Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
File:                     sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft (raw, json)
Hash identifier:          aJ456XtOQFv325Be2P0r21xJ6woDViM07lTGJsFaBDQ=
Subject key identifier:   2B:3F:BE:59:38:B9:60:5A:F1:48:57:9A:E9:7D:E9:20:41:E8:A7:DB
Authority key identifier: B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
Certificate issuer:       /CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Certificate serial:       01962ECFA8424E794285A52C573991B76797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
Manifest number:          0188
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl (hash: WsbCULQuEJ4s84v3//6q/YiStJdsYq9ftZxXmHQ9C/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a8:42:4e:79:42:85:a5:2c:57:39:91:b7:67:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=2b3fbe5938b9605af148579ae97de92041e8a7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:d3:34:2f:40:93:a7:49:0b:f9:85:65:da:
                    b4:d8:46:ee:33:1c:8f:70:58:95:e1:60:28:19:70:
                    ef:4a:59:b1:ae:22:0a:1a:2a:8d:90:b0:b9:3f:2b:
                    ba:4e:1e:6c:4d:71:6a:27:5a:ab:84:9c:af:a1:2d:
                    0d:25:06:a9:b8:4c:88:e1:ff:7f:7a:80:6c:ab:78:
                    a0:85:5c:13:68:dd:82:3a:76:6d:cb:55:b3:3a:a2:
                    23:3e:85:46:5e:b9:61:05:da:ad:de:87:52:f1:67:
                    29:4d:8e:f9:26:27:95:67:11:0f:7f:cd:1b:7e:3f:
                    20:b0:7f:95:ed:48:12:02:92:b7:bd:a0:b5:b8:9e:
                    1d:d2:66:55:f5:f9:b1:48:87:49:14:16:ff:7e:40:
                    4e:3f:29:69:26:8b:da:45:a0:74:60:ce:03:18:50:
                    97:96:a2:b8:5e:b7:69:1c:12:c1:cd:b8:f8:b8:a8:
                    1d:41:46:0d:39:21:bf:d1:f5:b0:71:be:e2:f1:b4:
                    90:b4:47:0c:d3:25:9f:20:9c:94:21:0d:72:a4:5e:
                    31:c9:b8:58:d7:64:63:4c:7e:b5:9a:6a:37:e3:d2:
                    83:c7:6a:9a:c2:5a:42:4d:0b:f0:5b:97:23:c4:ab:
                    05:77:78:4f:40:5b:d7:d7:87:e3:b8:00:93:4a:92:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3F:BE:59:38:B9:60:5A:F1:48:57:9A:E9:7D:E9:20:41:E8:A7:DB
            X509v3 Authority Key Identifier:
                keyid:B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:fa:88:d3:34:10:c6:ef:e1:79:ff:ee:7a:96:1e:80:88:
         33:1e:9f:14:4c:a1:0c:b8:4d:dd:47:71:03:7d:37:31:88:8b:
         d2:ce:2a:29:b9:26:e4:6f:98:28:1d:c3:c5:dc:c0:5d:e1:96:
         02:6d:9b:08:93:24:b4:e5:1d:7a:12:c7:80:a1:ab:69:a2:44:
         5b:51:3b:30:56:34:d5:ce:5d:67:99:0a:b2:0d:9e:17:59:60:
         1f:e1:ca:03:fb:a5:c3:2b:06:f9:0d:36:fb:82:47:3a:09:81:
         4c:ef:da:9f:eb:32:c8:1d:35:92:10:bf:43:4a:bd:74:15:62:
         9d:6d:73:3a:39:36:63:7d:15:2e:91:58:4f:86:d6:0b:62:c5:
         9e:13:a5:f5:8e:d4:04:86:c4:e4:6e:68:46:45:2d:3c:e9:7b:
         bd:48:f0:0e:c4:66:bc:2a:61:a2:84:1b:b7:38:a7:c4:71:78:
         c5:06:8a:25:5a:bb:b6:91:60:54:ee:6e:90:14:d5:e1:ea:68:
         64:90:a3:40:29:63:a0:ac:46:9b:6a:dc:c6:fc:f4:af:01:83:
         cf:7e:4f:69:b9:fc:9c:5e:b5:03:e0:fb:7c:78:08:30:c8:a8:
         09:15:bf:60:5b:2f:3d:bf:4e:e5:8a:e5:9e:8c:39:08:dd:3e:
         9a:31:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----