Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
File:                     ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json)
Hash identifier:          jwg3ZIT0gCRq7tJG3ZyKFLinHdngkpEEn2beeYBObVo=
Subject key identifier:   C4:BB:6B:37:16:2D:A1:F9:4A:DF:19:F6:43:F7:F7:33:42:E9:E0:7B
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Certificate issuer:       /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial:       01962DF3E215D631D96329A11B51EEDF9EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: VBbEOhl3LXznstJ+q5mDUTzxajUQzjgOnKQbD4I53kw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e2:15:d6:31:d9:63:29:a1:1b:51:ee:df:9e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=c4bb6b37162da1f94adf19f643f7f73342e9e07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:a6:91:75:ea:cf:3c:83:7d:ac:84:eb:82:
                    32:6f:0e:d1:a5:20:14:41:7d:f4:0f:18:3a:27:d4:
                    04:a3:6c:39:aa:eb:5f:63:cc:5d:48:12:d5:aa:3c:
                    92:36:12:3b:e5:92:81:2a:b5:ae:e9:83:56:96:b2:
                    b5:b9:2b:35:d7:a8:24:6d:44:9c:aa:1f:38:6e:b7:
                    6d:e6:8b:7d:b4:5a:b9:89:d3:29:65:e4:32:e6:f9:
                    29:76:04:13:92:e9:dd:e8:8b:f2:e9:d4:f0:5a:06:
                    38:9b:a7:c9:d9:b6:8f:f1:cb:77:2d:09:63:40:d6:
                    7b:b0:78:ee:3f:18:c0:b8:de:f0:9f:3c:b3:21:14:
                    54:98:99:7b:32:72:41:fc:8d:e5:a6:13:a3:11:65:
                    ba:7e:0f:58:c6:79:58:be:4c:42:ef:1f:cc:dc:c4:
                    45:70:23:06:8e:01:d5:ff:b4:37:48:07:36:c0:17:
                    85:7b:64:4d:ac:b1:77:cf:ed:93:ef:59:60:8c:98:
                    ff:8b:92:8e:67:fd:60:c8:e6:87:d0:af:e2:8d:f2:
                    3f:74:82:24:2c:7d:86:0d:74:66:6b:47:d7:05:1f:
                    16:04:eb:74:52:04:cc:f3:5f:50:e5:43:0b:95:ff:
                    f7:b9:3f:b3:0b:d7:57:44:43:28:f7:f1:54:80:88:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BB:6B:37:16:2D:A1:F9:4A:DF:19:F6:43:F7:F7:33:42:E9:E0:7B
            X509v3 Authority Key Identifier:
                keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:60:ba:20:d4:a0:a1:bb:37:5e:e4:d4:48:8a:12:2c:d1:
         40:aa:18:53:11:37:2a:6a:c9:1a:7b:fe:58:3b:e3:e2:41:91:
         95:7b:e0:28:37:c1:bb:32:62:74:20:be:f6:12:5f:1f:0b:83:
         4f:d3:dd:b2:c9:34:54:c3:04:18:38:a0:31:01:2f:19:56:b3:
         ac:67:a0:8d:03:3e:35:ef:ae:0a:11:ca:5a:85:a8:ae:9b:51:
         dd:92:01:2b:f8:fc:ad:2b:04:d8:ec:b4:5a:b7:84:af:d9:c0:
         77:da:0d:fa:03:60:35:90:fb:64:f7:fb:4a:30:9e:0e:93:f8:
         d0:fb:fb:33:0d:e7:ca:75:f2:b4:57:14:9c:05:f9:2c:a6:26:
         73:c0:c4:da:db:91:7b:04:82:2e:6e:24:a5:28:a7:23:95:64:
         9f:f4:da:bf:32:0f:73:6c:97:2d:99:36:ae:4e:0b:c5:6f:9a:
         0f:69:8d:9d:6f:9a:8a:ab:88:92:0e:8e:12:dc:9a:7b:0d:20:
         e3:c6:db:98:b1:7d:cf:1a:d8:9d:31:38:20:35:9c:11:14:c7:
         aa:8f:4c:8f:a9:04:fe:c1:a1:7e:00:08:13:e8:8a:e6:6f:37:
         1a:c0:d7:33:9b:ba:6a:2e:8d:f8:cf:5f:04:82:ce:84:97:c2:
         41:3e:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----