Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File:                     ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier:          ZiynkCLNI7CRNPNCtXcyPUWr4fpf2aoLggWGH3RbWx0=
Subject key identifier:   11:3C:C6:37:F6:9F:C0:9E:01:E9:C5:78:DE:A7:4E:40:F8:8D:49:9B
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer:       /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial:       01962E98D3C7CCBC0135C90D314C8EB295F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number:          0CDF
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: ltMli7XSQ47GjPMaD0YKw/RJuguTDkRjwiqUoZoovXE=)
                          2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d3:c7:cc:bc:01:35:c9:0d:31:4c:8e:b2:95:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=113cc637f69fc09e01e9c578dea74e40f88d499b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:2a:3e:07:79:48:6f:28:e5:d2:a4:ff:b2:
                    1f:78:5b:50:97:1c:c7:3a:61:42:dc:95:8f:4a:2b:
                    4f:1a:f3:ba:ba:01:e2:ac:71:1d:24:e3:5e:85:81:
                    21:d1:b6:8b:54:e3:56:ff:4c:14:d4:5e:10:93:51:
                    d5:d4:52:ea:6e:07:80:f8:0a:b6:26:b7:18:a8:88:
                    51:8e:f7:dc:5f:53:aa:ff:2c:f0:4e:0a:3e:31:e2:
                    24:ba:38:ed:9e:f2:19:6d:94:b9:a9:9b:9c:a6:b6:
                    fe:35:3e:2c:6a:4c:89:c7:b2:d9:1a:fc:54:fd:b6:
                    c7:fc:71:d5:a4:e7:ca:7b:47:da:9e:ee:16:7f:55:
                    62:7f:42:a0:25:f4:2c:19:cc:77:db:4b:be:53:98:
                    f7:72:f2:8d:88:18:57:e8:31:1e:74:88:63:13:dc:
                    e4:04:de:64:cb:77:63:dc:87:00:48:0e:7a:2b:6e:
                    22:4f:83:68:04:c1:a8:87:44:40:6a:90:55:0c:46:
                    8c:bc:74:bf:b0:29:66:ee:7b:53:88:2c:e8:3e:e1:
                    2e:9d:47:7d:db:95:e5:39:47:13:01:62:88:a3:bd:
                    56:11:9d:b2:0d:0c:72:c5:af:c4:cc:42:16:91:f1:
                    f1:33:60:2a:4a:97:93:67:07:f1:bc:ab:82:97:7e:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3C:C6:37:F6:9F:C0:9E:01:E9:C5:78:DE:A7:4E:40:F8:8D:49:9B
            X509v3 Authority Key Identifier:
                keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:84:0e:c4:bd:71:64:56:ac:34:d6:c1:b3:fe:db:c2:0a:98:
         6c:b4:43:4e:6e:fd:6d:91:03:50:8d:df:e8:40:33:89:d5:55:
         12:c1:56:71:eb:60:dd:90:5b:92:65:8e:cd:ed:4c:22:8b:4b:
         ae:95:2f:28:95:ee:e6:f3:2f:15:7e:e6:c2:6e:47:a7:86:44:
         85:7d:c6:2e:26:55:22:3c:6b:e0:ce:45:03:5d:8d:b9:ea:f8:
         63:d7:fc:64:84:8e:df:c7:d3:7c:ff:3b:2c:ff:b0:d6:2a:8d:
         a1:78:6b:3e:11:02:8d:db:41:8c:3f:cc:d4:a3:a8:4f:1b:4c:
         84:ac:59:3f:52:99:bb:d0:2e:f0:06:22:b9:64:ea:34:f5:10:
         45:2a:af:d4:41:51:11:5e:0c:38:67:ce:08:c8:6b:6e:e6:83:
         b4:9f:a2:f7:a9:6a:ea:9f:48:58:23:1d:3a:c7:e8:95:ee:dd:
         20:7f:09:d1:e7:81:18:5c:22:b1:bb:73:5b:d2:ca:9e:c2:69:
         28:92:58:aa:74:8f:f8:35:91:ea:ae:62:c0:c7:90:ce:5f:0a:
         57:41:25:cd:e8:cf:bc:c9:f9:b4:0a:de:4b:b8:1d:e1:0e:93:
         77:2e:03:e0:92:45:76:ef:e1:f6:1f:46:6b:7d:58:90:ce:09:
         32:09:b1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----