Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File:                     plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier:          bDvMH6vK4t0/C1eghU3jXbBmUBRYhTmHCji+u+Eb7PY=
Subject key identifier:   E8:A1:22:B3:8A:04:79:73:D4:E1:E7:32:DD:6E:85:44:40:BE:14:F5
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer:       /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial:       0194BBCDEBA2B5F0DAEA5ACA2C8DA057B651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number:          0901
Signing time:             Fri 31 Jan 2025 10:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:22 +0000
Files and hashes:         1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: k2Cfgz1EIY2ABVdu2YnVh2KhPSBqGBD+tzgAbaAZHUY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:eb:a2:b5:f0:da:ea:5a:ca:2c:8d:a0:57:b6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
        Validity
            Not Before: Jan 31 10:00:22 2025 GMT
            Not After : Feb  1 10:00:22 2025 GMT
        Subject: CN=e8a122b38a047973d4e1e732dd6e854440be14f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:ee:54:af:ad:27:02:8d:a1:85:18:f5:28:
                    16:a2:3a:80:a8:f7:ec:b8:22:6b:ff:3d:62:b6:28:
                    80:d0:e7:11:37:83:d3:33:ce:2a:87:bd:86:fa:b4:
                    a9:3c:cf:d1:8f:3b:0c:a3:3b:d0:c1:6c:a5:c4:a4:
                    c5:b9:4c:1c:0f:dd:10:d2:c4:e2:19:43:17:5a:9b:
                    20:e3:28:49:e3:e5:d5:31:b0:46:63:19:17:e9:b5:
                    bf:cb:7a:27:d7:28:4c:71:fa:db:08:dd:d9:39:9e:
                    ac:c8:a5:e6:8f:2d:00:6b:a7:b3:f7:a4:79:e1:77:
                    b7:7c:16:78:43:8e:d5:17:41:a7:fd:2e:21:ad:9e:
                    04:fa:aa:34:31:15:92:f7:df:6f:1c:8a:46:e3:6f:
                    52:bb:30:76:bd:be:6c:52:2d:14:82:17:b2:8b:b3:
                    d6:06:c4:90:26:e5:2d:2d:98:7f:03:d7:15:9b:7f:
                    73:ac:74:50:88:ec:1c:40:6b:0f:46:31:76:2a:18:
                    40:25:c8:76:69:60:2e:43:f4:66:8d:17:80:87:2e:
                    31:73:12:46:00:e7:15:aa:d0:c8:2c:e1:75:f8:73:
                    cd:5d:b4:2c:c1:0b:2f:57:4f:55:07:dd:3c:32:2e:
                    6c:93:63:94:3f:09:6a:2f:4f:e2:4d:e4:d6:56:56:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:22:B3:8A:04:79:73:D4:E1:E7:32:DD:6E:85:44:40:BE:14:F5
            X509v3 Authority Key Identifier:
                keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:98:90:33:f3:0d:75:0f:0b:2f:5c:9f:cb:c0:9f:13:df:6a:
         f6:99:7a:9a:d7:b7:fc:ce:d2:17:ce:ad:aa:d7:4d:46:6c:af:
         d9:4e:d3:14:07:43:e1:87:dd:a3:ff:0b:51:05:e0:ec:41:5b:
         e4:1b:69:62:32:35:0c:cc:94:f6:9b:ce:a1:39:5e:08:fd:3e:
         c5:87:71:a6:e7:99:dd:fb:9b:c4:fb:e2:41:05:32:45:37:e9:
         46:27:8e:90:be:e6:6f:c6:f5:92:5a:a0:10:17:32:97:ec:31:
         35:6d:64:2c:7e:a5:5d:0e:e6:d5:0b:0f:06:b3:4c:4e:24:d7:
         41:ab:14:4a:e8:ae:89:91:99:bd:67:08:70:c3:5e:6e:82:19:
         27:13:fd:77:4d:05:54:23:03:cd:0a:c4:ef:d3:1b:a4:d4:5b:
         d6:59:18:2f:80:c3:51:f8:c1:86:e9:ae:47:21:2d:aa:0d:e6:
         54:eb:4d:8c:bf:17:0d:9f:d1:ab:3f:38:20:63:db:b1:42:f2:
         d2:ea:df:d6:01:4f:49:65:44:82:6f:27:76:b1:53:2d:21:59:
         c8:51:2f:fc:a9:39:f9:57:dc:11:d2:03:74:01:0e:a0:1b:dc:
         13:85:cb:95:78:fa:cf:58:5a:9d:a5:17:70:b1:ff:dc:29:83:
         5e:63:99:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeuitfDa6lrKLI2gV7ZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTY4MzA0OTkzNzg2OThlM2U2ZTY1OTc5OTNjZDNiMDBl
MWRjY2MwHhcNMjUwMTMxMTAwMDIyWhcNMjUwMjAxMTAwMDIyWjAzMTEwLwYDVQQD
EyhlOGExMjJiMzhhMDQ3OTczZDRlMWU3MzJkZDZlODU0NDQwYmUxNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxobuVK+tJwKNoYUY9SgWojqAqPfs
uCJr/z1itiiA0OcRN4PTM84qh72G+rSpPM/RjzsMozvQwWylxKTFuUwcD90Q0sTi
GUMXWpsg4yhJ4+XVMbBGYxkX6bW/y3on1yhMcfrbCN3ZOZ6syKXmjy0Aa6ez96R5
4Xe3fBZ4Q47VF0Gn/S4hrZ4E+qo0MRWS999vHIpG429SuzB2vb5sUi0Ugheyi7PW
BsSQJuUtLZh/A9cVm39zrHRQiOwcQGsPRjF2KhhAJch2aWAuQ/RmjReAhy4xcxJG
AOcVqtDILOF1+HPNXbQswQsvV09VB908Mi5sk2OUPwlqL0/iTeTWVlaX+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOihIrOKBHlz1OHnMt1uhURAvhT1MB8GA1UdIwQY
MBaAFKZWgwSZN4aY4+bmWXmTzTsA4dzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUt
NjU2NDcwMzQzNGUyLzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUtNjU2NDcwMzQzNGUy
LzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5iQM/MN
dQ8LL1yfy8CfE99q9pl6mte3/M7SF86tqtdNRmyv2U7TFAdD4Yfdo/8LUQXg7EFb
5BtpYjI1DMyU9pvOoTleCP0+xYdxpueZ3fubxPviQQUyRTfpRieOkL7mb8b1klqg
EBcyl+wxNW1kLH6lXQ7m1QsPBrNMTiTXQasUSuiuiZGZvWcIcMNeboIZJxP9d00F
VCMDzQrE79MbpNRb1lkYL4DDUfjBhumuRyEtqg3mVOtNjL8XDZ/Rqz84IGPbsULy
0urf1gFPSWVEgm8ndrFTLSFZyFEv/Kk5+VfcEdIDdAEOoBvcE4XLlXj6z1hanaUX
cLH/3CmDXmOZ3w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:05 2025 by rpki-client