Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/30df2d1b-1498-4686-91bb-64b582010328/0/D6424E531A5AD6AC80AF20F0D6DC2CB187322EC1.mft
File:                     D6424E531A5AD6AC80AF20F0D6DC2CB187322EC1.mft (raw, json)
Hash identifier:          4THNUKQkMgvk30yIx9DMPJF9SsfmPkvoCR9cTVwkTMA=
Subject key identifier:   59:21:43:ED:A6:BE:91:1E:53:CB:63:58:E9:68:62:86:75:9D:04:0A
Authority key identifier: D6:42:4E:53:1A:5A:D6:AC:80:AF:20:F0:D6:DC:2C:B1:87:32:2E:C1
Certificate issuer:       /CN=d6424e531a5ad6ac80af20f0d6dc2cb187322ec1
Certificate serial:       7951320187D3F7B971E5BD86DBEFDC21DBDEF90F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kJOUxpa1qyAryDw1twssYcyLsE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/30df2d1b-1498-4686-91bb-64b582010328/0/D6424E531A5AD6AC80AF20F0D6DC2CB187322EC1.mft
Manifest number:          16
Signing time:             Wed 08 Feb 2023 08:31:45 +0000
Manifest this update:     Wed 08 Feb 2023 08:26:45 +0000
Manifest next update:     Thu 09 Feb 2023 11:42:45 +0000
Files and hashes:         1: D6424E531A5AD6AC80AF20F0D6DC2CB187322EC1.crl (hash: 4WV1M9PT95wkp/lY3YzpNnN4PK1qJHpfKSToVk6aoQA=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:51:32:01:87:d3:f7:b9:71:e5:bd:86:db:ef:dc:21:db:de:f9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6424e531a5ad6ac80af20f0d6dc2cb187322ec1
        Validity
            Not Before: Feb  8 08:26:45 2023 GMT
            Not After : Feb  9 11:42:45 2023 GMT
        Subject: CN=592143EDA6BE911E53CB6358E9686286759D040A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:d3:ef:5d:df:85:fd:81:88:b0:c5:16:c8:
                    c9:a4:b5:d1:90:6c:a4:e4:a5:8d:f1:c8:4a:dd:d8:
                    43:4d:1d:e7:c1:75:54:8d:03:51:52:e6:24:3b:c1:
                    da:3a:a3:25:d7:40:8d:dd:09:b5:9d:30:5f:06:cd:
                    d7:66:56:ca:b4:0b:ec:93:a9:4f:ea:a6:c0:38:33:
                    73:72:4d:e7:0d:51:12:43:fd:e4:56:3b:b0:d8:37:
                    38:90:a5:6c:ff:38:14:5b:70:0e:c4:53:db:03:1a:
                    d1:ba:08:4a:48:bd:b5:41:37:9f:d2:8f:d7:fc:9a:
                    c8:08:a0:cf:fe:e9:7e:ec:f6:1d:1e:2e:b6:45:83:
                    be:3f:5d:4e:1c:f6:26:fb:1c:5b:9a:0d:f1:a4:a0:
                    c1:c5:b3:4f:4f:a5:4b:2d:1f:d2:e2:e3:f0:b6:bd:
                    e0:e7:c7:e1:4b:96:d4:76:f6:fb:74:1e:7f:c2:78:
                    42:3d:54:e8:04:67:46:75:e1:ca:e2:eb:4b:8d:54:
                    be:9a:9f:a1:2f:58:77:56:1c:70:c8:ff:12:ff:70:
                    30:fd:2d:4d:f9:c8:cc:d7:ee:18:5f:d6:4b:d8:03:
                    63:99:9d:a4:08:72:86:94:da:db:45:63:66:c9:89:
                    09:08:7e:63:ef:05:77:9d:6b:7c:73:32:f9:2b:ee:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:21:43:ED:A6:BE:91:1E:53:CB:63:58:E9:68:62:86:75:9D:04:0A
            X509v3 Authority Key Identifier:
                keyid:D6:42:4E:53:1A:5A:D6:AC:80:AF:20:F0:D6:DC:2C:B1:87:32:2E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/30df2d1b-1498-4686-91bb-64b582010328/0/D6424E531A5AD6AC80AF20F0D6DC2CB187322EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kJOUxpa1qyAryDw1twssYcyLsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/30df2d1b-1498-4686-91bb-64b582010328/0/D6424E531A5AD6AC80AF20F0D6DC2CB187322EC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:48:83:61:33:44:5f:77:79:09:04:35:4d:92:92:81:7c:fc:
         84:ed:ec:00:4a:53:a0:2d:4f:92:80:96:fb:ac:7d:db:b9:73:
         8e:81:6e:b2:e7:de:b1:4e:b0:e6:17:fa:08:14:3c:0e:2d:76:
         4e:c0:df:4e:0a:75:66:ab:3e:04:72:b1:09:63:cd:51:90:ab:
         ea:aa:f8:5f:1e:76:70:8e:a5:20:78:47:30:04:6e:f6:3e:bc:
         fc:08:a1:0f:e7:48:41:42:c6:44:c7:4c:96:99:b7:ed:3e:60:
         34:fd:f0:a3:9a:93:97:59:fc:2d:34:5a:35:41:80:68:f3:64:
         ed:32:0d:14:bf:b0:f1:db:b2:89:89:4d:15:dd:ff:b9:90:f4:
         18:17:64:9e:6b:f9:5b:1f:ac:35:44:87:9f:8f:31:f0:fc:07:
         ef:a4:1b:e4:30:9b:16:02:43:ae:89:ce:20:c0:9c:eb:6e:fa:
         ac:8d:dc:01:28:16:ee:ee:d7:11:55:40:c1:b5:db:c2:8a:f4:
         b2:c7:15:2e:fd:dc:0d:7c:08:95:f2:b8:40:c2:bc:e4:fe:68:
         31:43:aa:66:0c:c0:51:cb:4f:e1:7b:2d:2c:03:cd:3d:ac:4c:
         d5:f0:3d:39:5f:57:4d:ba:f2:47:90:d5:07:b7:0b:80:16:6a:
         33:61:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----