Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/4/000B188A1A40BD66AFBDA0909EFA612125BC8A02.mft
File:                     000B188A1A40BD66AFBDA0909EFA612125BC8A02.mft (raw, json)
Hash identifier:          AFg0w2qQhyW8O+YOJP0E3txcjvOqgT/d1YPg5qJ713o=
Subject key identifier:   F8:75:F9:13:03:22:E2:B6:32:1C:EC:B8:DD:8F:FE:7D:4B:05:86:73
Authority key identifier: 00:0B:18:8A:1A:40:BD:66:AF:BD:A0:90:9E:FA:61:21:25:BC:8A:02
Certificate issuer:       /CN=000b188a1a40bd66afbda0909efa612125bc8a02
Certificate serial:       4F1CC965BC86F58CF4F7F7B507FFF4A0A9B78BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAsYihpAvWavvaCQnvphISW8igI.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/4/000B188A1A40BD66AFBDA0909EFA612125BC8A02.mft
Manifest number:          051C
Signing time:             Thu 14 Dec 2023 03:52:52 +0000
Manifest this update:     Thu 14 Dec 2023 03:47:52 +0000
Manifest next update:     Fri 15 Dec 2023 06:29:52 +0000
Files and hashes:         1: 3139332e33322e38362e302f32342d3234203d3e203531303837.roa (hash: 75O/JMLtWaFSIDNqwzFnTOvyRdaQLtAzNbWHwcO6zE4=)
                          2: 000B188A1A40BD66AFBDA0909EFA612125BC8A02.crl (hash: HC/HfZx14plkN0Fpt/wT49+P9oVxYPzP23DYhAf44zY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1c:c9:65:bc:86:f5:8c:f4:f7:f7:b5:07:ff:f4:a0:a9:b7:8b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000b188a1a40bd66afbda0909efa612125bc8a02
        Validity
            Not Before: Dec 14 03:47:52 2023 GMT
            Not After : Dec 15 06:29:52 2023 GMT
        Subject: CN=F875F9130322E2B6321CECB8DD8FFE7D4B058673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:69:f5:ab:f8:5f:e5:6f:f4:c3:2c:81:ce:8f:
                    c9:00:a0:25:93:64:5b:6d:81:d1:d1:bd:6a:e7:08:
                    fb:db:b2:5d:06:9e:5e:5c:c2:bd:9a:71:1e:21:5f:
                    13:4c:e1:bd:9d:5d:21:44:15:81:f6:3c:a6:35:0d:
                    7e:bd:06:38:61:19:41:61:35:f3:22:ae:75:80:97:
                    c6:02:8b:6f:7b:73:28:af:4f:0a:85:11:9b:b0:29:
                    63:52:62:77:6c:eb:c6:67:e6:6c:50:b3:b2:6f:e0:
                    dc:20:1f:15:c1:61:4d:26:bc:4a:ce:5f:4f:9c:40:
                    39:38:02:64:90:66:fd:3c:c7:6e:18:36:01:96:d2:
                    f3:5c:64:3c:1f:57:5d:c8:64:98:4e:9c:03:a4:fe:
                    81:3d:17:f6:8b:5c:07:b1:a7:33:da:f1:14:cd:13:
                    52:97:a4:ba:47:49:c6:d5:d3:a9:1e:43:04:bd:86:
                    61:da:6c:31:0c:1d:2c:ad:21:e1:67:35:79:59:28:
                    d5:5e:2d:54:da:e5:ce:c6:a2:ed:d3:94:06:ee:69:
                    1a:f9:17:ce:9d:ef:33:04:f1:0a:74:c1:79:5c:be:
                    2b:cd:11:e0:24:6b:e4:71:2d:e9:a0:97:8f:4a:35:
                    57:ce:a3:93:f6:e1:43:46:a9:d5:b2:6d:ea:7d:42:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:75:F9:13:03:22:E2:B6:32:1C:EC:B8:DD:8F:FE:7D:4B:05:86:73
            X509v3 Authority Key Identifier:
                keyid:00:0B:18:8A:1A:40:BD:66:AF:BD:A0:90:9E:FA:61:21:25:BC:8A:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/4/000B188A1A40BD66AFBDA0909EFA612125BC8A02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAsYihpAvWavvaCQnvphISW8igI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/4/000B188A1A40BD66AFBDA0909EFA612125BC8A02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:22:0d:c8:d3:aa:b9:80:9e:46:55:43:61:3e:9c:63:4e:0b:
         af:28:fa:37:96:2b:5d:a1:f8:9e:f6:f6:50:f3:d8:f5:42:da:
         c2:c9:cb:5b:d2:05:66:9f:23:53:c9:b0:81:22:0a:6c:92:b7:
         e8:07:81:b1:2d:e5:f9:e5:5b:10:59:06:80:0d:fc:0f:88:e7:
         86:ff:c1:e8:f0:c0:16:0b:a4:84:41:c9:33:9a:80:41:c6:87:
         1c:c2:68:96:25:7a:bd:ca:a2:4e:f1:9b:92:91:36:32:b1:d3:
         bc:3f:5a:a8:e0:cc:85:c0:4c:57:eb:42:27:30:f7:51:f0:3d:
         25:e0:cb:83:01:09:3e:7c:2c:ad:f8:d9:87:39:9b:c1:61:5e:
         67:02:e2:04:bd:80:a5:da:5d:3d:a4:fd:5d:d2:9b:bb:b8:eb:
         30:7f:f6:ba:86:58:a9:91:ef:bd:c5:ad:c0:ac:5a:02:cc:03:
         78:e3:e4:96:3c:53:9b:4b:da:59:63:c2:17:86:1e:21:83:40:
         4b:65:50:54:41:68:0a:8e:46:7b:95:35:ef:d4:0d:a6:ba:df:
         f3:37:51:97:2f:0f:f1:46:9d:8b:cc:03:c6:18:6a:cd:cc:e1:
         5d:0c:5e:75:ba:5c:01:2e:d9:cf:e9:03:32:a9:3b:15:43:ad:
         0d:b4:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----