Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
File:                     2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft (raw, json)
Hash identifier:          to7q0Q2qpNh2JrOU/D8B5NyjcizP1m8qwHWdDm1a/rk=
Subject key identifier:   9F:40:CF:A9:20:C2:16:CB:5C:2F:81:A6:A1:A4:19:07:9C:2C:C7:BB
Authority key identifier: 2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97
Certificate issuer:       /CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
Certificate serial:       671F99203AF6AA6E047125ECDFA9893498B6CD74
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft
Manifest number:          05
Signing time:             Tue 13 Aug 2024 13:44:53 +0000
Manifest this update:     Tue 13 Aug 2024 13:39:53 +0000
Manifest next update:     Wed 14 Aug 2024 16:13:53 +0000
Files and hashes:         1: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl (hash: F70G+qA9vNcRvg2GKrJT6MudJen/d3MILp4HcnaKwn0=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1f:99:20:3a:f6:aa:6e:04:71:25:ec:df:a9:89:34:98:b6:cd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297
        Validity
            Not Before: Aug 13 13:39:53 2024 GMT
            Not After : Aug 14 16:13:53 2024 GMT
        Subject: CN=9F40CFA920C216CB5C2F81A6A1A419079C2CC7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:d1:a9:b3:72:32:b8:07:b7:b5:11:2b:01:
                    cf:91:40:90:dc:1a:ee:dc:2a:d7:ce:9a:11:45:5b:
                    8f:81:68:19:7f:e7:b4:e9:01:44:3e:49:09:e9:44:
                    35:4d:a4:e1:71:03:00:3b:ad:c6:9a:b4:67:22:c4:
                    63:5c:99:34:03:1f:42:7f:a2:c8:56:9e:17:d3:3d:
                    11:21:00:0e:13:ac:84:23:37:61:0d:89:31:07:cd:
                    69:5f:26:bc:03:6e:2a:81:04:32:b4:74:30:ef:a2:
                    54:4d:62:dc:80:12:ab:1d:69:bd:e0:3c:de:78:84:
                    14:62:c0:a8:00:a7:e9:60:ff:08:72:f7:3c:9b:53:
                    22:3a:94:96:f6:ca:61:3d:3d:f3:8c:b3:bc:40:bc:
                    11:81:9a:29:8a:99:27:4f:ab:79:fb:5d:b3:1f:8a:
                    f6:ce:b4:bc:c8:99:55:27:cc:54:cd:1e:d2:fc:63:
                    fa:0f:02:8a:91:4e:77:9f:42:82:da:91:ac:a8:37:
                    3c:6e:3b:6e:28:9b:2a:79:16:5f:10:05:91:01:ef:
                    bc:ce:f4:4d:93:77:28:78:8f:28:4c:5a:f3:89:79:
                    f1:eb:5c:e3:21:42:c4:c0:ae:74:07:f7:46:d0:38:
                    09:51:ba:92:eb:a0:43:26:33:99:14:c0:af:2a:ee:
                    84:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:CF:A9:20:C2:16:CB:5C:2F:81:A6:A1:A4:19:07:9C:2C:C7:BB
            X509v3 Authority Key Identifier:
                keyid:2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:56:91:73:37:81:cb:6d:40:27:95:4d:34:58:27:b0:2a:5b:
         c3:5f:51:7f:7e:8c:aa:4b:88:95:4e:62:7d:02:8e:00:a0:1d:
         c9:aa:e3:5e:31:09:a4:33:88:a5:60:73:64:4a:91:d5:a1:28:
         6f:36:97:95:01:c4:f6:bb:2f:e7:f4:03:a7:4c:5c:83:8f:c7:
         39:ca:80:bb:2f:cf:bd:b7:36:19:35:d3:57:5c:de:38:3a:53:
         1f:f0:ea:3b:90:01:5a:a6:40:eb:b0:b5:28:24:6d:fc:fd:b4:
         8e:54:14:76:4f:54:f8:bb:23:03:b4:38:d9:63:c1:b5:55:c0:
         91:be:e2:6c:5a:a7:c6:2e:68:ee:b8:a8:3a:49:a5:39:7b:4c:
         4b:57:53:3b:3b:9f:bf:7f:8c:c0:c3:5e:8c:7a:c5:4d:1a:4e:
         82:d8:28:31:e1:a1:e9:d9:32:df:f5:63:b3:83:06:c3:0b:eb:
         5b:d3:9b:79:6d:7b:7d:ad:be:9a:3e:a7:b5:36:3d:45:c1:5a:
         4d:01:ce:83:48:11:ba:d4:54:c8:e4:98:3a:d1:53:fd:62:b6:
         e5:b0:c3:c1:c7:3b:01:b9:38:a0:06:b2:c9:7d:ee:2f:a8:13:
         a8:96:a6:71:c1:71:f3:94:a7:d3:37:b8:94:b9:d6:04:9d:92:
         24:48:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----