Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8b99407c-0c4d-4a69-a482-fc8a9d8dd905/0/804E9CBCDA815FCD260C702E2B66D4DA60C24444.mft
File:                     804E9CBCDA815FCD260C702E2B66D4DA60C24444.mft (raw, json)
Hash identifier:          H7UL3W5jTfWnJtdmig+SCp9+5U/PXJ8MNQYPWzxKUyE=
Subject key identifier:   24:76:8A:F3:F9:8D:79:9C:57:42:8C:C4:1B:F1:5B:DE:2F:22:9B:69
Authority key identifier: 80:4E:9C:BC:DA:81:5F:CD:26:0C:70:2E:2B:66:D4:DA:60:C2:44:44
Certificate issuer:       /CN=804e9cbcda815fcd260c702e2b66d4da60c24444
Certificate serial:       642F1EB876D557CA947AC691609E91575A923942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gE6cvNqBX80mDHAuK2bU2mDCREQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8b99407c-0c4d-4a69-a482-fc8a9d8dd905/0/804E9CBCDA815FCD260C702E2B66D4DA60C24444.mft
Manifest number:          2E
Signing time:             Sat 28 Oct 2023 20:26:51 +0000
Manifest this update:     Sat 28 Oct 2023 20:21:51 +0000
Manifest next update:     Sun 29 Oct 2023 20:54:51 +0000
Files and hashes:         1: 804E9CBCDA815FCD260C702E2B66D4DA60C24444.crl (hash: tT2Cbeb6cvBCAFxwfa8G9QXW9D+WGCDDWODXyiVttY0=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2f:1e:b8:76:d5:57:ca:94:7a:c6:91:60:9e:91:57:5a:92:39:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804e9cbcda815fcd260c702e2b66d4da60c24444
        Validity
            Not Before: Oct 28 20:21:51 2023 GMT
            Not After : Oct 29 20:54:51 2023 GMT
        Subject: CN=24768AF3F98D799C57428CC41BF15BDE2F229B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:ff:e6:83:37:1b:fc:92:db:49:41:04:df:
                    ae:18:34:c9:c5:66:30:5d:89:8b:34:5c:09:a3:7d:
                    5c:54:bd:04:6b:18:a9:6b:c6:2f:50:a2:35:73:ae:
                    76:7e:51:b7:2d:29:cf:6a:b4:b4:d6:fe:b7:05:68:
                    81:86:e5:1e:0f:09:ca:8b:ca:79:8c:77:7c:e3:2a:
                    de:9f:06:02:8c:92:1b:5a:2e:5e:55:71:ce:22:13:
                    f5:cd:e7:77:6a:8f:bf:3b:cd:4e:81:36:74:7b:28:
                    2e:b5:98:15:b3:6c:ca:43:a1:7b:f7:0f:8a:7a:2b:
                    83:a7:55:4e:41:15:e5:85:6a:32:bc:c0:93:84:b7:
                    da:39:14:d0:63:5a:c5:cd:dd:06:85:d2:0e:27:99:
                    6e:38:f9:15:07:74:51:4a:88:9d:5b:3c:4d:64:f8:
                    4d:4e:f2:de:50:2d:b4:9e:6b:5d:7d:ef:e8:b0:76:
                    47:ed:8c:6e:8c:82:4e:ea:41:d8:78:17:68:90:85:
                    40:2f:67:8c:2d:58:20:61:1c:73:66:e3:a2:2b:c5:
                    c8:09:96:80:a4:e0:78:49:13:04:2a:74:fb:aa:43:
                    fc:a3:64:8f:96:45:44:5f:6e:d0:b3:6c:34:67:73:
                    ee:20:b6:fb:16:f5:f8:11:48:cc:2c:97:32:07:ac:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:8A:F3:F9:8D:79:9C:57:42:8C:C4:1B:F1:5B:DE:2F:22:9B:69
            X509v3 Authority Key Identifier:
                keyid:80:4E:9C:BC:DA:81:5F:CD:26:0C:70:2E:2B:66:D4:DA:60:C2:44:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8b99407c-0c4d-4a69-a482-fc8a9d8dd905/0/804E9CBCDA815FCD260C702E2B66D4DA60C24444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gE6cvNqBX80mDHAuK2bU2mDCREQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8b99407c-0c4d-4a69-a482-fc8a9d8dd905/0/804E9CBCDA815FCD260C702E2B66D4DA60C24444.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a4:82:da:98:4c:19:a9:59:69:97:d4:ca:ce:4a:8b:cc:74:
         14:05:56:c0:ae:74:7c:c5:b3:d8:80:6e:58:fc:b1:57:ff:8e:
         99:de:03:af:99:62:4c:37:2c:1b:a2:33:ae:38:a2:5f:6d:4d:
         1c:3b:fd:7d:0c:5a:b8:e8:0d:b1:b2:7e:29:30:3d:50:d3:e5:
         09:a5:1a:38:db:6b:8c:cd:9d:4c:28:d8:79:c2:89:5a:83:ce:
         c6:a9:aa:15:2d:40:1f:88:68:41:03:6a:ce:7b:ab:ee:2f:93:
         21:4b:66:4c:60:f0:89:8d:d1:59:d8:60:81:a1:b3:c7:ab:c7:
         33:b5:45:ad:ac:fb:85:5d:d5:bd:8c:ab:3b:d4:4f:4c:cc:0a:
         82:cc:54:a2:7d:fb:73:d7:12:1e:d4:07:93:13:c5:0d:3d:b3:
         08:3b:9b:04:ed:61:2d:7c:4d:ec:51:22:87:df:31:11:36:3a:
         ce:f5:ac:9e:22:1b:e3:0c:58:7c:c3:c1:ef:a2:c1:b9:6e:74:
         8c:30:c0:fc:c0:b4:fc:fc:d7:0a:6a:07:00:dd:98:51:7e:7a:
         a4:b8:fa:18:fa:b1:29:b4:e8:b1:94:39:80:63:8c:49:c8:d8:
         64:54:b7:15:bf:92:6e:49:ce:56:84:03:1b:a3:1b:60:16:53:
         aa:54:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----