Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft
File:                     C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft (raw, json)
Hash identifier:          wmmsdUYNjn0mGOUAIElZLnF7Oma8Ud/nEnjC16hWvEk=
Subject key identifier:   E6:C3:B4:09:12:8C:FA:50:FA:2D:BD:16:C2:03:AE:F9:5C:FA:2E:49
Authority key identifier: C5:55:7C:97:D7:BB:FF:47:CA:22:AD:5F:B9:F0:58:9F:AA:F1:59:BD
Certificate issuer:       /CN=c5557c97d7bbff47ca22ad5fb9f0589faaf159bd
Certificate serial:       698FA5C0CEA6A8C1C878F60313F188307D9490D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVV8l9e7_0fKIq1fufBYn6rxWb0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft
Manifest number:          01
Signing time:             Thu 21 Sep 2023 21:52:51 +0000
Manifest this update:     Thu 21 Sep 2023 21:47:51 +0000
Manifest next update:     Sat 23 Sep 2023 01:32:51 +0000
Files and hashes:         1: C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.crl (hash: gSB1/06d9SAxww33cU8kXNOKgGx5BJiWX+1TXAQSmCs=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8f:a5:c0:ce:a6:a8:c1:c8:78:f6:03:13:f1:88:30:7d:94:90:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5557c97d7bbff47ca22ad5fb9f0589faaf159bd
        Validity
            Not Before: Sep 21 21:47:51 2023 GMT
            Not After : Sep 23 01:32:51 2023 GMT
        Subject: CN=E6C3B409128CFA50FA2DBD16C203AEF95CFA2E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f2:6c:b0:d2:85:58:56:26:25:cc:3e:f1:16:
                    e7:64:fb:28:0a:db:68:a8:ef:38:2a:f0:08:c2:e4:
                    06:08:fd:14:25:c2:20:e0:89:51:e4:64:d7:8d:8c:
                    2b:49:65:96:1e:61:63:9f:07:aa:f2:32:63:30:d8:
                    9e:f4:d4:da:bb:64:b1:27:68:08:6e:31:c4:09:23:
                    7a:c6:bf:04:1d:05:27:bb:d9:ca:30:af:fd:d1:26:
                    69:ea:91:d7:dc:1d:e1:02:d7:70:cb:09:68:d3:63:
                    5d:55:dd:81:ad:fd:8c:e0:19:e8:19:6b:84:e0:ec:
                    3f:05:5c:eb:f9:a1:e9:70:1f:26:93:77:40:15:df:
                    38:d5:bf:ba:af:c8:f0:6f:4c:09:32:ec:cf:e0:75:
                    69:28:7b:29:03:36:b2:df:48:16:60:2c:e9:bd:5b:
                    93:af:43:8c:6f:74:39:8b:96:e7:2b:ae:9a:26:0b:
                    97:a3:77:ba:50:6d:c3:83:40:83:41:c7:ed:04:ec:
                    f7:a7:a4:b4:f8:e3:ba:0f:ad:78:69:7e:ed:14:9a:
                    6d:66:c2:e8:78:3b:ec:3e:d3:30:f6:26:ae:a8:6e:
                    f0:a0:e2:0f:62:d8:a9:1c:ef:78:de:ab:99:c2:42:
                    fc:c9:98:91:1b:d0:70:3a:db:7d:dc:da:10:78:30:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:B4:09:12:8C:FA:50:FA:2D:BD:16:C2:03:AE:F9:5C:FA:2E:49
            X509v3 Authority Key Identifier:
                keyid:C5:55:7C:97:D7:BB:FF:47:CA:22:AD:5F:B9:F0:58:9F:AA:F1:59:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVV8l9e7_0fKIq1fufBYn6rxWb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/2/C5557C97D7BBFF47CA22AD5FB9F0589FAAF159BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:36:80:91:23:de:b0:bb:85:e7:77:4f:bd:c4:7c:99:6b:f9:
         a3:06:24:46:93:1a:65:a8:b4:24:59:90:c5:42:d8:b0:50:41:
         53:cd:a8:eb:47:d9:4f:c9:55:ee:ee:15:b4:4c:77:b4:eb:07:
         e0:44:05:28:f0:26:8a:d7:1f:e7:86:5d:4f:f8:d5:b3:71:8a:
         e0:c9:ed:24:78:15:d5:43:53:69:15:f4:05:dd:cc:b5:ba:40:
         a3:79:20:5d:67:1d:ed:1e:a7:8f:14:26:b3:c9:ec:66:32:62:
         77:83:3a:34:01:73:5c:c8:67:0d:bb:99:0e:ad:9d:fd:60:2b:
         c0:ef:b6:a3:14:94:47:3c:2e:14:fd:e3:77:8c:ef:ce:bb:06:
         a4:7c:86:e9:8a:6a:a8:3f:f8:5c:7a:7a:f8:10:ce:d2:e8:36:
         5f:b9:3e:1f:56:b6:af:82:09:43:58:d3:b6:c1:af:91:ac:5b:
         18:d7:0c:9c:76:4c:70:48:73:f1:4c:d5:31:34:59:37:20:10:
         34:8d:b4:10:e7:b5:6c:00:13:a3:3a:d3:01:2a:28:66:31:1d:
         d8:5f:a0:13:3f:f0:46:ae:da:6d:51:2b:9d:f1:52:87:56:38:
         5a:e4:36:48:62:46:6b:d5:b8:da:f1:1b:bb:84:63:d7:79:12:
         cc:32:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----