Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft
File:                     5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft (raw, json)
Hash identifier:          ykK2u6kI4jE2196Jksr1BlNf9NOmENsxCLZp45heKuI=
Subject key identifier:   96:D4:B6:17:F8:99:93:E9:55:0C:E9:C5:5B:47:9C:BB:35:88:FA:FE
Authority key identifier: 5C:F5:76:CE:86:F9:58:2D:D0:31:9A:4E:9A:25:EC:DB:7B:35:EC:38
Certificate issuer:       /CN=5cf576ce86f9582dd0319a4e9a25ecdb7b35ec38
Certificate serial:       0110C62F9D840BFA3ED8997EAC8F2F56827EF642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPV2zob5WC3QMZpOmiXs23s17Dg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft
Manifest number:          01
Signing time:             Wed 14 Feb 2024 08:17:07 +0000
Manifest this update:     Wed 14 Feb 2024 08:12:07 +0000
Manifest next update:     Thu 15 Feb 2024 08:51:07 +0000
Files and hashes:         1: 5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.crl (hash: lD8cSlollqV1IB9UcG/d59Utirx5awQioqjjSkRKj2E=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:c6:2f:9d:84:0b:fa:3e:d8:99:7e:ac:8f:2f:56:82:7e:f6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf576ce86f9582dd0319a4e9a25ecdb7b35ec38
        Validity
            Not Before: Feb 14 08:12:07 2024 GMT
            Not After : Feb 15 08:51:07 2024 GMT
        Subject: CN=96D4B617F89993E9550CE9C55B479CBB3588FAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:44:8b:3c:6f:96:16:d7:ab:58:02:e7:67:
                    5f:28:3e:5e:67:7c:06:c3:a1:58:f9:fe:cd:36:b7:
                    6b:55:f6:aa:20:a5:4b:29:5d:78:42:8d:2d:c7:81:
                    79:29:fc:26:9a:21:41:bd:d3:b5:ec:66:93:41:1b:
                    19:07:3b:c5:0b:d6:7a:c2:26:72:f3:52:a3:fc:b2:
                    3f:aa:59:14:0f:4a:c9:53:bd:0a:04:d3:da:12:c2:
                    42:3f:e7:32:97:72:52:1d:35:a0:25:74:76:84:8f:
                    aa:47:a4:77:f4:aa:e2:4a:e8:58:53:d0:f5:9b:e9:
                    5f:88:8a:85:38:49:d5:2f:81:d9:d7:76:38:bd:4f:
                    e1:c6:a0:8e:64:88:94:a3:37:a1:4f:8b:cc:9b:ff:
                    d7:3e:e1:7a:be:65:55:eb:30:f4:b5:d8:2f:77:aa:
                    f4:eb:05:75:ff:69:44:05:74:f3:b1:7c:6a:85:19:
                    e3:7f:69:f9:19:b9:95:5f:07:62:c8:9a:eb:2d:90:
                    d6:61:d7:a6:96:66:55:88:00:7d:89:81:0d:b2:fd:
                    77:75:c1:c8:0f:99:7b:56:ba:60:a2:9a:65:67:1f:
                    c3:7b:f7:a3:79:ad:97:24:fa:1c:bd:bb:c3:36:2e:
                    ce:f1:8e:1a:83:05:c6:2b:df:e4:03:02:dd:85:27:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D4:B6:17:F8:99:93:E9:55:0C:E9:C5:5B:47:9C:BB:35:88:FA:FE
            X509v3 Authority Key Identifier:
                keyid:5C:F5:76:CE:86:F9:58:2D:D0:31:9A:4E:9A:25:EC:DB:7B:35:EC:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPV2zob5WC3QMZpOmiXs23s17Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fd217e5-c782-4d25-94dc-3db07c111f3a/0/5CF576CE86F9582DD0319A4E9A25ECDB7B35EC38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:f5:80:01:b4:a5:39:55:93:25:1a:8e:5d:b3:70:71:c4:47:
         20:84:58:1d:2d:89:dc:f4:5c:52:0d:87:ea:9a:51:4c:56:8c:
         e2:00:8d:ce:99:85:4f:19:3c:11:47:6d:40:39:3c:66:af:ff:
         af:36:d1:ec:10:9a:30:45:05:a6:c1:66:bc:8a:7f:65:39:a6:
         fd:60:eb:7b:56:23:36:aa:40:1e:42:e1:f3:97:0a:9a:33:8f:
         99:fb:f8:5e:4d:41:78:f0:5d:13:80:58:cb:a5:b7:1a:17:16:
         d0:c8:ee:72:11:34:9b:b1:9b:c6:df:8d:c8:c1:77:eb:dd:b9:
         eb:40:26:ac:ef:41:b5:47:38:f1:bb:0e:c2:20:48:2a:46:80:
         6d:53:53:f3:98:bc:53:d2:3c:97:a9:1d:d1:06:57:d0:de:98:
         b3:20:ba:24:73:f2:35:38:f1:87:d4:d6:c4:1d:c0:ed:f8:ef:
         a9:f6:b5:6a:98:f0:72:6c:36:16:53:2c:4d:91:6f:9b:b3:58:
         33:2d:d5:6c:7d:fc:c2:e8:c6:12:9c:5d:4a:80:bc:a0:9d:b5:
         4e:ba:a4:00:2a:96:0e:7e:47:fb:d6:05:7d:8a:9f:27:10:ee:
         bf:ee:23:d3:c9:04:d5:4a:72:90:1e:14:17:8f:f2:59:42:0c:
         4e:c6:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:11 2024 by rpki-client on console-fra.rpki-client.org