Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft
File:                     EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft (raw, json)
Hash identifier:          FrJrCxFrfMpZCwCcwuiHLTd6YKDvYU5NDgnutmtA40U=
Subject key identifier:   39:08:B7:A6:BC:44:FD:80:87:43:AB:47:01:BD:F5:6E:B7:79:93:79
Authority key identifier: EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
Certificate issuer:       /CN=eb348a4bd62409dc8a9cdef33d5f34c334c0b156
Certificate serial:       2781881FB4BDB7F22B14641EF6B70F773BEFC580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSKS9YkCdyKnN7zPV80wzTAsVY.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft
Manifest number:          01D1
Signing time:             Sun 17 Apr 2022 06:30:00 +0000
Manifest this update:     Sun 17 Apr 2022 06:25:00 +0000
Manifest next update:     Mon 18 Apr 2022 09:44:00 +0000
Files and hashes:         1: 34352e3134322e3136352e302f32342d3234203d3e2034373835.roa (hash: bSjWZ5TIN2OwicnaZTz+ekfLGhMaz1dKHzDJw3bgFn4=)
                          2: 34352e3134322e3136372e302f32342d3234203d3e203233393539.roa (hash: 8I7DzIKwUxOyaQkRiYh8L2W1va1KOpjN1hiQeiaTHyE=)
                          3: EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.crl (hash: JjamLHsxW0W1yxW8GOCFpAlAAh1IzuGQkA8QiNkD3fM=)
                          4: 34352e3134322e3136362e302f32342d3234203d3e203233393539.roa (hash: m4CXX3nCNuMgEGbrBu9aZnWdqicu8tBa02HOaXsQChc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:81:88:1f:b4:bd:b7:f2:2b:14:64:1e:f6:b7:0f:77:3b:ef:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb348a4bd62409dc8a9cdef33d5f34c334c0b156
        Validity
            Not Before: Apr 17 06:25:00 2022 GMT
            Not After : Apr 18 09:44:00 2022 GMT
        Subject: CN=3908B7A6BC44FD808743AB4701BDF56EB7799379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:a8:d7:4f:d2:88:3a:27:57:be:d8:4a:7b:
                    f2:79:ff:3d:d5:47:96:71:c4:e2:4b:45:96:01:0e:
                    26:c0:0f:d3:e2:10:03:4b:59:de:86:cf:b0:40:2c:
                    37:1c:8f:d5:80:8d:e5:e5:e1:99:67:b0:c5:3e:07:
                    b4:71:3b:3f:a9:8c:80:13:4e:8a:1a:de:79:c5:ba:
                    83:3d:cd:4c:fd:d0:c3:30:4b:12:69:5a:9d:50:94:
                    60:70:02:a6:84:b6:31:73:d6:fb:90:54:e5:03:d4:
                    d3:71:f6:bd:f1:e5:70:37:61:1f:dd:9f:9a:1c:01:
                    10:c9:d5:f0:d4:86:ca:a4:c5:46:dc:7e:a3:96:0b:
                    96:9d:f3:0a:08:30:21:5e:53:cb:1f:db:0b:97:21:
                    d1:3b:83:90:72:72:b1:d7:2f:5a:ef:21:f7:c7:a2:
                    61:5a:e8:96:98:fc:4d:9b:e1:23:ec:54:cc:8a:9b:
                    75:ec:61:78:54:cb:58:6e:8f:38:b7:b5:ef:d9:13:
                    2c:9b:d1:3c:b5:1e:e5:3c:00:eb:7a:7c:a7:35:ee:
                    e1:63:4e:6a:20:76:21:88:e9:e1:a9:b3:be:b7:8e:
                    c8:1b:77:99:8f:c8:fa:74:0d:41:d8:bc:e6:d7:ff:
                    b6:3f:29:6d:8b:0a:b2:36:b1:49:c3:d5:53:dc:a3:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:08:B7:A6:BC:44:FD:80:87:43:AB:47:01:BD:F5:6E:B7:79:93:79
            X509v3 Authority Key Identifier:
                keyid:EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSKS9YkCdyKnN7zPV80wzTAsVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:13:b1:dd:a5:f3:39:bf:3d:08:c4:fd:10:3f:d6:89:b8:1f:
         5e:fc:2a:00:60:b6:74:41:b2:40:97:fd:db:01:9c:bc:5e:6e:
         b4:32:20:e1:b8:68:fb:b5:90:4c:1f:20:63:49:ec:d9:18:83:
         70:af:87:d1:e7:d8:15:25:4f:f3:80:14:82:04:99:02:c9:41:
         5a:23:f1:46:e9:fa:5c:a0:ee:61:f4:f6:fb:eb:74:8c:1c:52:
         1b:bc:09:45:6c:fe:74:4f:72:b5:ce:b3:fc:48:20:f9:36:bf:
         0f:3b:09:4c:7a:d1:52:bb:e8:24:57:86:bb:53:bd:ee:d6:19:
         5c:dd:e5:62:d4:77:6b:df:61:12:60:ef:67:06:d6:e2:b9:63:
         43:9d:d3:2b:53:05:db:00:96:82:2b:ce:84:b7:c3:92:a7:18:
         fa:88:fa:7e:9e:be:0f:7b:83:36:c0:3d:93:bc:30:5c:4b:31:
         28:6f:57:2f:9b:7b:a1:de:da:2e:5d:f2:c2:4c:7e:e8:b4:af:
         ce:ba:70:e0:15:e6:d7:fa:71:57:bd:e2:4c:50:7e:a3:c5:10:
         da:20:14:0d:d4:7c:83:1c:78:ac:64:ae:02:e5:b6:75:d4:a9:
         72:6b:74:fc:54:a3:26:8d:42:c2:df:81:a9:50:1a:31:f9:6c:
         89:e7:a2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----