Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/pPlaaFYx2ri2SuwGDE0bxmbMhw4.mft
File:                     pPlaaFYx2ri2SuwGDE0bxmbMhw4.mft (raw, json)
Hash identifier:          WYVRgrU0PE4lfbvc7fK5X/UgtqjkVFmXSumQYFCk0SE=
Subject key identifier:   8B:3A:6F:07:FF:FB:50:B2:53:EF:E6:13:53:10:08:98:4B:87:3B:EF
Authority key identifier: A4:F9:5A:68:56:31:DA:B8:B6:4A:EC:06:0C:4D:1B:C6:66:CC:87:0E
Certificate issuer:       /CN=a4f95a685631dab8b64aec060c4d1bc666cc870e
Certificate serial:       018C0FCB5B8BDF2620775641E2A5F34C6689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPlaaFYx2ri2SuwGDE0bxmbMhw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/pPlaaFYx2ri2SuwGDE0bxmbMhw4.mft
Manifest number:          08AA
Signing time:             Mon 27 Nov 2023 08:00:34 +0000
Manifest this update:     Mon 27 Nov 2023 08:00:34 +0000
Manifest next update:     Tue 28 Nov 2023 08:00:34 +0000
Files and hashes:         1: i-Vw10FsHH3NuVw7pqIXKyLeRls.roa (hash: OCiTqTmonI/Fvz8iR6J3SG+q8g8ZEOWHAofIYB63a8U=)
                          2: pPlaaFYx2ri2SuwGDE0bxmbMhw4.crl (hash: 1Bb7eqhfzxNSI0xm/obkVNpfXDgCaMzlbV8YGpbZbEE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:cb:5b:8b:df:26:20:77:56:41:e2:a5:f3:4c:66:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f95a685631dab8b64aec060c4d1bc666cc870e
        Validity
            Not Before: Nov 27 08:00:34 2023 GMT
            Not After : Nov 28 08:00:34 2023 GMT
        Subject: CN=8b3a6f07fffb50b253efe613531008984b873bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:56:0e:9b:07:b5:97:a4:7c:2a:b0:0e:71:f2:
                    d8:aa:78:0b:31:2d:d6:3f:3b:d0:17:90:78:08:8c:
                    ce:1c:b2:ea:70:9d:c2:07:46:05:b1:c2:79:0e:c0:
                    65:44:0d:b4:09:e2:28:b6:8a:41:f5:9f:2b:1f:e1:
                    07:8f:05:9d:5d:51:93:14:c8:03:f7:3c:d4:dd:93:
                    aa:d5:58:82:f4:3d:ca:21:64:53:89:ec:58:15:e9:
                    06:dc:cb:2b:8d:94:7b:75:9e:26:33:4e:6b:ed:24:
                    54:6e:53:d7:73:64:79:51:dd:37:23:05:fc:54:af:
                    df:36:e3:45:68:d5:2f:6a:35:d8:e4:93:eb:40:c8:
                    a0:c1:0b:f7:ec:b9:40:3c:e8:9e:eb:c6:90:d8:1e:
                    26:d6:7d:76:a7:ee:81:d4:f8:5f:5e:12:cd:ae:ad:
                    ab:20:9d:f9:64:6c:35:9d:b1:8a:e9:f1:ed:33:45:
                    53:b7:46:16:17:8b:57:a0:0f:7f:ab:2d:2b:34:85:
                    91:fd:34:4b:b8:04:e5:d1:1a:38:71:69:fd:67:86:
                    24:bc:3f:c2:f5:21:4c:d3:37:3c:cb:c6:9f:0f:51:
                    1c:39:0c:c3:f6:b8:72:e1:9f:69:f2:c1:b7:34:4f:
                    b5:53:36:e6:68:b7:2e:0b:df:63:b3:24:29:a6:fa:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3A:6F:07:FF:FB:50:B2:53:EF:E6:13:53:10:08:98:4B:87:3B:EF
            X509v3 Authority Key Identifier:
                keyid:A4:F9:5A:68:56:31:DA:B8:B6:4A:EC:06:0C:4D:1B:C6:66:CC:87:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPlaaFYx2ri2SuwGDE0bxmbMhw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/pPlaaFYx2ri2SuwGDE0bxmbMhw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9c9f28-b1fb-4793-ad56-008af3a418a3/1/pPlaaFYx2ri2SuwGDE0bxmbMhw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:55:4f:52:84:46:7d:8f:02:54:36:50:39:cf:9c:87:82:6d:
         35:31:9d:cf:45:fd:f7:1c:fb:15:ae:96:b8:f5:39:97:e3:24:
         c6:fe:84:6a:7b:fb:0a:95:f1:7f:45:6c:94:d5:a6:51:09:f7:
         ab:ec:82:22:62:6c:1b:48:2a:5f:3f:27:1e:0b:73:8b:c4:84:
         8b:80:be:e8:65:de:be:ab:b8:0f:10:d5:bc:1e:52:d1:ce:0c:
         00:21:69:6b:ba:41:6f:90:77:bb:3f:7a:ad:eb:8b:80:49:43:
         f3:28:68:d8:dd:8a:a0:49:1b:da:50:83:58:1d:71:c4:a0:c7:
         4f:51:f3:75:d8:f1:93:ec:37:ea:69:2b:c0:bd:a2:b3:6a:97:
         f8:b8:66:e9:44:49:70:4c:63:97:5d:03:9f:0a:f5:69:05:d0:
         1e:42:95:3c:11:d9:56:0b:7b:8e:8e:a1:6a:fa:48:cc:2b:6b:
         68:69:5c:22:b1:66:77:a8:3b:f0:d6:81:47:f1:46:9a:d1:ef:
         ca:de:46:36:b8:b5:1c:80:31:d6:cc:a7:89:86:b5:21:3a:df:
         80:5e:5f:43:a5:c5:f7:cc:8c:b5:c3:9d:15:37:52:fc:42:c0:
         f8:d6:2a:2e:83:4e:76:7e:80:78:7b:d7:ac:c2:a5:59:f3:3f:
         c5:37:4c:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwPy1uL3yYgd1ZB4qXzTGaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Zjk1YTY4NTYzMWRhYjhiNjRhZWMwNjBjNGQxYmM2NjZj
Yzg3MGUwHhcNMjMxMTI3MDgwMDM0WhcNMjMxMTI4MDgwMDM0WjAzMTEwLwYDVQQD
Eyg4YjNhNmYwN2ZmZmI1MGIyNTNlZmU2MTM1MzEwMDg5ODRiODczYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11YOmwe1l6R8KrAOcfLYqngLMS3W
PzvQF5B4CIzOHLLqcJ3CB0YFscJ5DsBlRA20CeIotopB9Z8rH+EHjwWdXVGTFMgD
9zzU3ZOq1ViC9D3KIWRTiexYFekG3MsrjZR7dZ4mM05r7SRUblPXc2R5Ud03IwX8
VK/fNuNFaNUvajXY5JPrQMigwQv37LlAPOie68aQ2B4m1n12p+6B1PhfXhLNrq2r
IJ35ZGw1nbGK6fHtM0VTt0YWF4tXoA9/qy0rNIWR/TRLuATl0Ro4cWn9Z4YkvD/C
9SFM0zc8y8afD1EcOQzD9rhy4Z9p8sG3NE+1UzbmaLcuC99jsyQppvpTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs6bwf/+1CyU+/mE1MQCJhLhzvvMB8GA1UdIwQY
MBaAFKT5WmhWMdq4tkrsBgxNG8ZmzIcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBsYWFGWXgycmkyU3V3R0RFMGJ4bWJNaHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85YzlmMjgtYjFmYi00NzkzLWFkNTYt
MDA4YWYzYTQxOGEzLzEvcFBsYWFGWXgycmkyU3V3R0RFMGJ4bWJNaHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85YzlmMjgtYjFmYi00NzkzLWFkNTYtMDA4YWYzYTQxOGEz
LzEvcFBsYWFGWXgycmkyU3V3R0RFMGJ4bWJNaHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1VPUoRG
fY8CVDZQOc+ch4JtNTGdz0X99xz7Fa6WuPU5l+Mkxv6Eanv7CpXxf0VslNWmUQn3
q+yCImJsG0gqXz8nHgtzi8SEi4C+6GXevqu4DxDVvB5S0c4MACFpa7pBb5B3uz96
reuLgElD8yho2N2KoEkb2lCDWB1xxKDHT1Hzddjxk+w36mkrwL2is2qX+Lhm6URJ
cExjl10Dnwr1aQXQHkKVPBHZVgt7jo6havpIzCtraGlcIrFmd6g78NaBR/FGmtHv
yt5GNri1HIAx1syniYa1ITrfgF5fQ6XF98yMtcOdFTdS/ELA+NYqLoNOdn6AeHvX
rMKlWfM/xTdM8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:45 2025 by rpki-client