5b:1b:3a:cf:9d:97:2a:
         5f:67:76:4f:29:f1:ac:63:cd:43:87:f1:8a:17:94:ea:0b:08:
         69:3d:e3:b6:c9:c4:a2:63:09:ab:e1:2d:09:be:f3:98:f1:34:
         54:c4:4c:06:84:f1:6b:08:ad:b6:36:d8:88:c7:a5:b4:f1:a9:
         43:fa:46:45:43:36:a6:a5:2f:d0:73:0b:0e:40:9d:c3:fb:d4:
         bd:a5:a5:bf:aa:fb:d8:e9:5c:df:47:41:d7:77:c2:02:8d:1b:
         9f:b8:06:ee
-----BEGIN CERTIFICATE-----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=