Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File:                     aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier:          2ERVsuTB3TrHd0z172vvNhaBeBigvan+VTVa7IMCZbk=
Subject key identifier:   49:BC:D5:1A:97:44:EB:5F:DC:94:EB:76:52:44:D4:A2:DB:6E:D1:E0
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer:       /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial:       0195E12214279D0537D9CAD17998F0AF999C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 09:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:01 +0000
Files and hashes:         1: PXiDqudXgKmzyY9YiAzq4s46dWE.roa (hash: 5TBNAVFbP2ChjbJK1BJdzLBXEkgEKjRymZk/TEDkDEM=)
                          2: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: CjzX4KZZYxge/HBKFmtqsk8Aqtd8g2idYhGSSKVNpkU=)
                          3: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (hash: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=)
                          4: yX0Sl7S1CDrX-G7aHHH7HF-0TIU.roa (hash: Y4Ls4yPY2OiPCKdVraBwQCc1dEKhm1VWZBF9yLJSXfM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:14:27:9d:05:37:d9:ca:d1:79:98:f0:af:99:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
        Validity
            Not Before: Mar 29 09:01:01 2025 GMT
            Not After : Mar 30 09:01:01 2025 GMT
        Subject: CN=49bcd51a9744eb5fdc94eb765244d4a2db6ed1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:75:6a:d4:8d:f8:6f:16:b9:b0:32:ad:cc:
                    10:83:45:ee:f0:fb:58:62:f0:11:23:48:ef:09:6d:
                    33:77:5e:14:62:c7:d0:87:b4:02:db:d1:ec:49:e2:
                    31:09:49:30:ef:76:98:61:aa:78:9e:42:79:53:53:
                    5f:34:17:fe:c3:20:25:09:99:87:f6:2a:0b:08:04:
                    d6:b4:1a:62:6c:e7:f7:28:5c:73:36:b8:e6:ea:9a:
                    0b:32:0a:f5:31:a0:0d:49:e0:23:b4:61:01:03:da:
                    04:53:05:1f:ac:9a:6e:b9:ad:9e:51:1e:bc:a8:a0:
                    a3:0a:d2:27:f1:fc:94:8b:e3:6f:11:3e:05:7b:83:
                    b7:63:d3:cd:23:fd:73:80:13:99:7c:be:e0:36:50:
                    b9:db:26:98:fb:b8:cc:ba:b8:61:47:4d:80:88:0c:
                    fc:04:7e:be:d3:ee:4c:39:01:31:e5:22:32:71:4d:
                    38:7b:d4:c7:cf:ee:1f:ea:00:c6:29:14:be:93:2a:
                    a8:5c:a0:3d:9f:55:20:5c:92:1f:c4:99:60:bf:fc:
                    c8:5b:c7:d7:64:c9:2c:4e:a1:2f:fc:98:2f:69:64:
                    7c:ae:c7:a3:cd:f1:d6:d0:30:13:37:f8:4b:ba:ab:
                    33:a6:bc:39:8e:6e:72:5b:12:41:d1:55:4d:56:26:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BC:D5:1A:97:44:EB:5F:DC:94:EB:76:52:44:D4:A2:DB:6E:D1:E0
            X509v3 Authority Key Identifier:
                keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e9:28:fd:e7:49:8f:ff:1f:b2:e3:57:01:a8:d8:a7:f4:43:
         c1:32:20:10:e3:ee:fb:d8:9b:1d:6a:28:70:56:1d:2d:ce:c2:
         cb:09:cb:fd:f0:ce:80:09:cc:64:99:d7:20:bc:04:18:90:3a:
         ae:37:9a:db:26:35:15:bd:41:f4:1b:83:be:b4:38:23:e6:8f:
         7e:46:76:90:5e:69:a6:4d:bf:89:9d:4a:37:ad:05:72:ce:8e:
         7f:cd:64:bc:6b:2a:1b:34:c2:98:36:00:8d:97:8b:e2:d3:0e:
         7a:d2:b0:04:5b:56:6c:38:f4:ab:a2:01:26:26:79:34:4d:0d:
         19:24:4c:4d:c2:12:9a:61:40:27:90:1e:4d:b8:35:fb:7f:94:
         50:e0:ba:36:dd:7e:ae:f0:a6:92:14:ac:91:cc:af:b4:d4:6b:
         1a:4e:1f:45:24:67:d4:5e:5a:0d:b2:68:20:66:1e:3b:82:7e:
         8e:40:0d:89:f0:27:e1:46:25:67:d7:f5:59:c3:70:33:ba:26:
         fe:17:63:55:57:13:2b:15:1b:c8:6d:d7:59:d1:75:ed:0f:df:
         0e:8b:57:0e:26:78:14:1d:dd:6f:ea:ff:d5:4c:43:73:50:6f:
         6e:6e:78:7b:3f:fd:cd:1c:03:ee:aa:e0:e7:04:03:f1:cd:d6:
         18:eb:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----