Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
File:                     0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft (raw, json)
Hash identifier:          Rz1g+4A5mqTsgto4FwdWE674pSImVFF7TomSYwv3ztE=
Subject key identifier:   87:4A:C2:18:B1:13:38:AB:70:2B:D6:A2:CA:C0:87:91:12:26:91:5A
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       7813E92EC072BD51996E73E47ABE3286795CCAEE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
Manifest number:          06DF
Signing time:             Tue 15 Apr 2025 22:13:12 +0000
Manifest this update:     Tue 15 Apr 2025 22:08:12 +0000
Manifest next update:     Thu 17 Apr 2025 01:53:12 +0000
Files and hashes:         1: 323630343a653034303a3a2f33322d3438203d3e203632353939.roa (hash: g/WOAmgugxt6dngWNCKWu/YAcWHWwqIjA+fHLo1MNbA=)
                          2: 0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl (hash: 2PK/5wenV36pybVpGRMgRwzld6DhWm5r+4AH+8wS9O0=)
                          3: 323630343a653034303a3a2f33322d3438203d3e20393439.roa (hash: 8InW727vZUr0WYBUxmJlhAd2xYL+yJ7xBTL6FHcX6Sc=)
                          4: 32332e3133392e3232342e302f32342d3332203d3e2030.roa (hash: u8xlzuzua4CN2Me550uGshzvJJVsIpxzXB5yA4k+kM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:13:e9:2e:c0:72:bd:51:99:6e:73:e4:7a:be:32:86:79:5c:ca:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Apr 15 22:08:12 2025 GMT
            Not After : Apr 17 01:53:12 2025 GMT
        Subject: CN=874AC218B11338AB702BD6A2CAC087911226915A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:35:dd:e1:ec:56:2a:ad:32:3b:31:40:ad:
                    d6:bd:08:85:fe:c8:e5:b9:d8:a2:e3:9e:3b:1b:9f:
                    ad:3c:5b:a9:99:15:55:2a:01:89:82:63:9d:cf:fd:
                    45:18:0d:c5:94:34:c8:8d:70:a2:6f:19:fa:99:da:
                    69:7c:87:85:34:0d:ee:27:5d:93:38:8a:ec:a7:24:
                    3d:2a:c4:f5:d2:16:3e:28:f3:6a:9f:4b:09:84:50:
                    6b:d4:38:71:13:d7:62:5d:cb:b1:a3:68:dc:9e:bd:
                    a9:bd:15:65:c0:37:33:be:15:4f:47:10:39:7f:0a:
                    78:87:ca:b5:bb:9b:bc:98:10:a0:71:21:af:47:2c:
                    ab:fc:b7:51:86:2a:a4:4e:c2:5c:35:dd:23:6d:7b:
                    35:ac:05:49:b8:c2:b4:bd:a7:3d:59:a9:43:73:3f:
                    fe:c8:d8:73:5f:29:90:a9:f1:4b:40:a8:8e:57:59:
                    d3:1e:c6:c4:e7:91:20:68:ff:8f:c1:31:c5:91:5c:
                    fd:f2:ff:6f:e0:48:66:9a:68:31:b9:bd:dc:96:47:
                    99:27:50:4e:e3:5c:dd:33:6b:7f:28:37:36:ac:0a:
                    0a:92:68:5e:99:6c:90:9d:c1:05:32:1e:b9:25:c8:
                    f6:36:02:f7:8d:be:d6:95:41:6f:f0:35:db:15:72:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:C2:18:B1:13:38:AB:70:2B:D6:A2:CA:C0:87:91:12:26:91:5A
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:56:29:2c:68:f1:ad:04:81:e8:79:de:df:10:4c:37:77:
         41:e7:20:88:0e:0f:dd:81:8b:4b:9e:51:67:8c:e9:cb:3f:91:
         4f:28:47:0b:61:60:95:f5:9e:38:58:a2:19:81:a5:c4:cf:ce:
         bf:b5:5e:46:06:72:55:ad:e8:da:f3:82:a7:5e:c2:bc:fc:2f:
         3e:1d:a1:20:ae:12:96:63:9a:fd:11:c9:4d:41:75:cd:18:e2:
         c4:f9:44:8a:5f:d8:45:3b:5d:24:9d:41:af:6b:4b:e5:83:76:
         2d:18:b8:57:6a:71:13:e7:af:86:75:c4:52:8c:fd:86:52:28:
         80:51:a0:d9:5b:9d:71:68:32:d0:c4:01:bf:f4:6f:d8:5d:67:
         0d:f0:43:3a:07:d5:f5:4f:13:37:b1:b3:2b:49:5b:07:5f:81:
         1b:36:07:f9:72:b4:f0:4d:b0:9c:5b:f3:f0:7f:96:ec:37:ef:
         92:3b:23:68:f5:b2:8c:87:d9:40:90:be:81:10:eb:b4:6e:f9:
         f4:40:54:c1:ab:e3:f6:6a:f5:81:0c:da:f5:84:5b:e0:65:18:
         e5:e7:1f:16:50:ac:d4:3f:18:5c:d9:d7:b4:69:be:d7:14:ca:
         79:63:92:a2:a1:90:0b:5c:c5:d6:76:63:04:69:b5:97:9f:0d:
         b5:fb:17:8d
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUeBPpLsByvVGZbnPker4yhnlcyu4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj
ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjUwNDE1MjIwODEyWhcNMjUwNDE3MDE1MzEy
WjAzMTEwLwYDVQQDEyg4NzRBQzIxOEIxMTMzOEFCNzAyQkQ2QTJDQUMwODc5MTEy
MjY5MTVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumE13eHsViqt
MjsxQK3WvQiF/sjludii4547G5+tPFupmRVVKgGJgmOdz/1FGA3FlDTIjXCibxn6
mdppfIeFNA3uJ12TOIrspyQ9KsT10hY+KPNqn0sJhFBr1DhxE9diXcuxo2jcnr2p
vRVlwDczvhVPRxA5fwp4h8q1u5u8mBCgcSGvRyyr/LdRhiqkTsJcNd0jbXs1rAVJ
uMK0vac9WalDcz/+yNhzXymQqfFLQKiOV1nTHsbE55EgaP+PwTHFkVz98v9v4Ehm
mmgxub3clkeZJ1BO41zdM2t/KDc2rAoKkmhemWyQncEFMh65Jcj2NgL3jb7WlUFv
8DXbFXJffwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFIdKwhixEzircCvWosrAh5ES
JpFaMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw
Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3
YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5
NzUxMmM0Mi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFB
QzZEOEUyQ0Y4M0FEMjJBQzcwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH9hViksaPGtBIHoed7fEEw3
d0HnIIgOD92Bi0ueUWeM6cs/kU8oRwthYJX1njhYohmBpcTPzr+1XkYGclWt6Nrz
gqdewrz8Lz4doSCuEpZjmv0RyU1Bdc0Y4sT5RIpf2EU7XSSdQa9rS+WDdi0YuFdq
cRPnr4Z1xFKM/YZSKIBRoNlbnXFoMtDEAb/0b9hdZw3wQzoH1fVPEzexsytJWwdf
gRs2B/lytPBNsJxb8/B/luw375I7I2j1soyH2UCQvoEQ67Ru+fRAVMGr4/Zq9YEM
2vWEW+BlGOXnHxZQrNQ/GFzZ17RpvtcUynljkqKhkAtcxdZ2YwRptZefDbX7F40=
-----END CERTIFICATE-----