Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft
File:                     362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft (raw, json)
Hash identifier:          1uSaEEylNYx8+WyOlHV+TCDo5NsTdHBqA37zMCREh9U=
Subject key identifier:   A5:BB:AA:CA:1B:FC:13:1D:16:B5:04:FF:8B:1A:A0:A4:33:1B:3D:BE
Authority key identifier: 36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6
Certificate issuer:       /CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6
Certificate serial:       0C090965F3016A34884AC7A801204C4BF59A6680
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft
Manifest number:          08
Signing time:             Wed 31 Jul 2024 06:31:07 +0000
Manifest this update:     Wed 31 Jul 2024 06:26:07 +0000
Manifest next update:     Thu 01 Aug 2024 08:34:07 +0000
Files and hashes:         1: 326130613a363034343a626630313a3a2f34382d3438203d3e20323135343732.roa (hash: RDzEHopH6u/fkR8myKiFqMaiPz2fXy+jMvPZdChtlOc=)
                          2: 326130613a363034343a626630323a3a2f34382d3438203d3e20323135343732.roa (hash: 4R9Wte1VqicYrDnNkoeg4X5RK1EC7vfpOO0dzVFLshk=)
                          3: 362BBACF6433B5D7341F52AE03A397A596DCE5C6.crl (hash: 6v9mYUxSGmsztH2rniBaR9mdRagknQNSG4gDjSSmwG4=)
                          4: 326130613a363034343a626630303a3a2f34382d3438203d3e20323135343732.roa (hash: bvxel1hk1aZqtKmi/AXwpJWAUOQjsjqppkoV61zTWfU=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:09:09:65:f3:01:6a:34:88:4a:c7:a8:01:20:4c:4b:f5:9a:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=362BBACF6433B5D7341F52AE03A397A596DCE5C6
        Validity
            Not Before: Jul 31 06:26:07 2024 GMT
            Not After : Aug  1 08:34:07 2024 GMT
        Subject: CN=A5BBAACA1BFC131D16B504FF8B1AA0A4331B3DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:35:a8:8e:94:20:aa:23:68:92:8a:ab:34:
                    9a:bb:f1:1f:f5:05:e0:59:36:56:44:ce:ab:72:2f:
                    dc:70:ac:d6:9f:ae:28:e0:fe:ff:b0:88:e5:c2:95:
                    27:15:3d:ed:d0:f5:e6:b7:4c:33:fb:1f:59:0c:43:
                    de:4b:8a:43:82:c6:b1:37:fe:47:6c:10:4d:8d:83:
                    6b:ba:7d:0e:90:b4:a6:33:d2:28:ba:5c:d8:82:ec:
                    f4:3b:01:88:1d:4f:de:b4:df:30:0a:59:6c:4b:3e:
                    3e:6e:6c:4d:9f:b2:c6:98:5b:a6:55:03:8c:94:d7:
                    34:45:f6:c8:e5:ea:fd:05:dd:52:a0:14:c5:7e:67:
                    72:14:e7:c6:ba:cd:52:44:e7:1f:b5:2a:b0:67:38:
                    88:e9:ec:43:31:a6:fb:b1:4a:e8:e5:f4:94:c6:ea:
                    51:db:f1:b9:1e:11:73:8c:81:5f:67:6d:61:b5:e5:
                    6f:fe:41:ad:e3:f1:8f:60:19:a7:79:85:91:78:65:
                    98:2a:fa:73:6a:d4:03:73:39:de:44:19:e2:23:63:
                    47:74:14:05:f3:d0:2a:45:76:55:f7:bf:8c:31:3c:
                    57:3c:aa:e9:68:3a:3f:7e:5b:58:7b:f3:db:7b:a7:
                    a6:5d:ae:29:a5:d9:ee:84:c9:36:83:70:2c:a2:9c:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BB:AA:CA:1B:FC:13:1D:16:B5:04:FF:8B:1A:A0:A4:33:1B:3D:BE
            X509v3 Authority Key Identifier:
                keyid:36:2B:BA:CF:64:33:B5:D7:34:1F:52:AE:03:A3:97:A5:96:DC:E5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/362BBACF6433B5D7341F52AE03A397A596DCE5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ae9d6ba-6910-47c9-9b2b-209548ef531a/1/362BBACF6433B5D7341F52AE03A397A596DCE5C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2f:9c:2b:ff:02:9d:ee:2e:46:5f:92:9c:c5:f9:e4:67:6a:
         34:3e:c4:5f:08:15:aa:3d:31:3a:1d:03:a1:64:86:52:1f:a6:
         27:11:7a:e9:bb:c5:14:d3:0f:87:1b:3f:93:8f:16:9e:26:50:
         36:5b:68:5d:6c:cd:0a:94:c5:c6:9f:c1:7b:47:66:e7:29:fa:
         b5:55:f0:5f:c3:d3:b3:f1:f6:09:65:aa:cb:d6:4d:44:f5:8b:
         45:fc:9f:a4:d6:7a:56:9f:ca:0c:75:cf:82:22:b4:c6:91:89:
         25:9c:50:88:e9:c0:02:39:bb:37:f5:ee:3b:74:5c:54:80:75:
         33:fe:8c:2c:f5:9a:df:48:ec:da:57:52:ac:f4:2d:00:61:86:
         1b:b0:63:73:8f:0d:40:3c:eb:8e:3d:f0:9d:99:8a:2b:12:d8:
         7e:ae:63:81:f5:5a:0b:b1:f4:66:29:82:1d:ed:26:41:04:c3:
         4f:fc:f2:de:97:dd:bb:ef:c7:5d:6b:8c:7d:07:08:28:06:54:
         a3:e1:ca:4c:d2:de:1c:a8:31:02:d2:f4:d1:e3:e3:a5:fe:c6:
         c7:3c:c3:ef:b8:0a:aa:05:be:39:ec:bc:49:d8:01:0a:99:81:
         57:68:88:ba:7e:80:47:8d:e1:d1:41:ba:ac:ef:1f:04:87:82:
         74:f6:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----