Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a0571c-21a6-41d3-afbf-f6361ab49706/1/e-SQu_RY7D8azUNOM6BLbmejQ9Q.mft
File:                     e-SQu_RY7D8azUNOM6BLbmejQ9Q.mft (raw, json)
Hash identifier:          dgeCWu+GAzGLr8Zwx8d16qd4yglmESkoFPhJdlyUpCc=
Subject key identifier:   FF:8F:01:14:00:BA:BD:E7:C6:6C:4A:87:0C:52:A7:E5:10:F4:B0:51
Authority key identifier: 7B:E4:90:BB:F4:58:EC:3F:1A:CD:43:4E:33:A0:4B:6E:67:A3:43:D4
Certificate issuer:       /CN=7be490bbf458ec3f1acd434e33a04b6e67a343d4
Certificate serial:       0186C398F5A9C8BEFBE38ECD498B3B068EAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-SQu_RY7D8azUNOM6BLbmejQ9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a0571c-21a6-41d3-afbf-f6361ab49706/1/e-SQu_RY7D8azUNOM6BLbmejQ9Q.mft
Manifest number:          A7
Signing time:             Wed 08 Mar 2023 23:40:26 +0000
Manifest this update:     Wed 08 Mar 2023 23:40:26 +0000
Manifest next update:     Thu 09 Mar 2023 23:40:26 +0000
Files and hashes:         1: e-SQu_RY7D8azUNOM6BLbmejQ9Q.crl (hash: +gXsh/fQQiNzL/V5gxhpopqtn+XBxWhuEiOJePTfMPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c3:98:f5:a9:c8:be:fb:e3:8e:cd:49:8b:3b:06:8e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be490bbf458ec3f1acd434e33a04b6e67a343d4
        Validity
            Not Before: Mar  8 23:40:26 2023 GMT
            Not After : Mar  9 23:40:26 2023 GMT
        Subject: CN=ff8f011400babde7c66c4a870c52a7e510f4b051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:92:51:af:95:93:1a:e6:45:84:e3:cb:91:
                    ab:4c:d7:ed:40:bf:cb:a8:6a:ca:c3:7c:8f:a3:8d:
                    f6:a8:9c:70:5d:cf:43:73:69:ea:d5:e3:c8:a3:d5:
                    50:01:0a:2b:ef:2e:3c:dd:11:eb:22:32:75:5a:88:
                    16:2c:63:1e:0c:69:dd:58:f4:c5:d3:0d:fb:46:70:
                    93:3d:54:1c:e1:d7:95:ea:ca:71:26:b8:3d:89:f3:
                    9f:8a:77:83:09:14:4b:b8:1b:03:5f:d5:e8:92:d4:
                    a7:b5:9d:4a:f3:35:89:ce:53:4d:c5:79:54:42:16:
                    49:bc:3d:26:1e:2e:e3:0a:90:fc:50:16:d3:e1:ea:
                    b8:f4:8f:20:2d:c5:b4:d8:d4:6d:5e:25:29:cf:03:
                    ea:93:36:0d:0e:2a:ea:0c:0a:7e:8c:21:0e:2b:18:
                    59:26:26:17:be:8c:39:f5:23:9d:59:0a:45:d2:5d:
                    bf:21:80:37:2a:90:71:3e:21:e7:07:70:12:00:05:
                    a6:87:af:26:1e:fe:a0:c1:44:82:0f:91:9c:e6:b7:
                    05:52:2c:19:42:b2:71:10:e1:fb:c2:bb:87:20:9c:
                    bb:73:19:35:88:0a:84:ad:0e:1d:e1:41:5c:e7:88:
                    ed:fa:bf:ec:11:ef:c7:9c:3e:9a:ba:ac:44:75:27:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:01:14:00:BA:BD:E7:C6:6C:4A:87:0C:52:A7:E5:10:F4:B0:51
            X509v3 Authority Key Identifier:
                keyid:7B:E4:90:BB:F4:58:EC:3F:1A:CD:43:4E:33:A0:4B:6E:67:A3:43:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-SQu_RY7D8azUNOM6BLbmejQ9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a0571c-21a6-41d3-afbf-f6361ab49706/1/e-SQu_RY7D8azUNOM6BLbmejQ9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a0571c-21a6-41d3-afbf-f6361ab49706/1/e-SQu_RY7D8azUNOM6BLbmejQ9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:01:bd:e0:20:79:5d:1b:44:d8:64:c9:fa:5d:4f:44:e2:e1:
         71:04:8b:73:84:96:cb:51:c1:50:3e:4b:aa:b0:79:83:b7:cb:
         97:cd:dc:4e:b8:3b:b3:c1:37:38:77:c9:ec:5a:71:ee:0d:07:
         78:6e:c5:84:f1:ad:42:fc:52:34:90:ec:1b:88:16:22:63:c0:
         16:9e:97:a3:77:82:9a:37:b1:65:73:13:00:8c:1f:b4:ba:f2:
         10:16:41:96:23:5b:d5:7d:7f:3d:9f:96:32:b9:72:fb:f5:ec:
         1d:e0:a4:f9:f4:9c:6f:d2:89:e2:d7:c9:4a:5d:b1:3e:e1:02:
         7b:cb:fc:5b:e3:1c:3a:6e:f0:df:28:0e:97:dd:26:0c:03:7b:
         70:ee:e6:80:d1:70:18:2c:85:12:20:03:0f:ac:bd:9f:6f:df:
         20:c0:ea:ce:94:75:8f:1d:5d:cb:19:1e:86:f3:e6:38:de:34:
         43:a4:5c:98:58:54:8c:07:1f:cd:02:e1:69:96:08:4d:a8:7b:
         6a:e9:db:d7:f3:53:6b:90:6c:25:0d:42:22:c2:54:4f:ae:23:
         db:f3:25:57:f5:11:d2:7b:e9:c7:49:be:be:41:7e:55:c3:cb:
         e4:dc:04:fc:26:5e:f6:e6:4a:ed:e7:76:c5:f5:0e:e5:cb:36:
         c0:02:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----