Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft
File:                     698CBB9E641A60FE66E1B58C92ACD281637ED767.mft (raw, json)
Hash identifier:          3zcM25GOHZzD2spALlp4j+ErJK1ftbRFWKJQFVFwqjI=
Subject key identifier:   2E:ED:6D:C9:24:09:68:7C:DB:7D:DE:1E:CE:F3:E1:B0:F2:03:57:AB
Authority key identifier: 69:8C:BB:9E:64:1A:60:FE:66:E1:B5:8C:92:AC:D2:81:63:7E:D7:67
Certificate issuer:       /CN=698CBB9E641A60FE66E1B58C92ACD281637ED767
Certificate serial:       4713EBEA90570FE844E1982EFAA887CA165CC51B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/698CBB9E641A60FE66E1B58C92ACD281637ED767.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft
Manifest number:          08
Signing time:             Wed 26 Jun 2024 15:33:05 +0000
Manifest this update:     Wed 26 Jun 2024 15:28:05 +0000
Manifest next update:     Thu 27 Jun 2024 16:59:05 +0000
Files and hashes:         1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.crl (hash: r6FojfKc2geBuYvuwHdnu0sFwRZq6nQcRplPa4BHGfY=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:13:eb:ea:90:57:0f:e8:44:e1:98:2e:fa:a8:87:ca:16:5c:c5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698CBB9E641A60FE66E1B58C92ACD281637ED767
        Validity
            Not Before: Jun 26 15:28:05 2024 GMT
            Not After : Jun 27 16:59:05 2024 GMT
        Subject: CN=2EED6DC92409687CDB7DDE1ECEF3E1B0F20357AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:53:a4:fc:a4:8e:d3:1f:73:a2:c9:dd:f2:
                    29:c8:fd:ca:1d:26:33:20:1e:eb:ac:0a:a9:8f:aa:
                    f9:7f:5f:4f:3e:b0:9b:78:c8:ba:af:a4:c8:4d:9b:
                    c9:ee:c2:bc:3f:8e:3d:c5:33:7a:71:12:d3:24:d8:
                    7d:cf:3e:75:59:a8:ba:33:f0:74:a6:71:d7:bc:b6:
                    d7:33:38:81:46:6a:b5:70:52:f2:a2:b0:b3:37:d0:
                    f1:5c:40:a0:a6:46:6b:20:fc:2f:46:44:49:8f:c0:
                    1c:bd:f1:94:71:a5:33:90:8c:b0:6b:90:c5:13:a5:
                    a4:60:f2:5f:53:55:97:de:12:96:a0:36:cc:24:c2:
                    de:e6:08:4d:5a:2a:02:b4:24:3e:c9:89:da:ab:b4:
                    41:5f:f7:1d:65:e1:e8:3a:85:dc:0e:49:43:2b:7f:
                    54:96:27:8e:a7:4d:d3:cc:5b:81:ff:94:7a:ec:85:
                    21:dc:49:b1:c6:89:a4:95:62:f8:ea:7f:cf:56:e3:
                    91:56:6c:8d:ce:ed:52:86:5d:18:34:25:0f:17:ff:
                    a1:6d:4b:e1:d9:f2:58:96:f6:b1:c9:7e:5e:d9:1c:
                    63:cf:c6:bc:46:f4:69:d5:75:a7:5a:67:f7:d2:e2:
                    77:f3:e7:b7:cc:a3:cf:da:9d:3c:ac:1f:d3:1f:86:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:ED:6D:C9:24:09:68:7C:DB:7D:DE:1E:CE:F3:E1:B0:F2:03:57:AB
            X509v3 Authority Key Identifier:
                keyid:69:8C:BB:9E:64:1A:60:FE:66:E1:B5:8C:92:AC:D2:81:63:7E:D7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/698CBB9E641A60FE66E1B58C92ACD281637ED767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:70:ab:33:05:1e:fe:d3:0c:22:b2:60:16:29:c0:eb:ca:0f:
         ab:fd:86:61:04:ad:22:0f:76:25:18:0d:f0:fb:46:0b:b6:c8:
         f8:f4:f4:19:ce:7d:59:79:3d:aa:a5:a0:d8:f1:c6:76:88:9a:
         a5:68:6f:72:b1:d2:0b:47:47:26:ac:a9:1d:22:ee:f0:ef:ca:
         32:7c:42:79:50:08:28:ed:b4:6c:48:3d:90:00:8e:9a:18:85:
         d6:fe:86:42:d6:a2:09:cc:6e:a1:31:be:33:16:71:e2:72:b8:
         33:ea:21:db:c1:74:87:07:d4:5f:31:f9:4d:cb:7d:75:d9:d9:
         44:23:79:ca:10:45:0c:42:30:f8:14:f4:06:73:7a:9c:f6:12:
         ac:a5:24:94:40:71:9c:e6:ae:a6:21:42:2e:2e:46:c0:3c:3f:
         97:cc:5e:b8:0e:4b:43:17:85:53:13:6f:44:38:d9:a4:55:04:
         98:69:57:3d:42:5d:02:8a:6a:79:f9:01:94:40:8d:b3:74:56:
         75:3c:a7:8f:53:c5:49:a0:d0:2e:c6:22:fb:b4:39:01:3c:0b:
         b5:1d:32:e3:1a:2d:68:e0:84:7e:0c:91:06:2c:9d:48:36:28:
         8c:42:84:4d:6d:1e:f9:16:4a:9b:a3:e2:1a:d5:61:12:79:b2:
         81:eb:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----