Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/8781B66616778405AC017405E4B756C5B6556ACD.mft
File:                     8781B66616778405AC017405E4B756C5B6556ACD.mft (raw, json)
Hash identifier:          Wc/iJOihccHpcQSpO7XUB/D7IEfDhL0kdHg1uYisbvw=
Subject key identifier:   D0:E4:77:A0:6B:D6:20:81:B0:DA:49:3C:09:DC:78:B3:89:F9:90:1C
Authority key identifier: 87:81:B6:66:16:77:84:05:AC:01:74:05:E4:B7:56:C5:B6:55:6A:CD
Certificate issuer:       /CN=8781b66616778405ac017405e4b756c5b6556acd
Certificate serial:       3A77039B9952CB577AC7927B43288ED7212AD02A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4G2ZhZ3hAWsAXQF5LdWxbZVas0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/8781B66616778405AC017405E4B756C5B6556ACD.mft
Manifest number:          011C
Signing time:             Wed 31 Jul 2024 09:34:56 +0000
Manifest this update:     Wed 31 Jul 2024 09:29:56 +0000
Manifest next update:     Thu 01 Aug 2024 12:09:56 +0000
Files and hashes:         1: AS47311.asa (hash: x8dV5xtrQ0H5/4X6v/I42rHKUJWaPzWmid/vNAV1UOE=)
                          2: 8781B66616778405AC017405E4B756C5B6556ACD.crl (hash: +i6Uny0tfhZE6X96bPmGv/lGjwOpPmf5jdUEpd66W8Q=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:03:9b:99:52:cb:57:7a:c7:92:7b:43:28:8e:d7:21:2a:d0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8781b66616778405ac017405e4b756c5b6556acd
        Validity
            Not Before: Jul 31 09:29:56 2024 GMT
            Not After : Aug  1 12:09:56 2024 GMT
        Subject: CN=D0E477A06BD62081B0DA493C09DC78B389F9901C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:eb:57:8b:08:d5:cd:5a:ac:89:5d:59:dd:
                    94:2e:21:43:87:ca:3b:3b:a2:6c:de:6c:8a:ea:50:
                    80:18:bb:09:6a:b3:00:f5:74:48:0c:68:3d:97:ed:
                    99:89:26:a2:3a:c2:eb:90:ad:21:d6:42:fc:0d:fa:
                    42:03:6d:38:d9:b6:eb:ea:bf:a7:2c:d2:fb:31:a9:
                    f5:a6:77:61:23:da:ef:55:1f:92:3e:88:09:8c:51:
                    41:6a:74:7f:e2:cc:0c:34:8a:c0:f0:73:2a:4c:db:
                    36:ba:0b:aa:2a:2c:a0:6e:47:99:b5:33:e3:fe:29:
                    17:1d:1e:60:30:8a:8f:90:64:e5:c8:95:71:0f:2c:
                    94:6a:e4:dc:b9:44:c8:b2:d4:68:08:ea:5b:72:69:
                    e8:a3:7e:bb:45:e7:0a:53:2e:02:d6:11:bd:7a:8e:
                    34:9b:df:17:df:3a:8e:aa:82:3f:9e:64:be:24:08:
                    c2:c9:ff:d9:54:00:c2:5e:ed:a8:c2:c0:3f:2b:e5:
                    78:4b:6e:99:08:52:27:e8:3e:4e:8e:0a:ec:fa:8d:
                    c4:d9:e9:90:cf:2f:5b:db:5f:65:8e:09:64:1f:2d:
                    35:a7:c1:01:88:8f:e2:63:c1:6d:d8:2c:4d:c1:09:
                    37:be:89:cb:c8:34:fb:f4:40:d9:c3:0a:83:7b:a5:
                    a8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E4:77:A0:6B:D6:20:81:B0:DA:49:3C:09:DC:78:B3:89:F9:90:1C
            X509v3 Authority Key Identifier:
                keyid:87:81:B6:66:16:77:84:05:AC:01:74:05:E4:B7:56:C5:B6:55:6A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/8781B66616778405AC017405E4B756C5B6556ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4G2ZhZ3hAWsAXQF5LdWxbZVas0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/8781B66616778405AC017405E4B756C5B6556ACD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:46:10:e1:df:4d:ac:0c:b1:7c:9e:a1:d2:7f:af:da:b4:fb:
         64:34:32:73:d0:06:0a:b0:ab:0a:3c:b6:d1:12:a0:67:a2:b4:
         41:b4:59:f4:c3:69:17:c2:6c:a0:e8:66:69:f8:46:23:5f:10:
         e2:3e:07:60:e5:8f:d4:7d:c5:d8:8f:84:e4:52:d2:5c:bc:ef:
         f6:8b:27:4f:78:d1:20:68:08:c4:26:6b:c8:0c:ef:25:a7:37:
         71:42:31:eb:44:14:9f:a3:88:91:60:82:2b:66:67:a0:b2:0f:
         57:97:1e:df:02:0b:3c:7c:bf:6e:37:e2:a1:62:d9:eb:87:c3:
         ff:c9:6c:5d:2a:7d:5a:08:0e:bf:d4:dd:f3:7c:cc:24:ef:4d:
         ee:63:7f:15:4e:c8:bb:49:46:7c:93:b0:f6:b6:30:07:27:94:
         f2:f5:a8:0b:90:19:64:46:dc:0d:6e:bd:dd:34:4f:f6:fb:45:
         8f:a2:5a:8c:f4:3f:47:8b:8b:a0:14:8b:5c:a4:5a:c6:e3:04:
         d6:8b:b8:01:3f:49:f7:d7:5f:da:cf:88:9b:56:1d:4b:c6:ed:
         4a:88:a8:48:6f:f8:c6:1b:38:a7:bf:ed:14:05:1e:a9:00:32:
         ca:f3:ce:78:5a:d9:89:3c:81:a2:ba:76:13:c7:d2:3b:ae:4e:
         9b:b1:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----