Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File:                     sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier:          h4FFkOLx63HwhyNnR01yvpdywoRrwOoy1Ai1t+aefjA=
Subject key identifier:   55:A8:F3:CB:3D:BD:D0:07:62:79:23:2B:11:9E:05:C3:A5:92:10:7A
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer:       /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial:       01962E2B3854938C0201F1539A5A293B140B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
                          2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: LnVF58C7MTagJwhUWVwakB/xXDozXpdQbyUIOZ1/lc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:38:54:93:8c:02:01:f1:53:9a:5a:29:3b:14:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=55a8f3cb3dbdd0076279232b119e05c3a592107a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6d:2d:d6:08:71:fe:c4:28:02:b9:4d:c1:73:
                    ab:9d:8e:91:a6:a0:1d:79:dc:45:26:c8:7f:68:a2:
                    f0:71:45:04:dc:84:25:64:83:9c:9a:54:3a:92:0e:
                    ae:99:85:55:fa:e7:6e:25:f2:67:fb:1e:76:fb:3b:
                    ca:fe:04:0d:06:43:f3:d3:c7:94:c1:76:a0:c9:f9:
                    17:34:c6:8e:73:70:64:84:6e:66:05:71:ad:a4:cb:
                    18:08:ad:39:bc:33:98:c7:8d:03:81:a8:79:14:e3:
                    a9:6b:5e:2f:5e:42:35:9f:72:17:e2:16:a3:16:86:
                    1c:8d:b5:19:2e:79:9b:c9:97:a9:ab:fa:bf:5e:08:
                    b2:1c:a3:5f:75:c5:19:69:db:ba:5a:2a:30:50:83:
                    06:9d:dd:24:40:c0:53:f6:43:86:b7:f4:1c:11:44:
                    bb:d5:be:ec:72:a5:8b:05:60:3a:77:5d:34:cf:eb:
                    01:2e:13:14:05:96:23:9f:f8:8b:0a:be:73:b6:c0:
                    e3:81:46:21:ee:d2:3b:59:d2:e8:12:dc:a3:f6:a4:
                    21:7a:da:26:4a:93:63:17:ee:a0:46:a1:a5:43:eb:
                    34:31:dd:b7:63:35:e8:12:06:41:99:c8:c0:64:4d:
                    46:24:e5:38:e9:46:87:f7:8b:a5:4e:7e:c9:c3:97:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A8:F3:CB:3D:BD:D0:07:62:79:23:2B:11:9E:05:C3:A5:92:10:7A
            X509v3 Authority Key Identifier:
                keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:2a:a7:f9:37:8e:8d:9a:5a:1b:be:d7:92:5e:95:1e:47:
         0d:64:ea:bb:60:e9:a2:f5:51:b6:2a:e3:08:a5:77:5d:7b:50:
         eb:b9:e8:e9:2a:9c:5b:aa:67:35:0c:45:01:06:15:c5:e2:0c:
         55:6b:3a:78:87:ef:75:1a:ab:d6:51:ea:c1:92:a6:75:6c:d2:
         ab:db:4f:a2:83:6d:de:58:0c:5a:bc:c7:34:f9:ae:41:da:ff:
         06:bd:7a:59:80:a7:cb:2c:7d:e1:ea:98:ed:92:bf:7c:c1:08:
         5b:84:2b:34:04:2b:2a:e9:71:95:ec:d4:75:44:36:d3:69:7a:
         0f:8f:72:6d:85:42:08:a0:88:3f:2c:a2:68:2f:81:2b:9f:56:
         0f:96:d5:d2:e6:42:83:8e:95:95:cd:79:8d:f7:12:e0:87:a2:
         f7:80:6c:97:18:9b:99:d0:50:b6:00:a2:3e:98:91:2f:38:bc:
         01:d4:9e:4d:27:5e:30:35:1a:f6:8d:74:fc:9e:c5:b0:52:e7:
         30:2d:eb:8b:09:a4:32:6e:c1:d1:37:3d:a7:05:3c:6b:99:2d:
         d4:71:b0:a2:dd:3a:8a:20:75:70:5f:60:a8:80:d7:69:3e:e3:
         a7:b2:9f:17:2f:0c:30:11:5d:d4:04:05:02:dd:4e:f3:9f:01:
         75:ab:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----