Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          BvbBxQg5q7QLnA5k8VZrjobXGgf5y3m6FTTrHucnECI=
Subject key identifier:   C6:E1:32:F8:25:EB:30:DE:1F:F8:11:76:1B:F2:73:84:7D:EC:91:F1
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       469B5A885EDF4F91A2E318826F94D5DA2C1EDBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          60
Signing time:             Tue 05 Mar 2024 14:42:16 +0000
Manifest this update:     Tue 05 Mar 2024 14:37:16 +0000
Manifest next update:     Wed 06 Mar 2024 18:23:16 +0000
Files and hashes:         1: AS198136.asa (hash: GvtwHp5NKK1rwVMt+11LwLToct1B8reEg37G2+dbOpo=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: YlkcLwLBKiBgCqBUI/NRDNbfygpPuNUMg+Y7BJ350I4=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: X9hDIakZxMyYW09+8o3DY1NSDUaTkUm2cM6/XfJPWAU=)
                          4: AS212068.asa (hash: B3ZUqxz38OM0d1AJg+LgnB7cw80/HkHXOni8GeSXIhs=)
                          5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: GEEkFnLLD5YdT7e3gZhcbzhghm9btIME32fG3fAo/to=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9b:5a:88:5e:df:4f:91:a2:e3:18:82:6f:94:d5:da:2c:1e:db:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Mar  5 14:37:16 2024 GMT
            Not After : Mar  6 18:23:16 2024 GMT
        Subject: CN=C6E132F825EB30DE1FF811761BF273847DEC91F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:88:00:ac:aa:b0:f0:31:4d:e3:cd:32:90:
                    d1:97:92:67:45:93:3b:91:d2:0b:76:ab:59:c6:75:
                    83:7a:7e:75:a0:0c:8f:7d:86:70:72:d5:ec:33:7a:
                    0d:2d:9b:34:5d:d9:85:40:7d:e9:4f:04:9e:40:ea:
                    bc:10:3d:58:46:13:cb:fa:10:0e:2a:c4:6a:73:44:
                    6d:00:1a:4b:64:0f:7f:a4:d4:9a:38:5c:80:65:ff:
                    65:7c:01:81:9f:6d:30:f7:da:aa:e3:32:6e:d2:e6:
                    0e:c3:a3:14:3c:d7:62:32:d3:76:1f:7a:22:8b:2e:
                    5c:3a:90:04:0e:a2:90:0c:a0:6e:ed:14:dc:e7:31:
                    0e:20:10:fa:59:86:0a:93:26:37:aa:f8:fb:9d:e6:
                    86:6e:2b:d5:d6:25:c5:72:12:27:68:e7:66:15:10:
                    32:06:b2:9c:b8:94:b2:56:8c:d5:97:95:c2:8d:75:
                    7a:e2:f0:5c:1e:c0:83:77:1a:e0:b3:54:ea:97:77:
                    26:c8:90:8c:2b:f7:cd:69:a0:19:89:ba:9d:c3:0e:
                    0a:80:95:91:73:7b:46:fd:65:d7:ee:7a:1c:52:c6:
                    75:f1:d2:97:27:0f:46:27:95:d8:2e:3c:fa:c1:d3:
                    e1:da:d6:9b:fb:e3:e3:b5:fe:ab:e7:03:6a:2f:99:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E1:32:F8:25:EB:30:DE:1F:F8:11:76:1B:F2:73:84:7D:EC:91:F1
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5f:d8:bb:8a:6c:1c:84:2f:04:a5:21:16:8b:13:7d:cf:1e:
         e7:ea:08:e0:f0:f6:63:06:40:68:7b:6a:fd:69:c8:53:24:b1:
         1a:0b:12:c3:b8:99:24:46:ca:9f:cb:a7:0c:f1:99:3d:f0:80:
         60:50:5d:72:73:56:93:07:ba:c8:ca:dc:4b:2f:87:ec:35:fc:
         3c:1c:7c:2a:60:5b:50:a2:c4:d0:55:1c:c9:f2:6d:e8:c7:9d:
         61:d8:4a:0d:9b:bc:be:84:3f:91:b2:22:8c:1c:f4:a1:f8:76:
         03:44:4d:e7:2a:75:a2:bd:35:2f:10:f6:98:db:d8:6a:b8:97:
         4c:24:2e:0e:02:12:6e:78:d6:83:89:60:ba:e9:2f:83:fc:aa:
         05:ef:44:4f:a8:0c:6a:94:b2:33:51:92:81:63:da:bd:ea:6c:
         92:d6:32:85:eb:18:24:67:70:da:b5:1d:d2:8b:b8:b6:d2:94:
         98:d6:ed:ac:1c:31:89:a6:d7:11:3f:80:da:b3:dd:ba:22:d9:
         2a:f0:fa:8d:d4:52:23:08:4e:d7:fa:01:9d:76:99:42:99:55:
         c0:22:70:ea:a5:b4:77:96:4a:68:50:5e:b7:9b:66:55:f1:75:
         fd:d8:29:fc:b2:22:b3:36:78:c2:06:bd:79:09:13:8e:1a:88:
         17:72:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----