Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
File:                     plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json)
Hash identifier:          vE4aZkUeQ0LJHWyECEkbVpYfV8OI+wPRkMtnmRkUbjc=
Subject key identifier:   C8:83:67:0A:30:1F:3B:F0:1F:74:6B:55:C2:A4:AB:1A:5B:8D:A1:A1
Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC
Certificate issuer:       /CN=a656830499378698e3e6e6597993cd3b00e1dccc
Certificate serial:       01962E98ECD34CCC2E82C8D1F778D435C25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft
Manifest number:          09C1
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: ZHoPtyMS5QgaEsIGlzYHYUGKsFkz0zyA1htZblF11qM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ec:d3:4c:cc:2e:82:c8:d1:f7:78:d4:35:c2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=c883670a301f3bf01f746b55c2a4ab1a5b8da1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:df:0e:5d:20:af:31:2c:9a:0f:27:34:3e:
                    84:9a:57:7f:f8:1c:dd:bb:20:9b:65:91:9c:2c:67:
                    3f:99:f7:7e:9d:e0:72:0a:02:b4:d4:47:17:ce:4d:
                    a8:b9:8f:1d:3a:b5:3b:b9:43:24:a1:d7:bd:a2:4c:
                    35:92:c8:31:66:ef:5b:2b:64:34:51:fb:c0:d7:f6:
                    54:f9:a2:b3:de:0f:09:76:f8:bf:b0:88:38:97:1c:
                    c4:f1:56:77:d7:5c:97:6e:83:99:55:bd:9f:80:ed:
                    02:be:c2:1c:6b:40:e3:2e:22:d6:a4:e0:03:2e:5a:
                    11:2f:2c:db:50:93:48:e4:ea:52:30:3a:3e:e4:dc:
                    d0:b2:33:69:19:5f:9a:f9:aa:c4:2b:fd:ce:59:e3:
                    4c:85:33:65:78:63:d7:b9:7c:f9:a8:c3:24:2c:e3:
                    85:83:f5:7f:6e:c7:1b:37:ff:11:b2:85:13:be:1e:
                    f8:a9:0e:60:34:a5:9e:78:bf:4a:79:23:eb:01:a5:
                    0b:9e:bf:70:b9:2a:a0:62:07:8b:fc:00:4b:56:92:
                    7f:f5:44:af:dd:b8:a8:7b:8a:df:aa:0f:c2:24:c2:
                    5a:cb:39:1b:86:e7:41:8f:8a:fd:ba:84:f8:55:46:
                    25:8e:c5:ee:9a:c9:45:bd:e2:03:26:b9:bb:70:79:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:83:67:0A:30:1F:3B:F0:1F:74:6B:55:C2:A4:AB:1A:5B:8D:A1:A1
            X509v3 Authority Key Identifier:
                keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:9c:fc:c6:79:fb:5d:c6:53:71:19:3f:87:61:ee:7c:50:
         db:f4:f2:7b:70:65:64:f1:a3:07:01:21:fa:7a:45:a9:76:4f:
         13:0b:e9:37:98:fd:65:63:87:41:01:d4:5c:79:41:72:c2:da:
         03:25:f1:8f:71:67:74:47:59:da:ee:51:49:eb:58:ce:32:fb:
         fa:14:da:c2:1d:aa:8e:b1:bf:e3:25:d9:35:3f:c1:99:79:d1:
         2a:07:98:c0:0c:69:db:66:dc:6b:56:a1:ee:09:fd:05:13:aa:
         1d:f7:65:5c:fc:a8:3b:29:5a:49:6d:e0:3b:25:40:1a:46:51:
         0b:6b:86:86:d0:7b:f2:8c:da:af:21:8f:6e:48:ee:0a:8b:14:
         da:52:88:31:6d:02:dd:f1:d9:58:24:db:5c:7f:67:d2:d2:a3:
         c3:21:80:58:0c:58:35:56:ee:44:be:9b:73:18:26:a2:23:e2:
         d8:45:a1:8b:85:43:b4:21:59:be:af:3c:2e:14:46:a5:e8:4b:
         7d:84:28:42:77:3d:ce:2c:ad:00:57:81:1c:af:a7:af:35:03:
         6d:56:c1:ea:bb:14:e2:d9:27:7d:74:7b:70:0a:f8:fb:d3:38:
         3e:bd:db:5b:83:7e:45:52:d1:85:28:a9:e5:f3:f9:aa:56:43:
         cf:94:5c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOzTTMwugsjR93jUNcJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTY4MzA0OTkzNzg2OThlM2U2ZTY1OTc5OTNjZDNiMDBl
MWRjY2MwHhcNMjUwNDEzMTAwMTM2WhcNMjUwNDE0MTAwMTM2WjAzMTEwLwYDVQQD
EyhjODgzNjcwYTMwMWYzYmYwMWY3NDZiNTVjMmE0YWIxYTViOGRhMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNrfDl0grzEsmg8nND6Emld/+Bzd
uyCbZZGcLGc/mfd+neByCgK01EcXzk2ouY8dOrU7uUMkode9okw1ksgxZu9bK2Q0
UfvA1/ZU+aKz3g8Jdvi/sIg4lxzE8VZ311yXboOZVb2fgO0CvsIca0DjLiLWpOAD
LloRLyzbUJNI5OpSMDo+5NzQsjNpGV+a+arEK/3OWeNMhTNleGPXuXz5qMMkLOOF
g/V/bscbN/8RsoUTvh74qQ5gNKWeeL9KeSPrAaULnr9wuSqgYgeL/ABLVpJ/9USv
3bioe4rfqg/CJMJayzkbhudBj4r9uoT4VUYljsXumslFveIDJrm7cHl6iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiDZwowHzvwH3RrVcKkqxpbjaGhMB8GA1UdIwQY
MBaAFKZWgwSZN4aY4+bmWXmTzTsA4dzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUt
NjU2NDcwMzQzNGUyLzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUtNjU2NDcwMzQzNGUy
LzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayGc/MZ5
+13GU3EZP4dh7nxQ2/Tye3BlZPGjBwEh+npFqXZPEwvpN5j9ZWOHQQHUXHlBcsLa
AyXxj3FndEdZ2u5RSetYzjL7+hTawh2qjrG/4yXZNT/BmXnRKgeYwAxp22bca1ah
7gn9BROqHfdlXPyoOylaSW3gOyVAGkZRC2uGhtB78ozaryGPbkjuCosU2lKIMW0C
3fHZWCTbXH9n0tKjwyGAWAxYNVbuRL6bcxgmoiPi2EWhi4VDtCFZvq88LhRGpehL
fYQoQnc9ziytAFeBHK+nrzUDbVbB6rsU4tknfXR7cAr4+9M4Pr3bW4N+RVLRhSip
5fP5qlZDz5Rc2g==
-----END CERTIFICATE-----