Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File:                     aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier:          BeZBzHfFndaHulyadJzMRSxbexEC8uZfnBeCYhLiOX4=
Subject key identifier:   0E:AC:56:56:CA:D5:E1:A5:29:71:04:D0:BD:27:E1:12:8E:4B:7C:02
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer:       /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial:       0195E15902A4A54F998EF8AC12BD10BA924A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number:          0B98
Signing time:             Sat 29 Mar 2025 10:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:01 +0000
Files and hashes:         1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: QPnWHU6NC2b+309hOAhteo5JBaIiHXzsHnJM/7xObz0=)
                          2: cQgNKWK-mfm6f4cfHvy3mXBeUkc.roa (hash: Eznu0WnXIaaF/obgJMif142Kzoju4lKJjzxlXuNlG4c=)
                          3: mShmo_W6HwOVfRB9AY5LNAbBfho.roa (hash: 6BJcHM6l3PuBUi+3plKY0AbWfl02EmVTYEtLpT66zmM=)
                          4: qnpsS1IYjsvMaOko98oEnyZdTNQ.roa (hash: I8xfQRtglbJjeOJDoN+r4tmjRQM6wlmlXVGeos6jp20=)
                          5: sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa (hash: CHsyF/lbu540pUgLNegSNWtBQrKxYJGXewEQkJ4NBLY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:02:a4:a5:4f:99:8e:f8:ac:12:bd:10:ba:92:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
        Validity
            Not Before: Mar 29 10:01:01 2025 GMT
            Not After : Mar 30 10:01:01 2025 GMT
        Subject: CN=0eac5656cad5e1a5297104d0bd27e1128e4b7c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:eb:7d:43:68:f0:be:44:99:55:5c:a9:5f:
                    b3:84:51:e2:c4:27:00:fd:b3:b7:23:4c:98:7b:86:
                    9e:8c:f9:c8:7d:ea:2c:6a:0a:de:dd:7b:cc:37:1b:
                    af:6c:25:26:88:93:69:6f:71:3c:db:88:8e:d9:6d:
                    08:96:29:19:56:94:29:e2:82:6f:a2:58:c8:ab:0d:
                    3f:60:ef:a7:0f:b3:18:3e:dc:64:49:98:f6:01:8b:
                    56:ac:b8:ab:18:aa:55:54:11:bf:71:18:93:9c:19:
                    f5:6e:86:a5:d7:67:8c:f2:f3:02:6d:2f:a4:d6:0e:
                    e5:39:87:39:01:89:0e:8f:a0:72:c7:d7:f3:14:8a:
                    33:0c:93:d2:d9:df:89:1a:7f:04:2c:bb:9b:4b:9e:
                    ca:41:4b:63:b1:3a:46:39:39:b5:53:3d:46:f7:7b:
                    ec:98:29:55:c9:46:f0:c9:fb:70:1a:75:64:c3:bf:
                    51:85:fb:60:1c:3f:d8:3e:df:82:50:b3:79:17:b0:
                    d5:3a:19:6c:ac:59:89:38:c1:15:c9:13:6e:46:a4:
                    16:61:02:27:03:4d:fe:f0:ba:dc:16:3c:d4:cb:08:
                    62:5c:52:23:ea:fc:e3:81:22:3b:d0:b7:85:88:e8:
                    ff:bb:d9:83:93:a8:98:14:6f:d8:db:07:d3:4e:29:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AC:56:56:CA:D5:E1:A5:29:71:04:D0:BD:27:E1:12:8E:4B:7C:02
            X509v3 Authority Key Identifier:
                keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:49:8e:5e:32:d8:55:0a:b6:ca:df:cb:35:be:68:4d:2f:e6:
         d2:ff:01:dd:a0:fc:03:7f:ef:5c:9c:5a:2d:76:20:29:8f:62:
         f2:73:9b:46:b1:c2:da:54:32:99:fe:46:e3:47:bc:d0:bd:8d:
         ac:10:59:2b:c6:4a:18:fc:3f:42:02:f0:a3:2c:12:bc:67:77:
         9a:d4:76:e4:c7:c8:b3:72:05:ee:55:81:82:58:54:d4:1d:ae:
         a7:39:3d:1c:81:bf:22:56:ec:aa:40:5a:74:d8:e7:02:00:70:
         84:9b:8a:59:89:4e:99:d8:b7:a1:d1:d9:f2:0c:dc:6c:19:cc:
         dc:ee:c3:8b:f1:b3:66:bf:31:2f:38:4d:d2:67:95:55:20:71:
         33:02:27:28:d5:61:10:0a:04:a5:35:90:fe:37:dc:08:ff:01:
         04:4e:d5:41:37:44:eb:39:46:4c:98:65:c5:52:da:80:77:8f:
         24:0e:14:d7:2d:c1:9b:0c:87:d5:76:f3:be:9d:ce:a5:7c:d0:
         e4:25:7c:15:9b:3c:69:1e:13:06:60:b3:27:64:76:37:6f:87:
         cf:c5:94:f6:54:fc:cf:4d:15:30:83:3e:8c:7d:82:a5:89:6a:
         66:01:14:99:5b:6f:5d:c7:67:22:ba:44:9f:c9:10:3a:a6:00:
         79:0b:34:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----