Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a8de6d38-be27-479e-80af-03d0095c5d8e/0/593E81C92EF98F9130AC43641AAE8022546E9F4A.mft
File:                     593E81C92EF98F9130AC43641AAE8022546E9F4A.mft (raw, json)
Hash identifier:          9sPpda5I1IN3uGU3D9MSe5NYaqS0Dp83WYw0SnNNa4k=
Subject key identifier:   30:5D:0A:82:06:45:4C:37:1E:ED:13:C9:2A:C6:9B:69:55:72:B3:41
Authority key identifier: 59:3E:81:C9:2E:F9:8F:91:30:AC:43:64:1A:AE:80:22:54:6E:9F:4A
Certificate issuer:       /CN=593e81c92ef98f9130ac43641aae8022546e9f4a
Certificate serial:       48FA5F1AB5AD45D6D78F40B8E9C02EB8C35BF788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WT6ByS75j5EwrENkGq6AIlRun0o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a8de6d38-be27-479e-80af-03d0095c5d8e/0/593E81C92EF98F9130AC43641AAE8022546E9F4A.mft
Manifest number:          3D
Signing time:             Sat 02 Mar 2024 15:43:24 +0000
Manifest this update:     Sat 02 Mar 2024 15:38:24 +0000
Manifest next update:     Sun 03 Mar 2024 17:31:24 +0000
Files and hashes:         1: 593E81C92EF98F9130AC43641AAE8022546E9F4A.crl (hash: leWXF1QXuPQv7kdMMxhEG6Qi1FakDPqovCwPeKhi0tI=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fa:5f:1a:b5:ad:45:d6:d7:8f:40:b8:e9:c0:2e:b8:c3:5b:f7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593e81c92ef98f9130ac43641aae8022546e9f4a
        Validity
            Not Before: Mar  2 15:38:24 2024 GMT
            Not After : Mar  3 17:31:24 2024 GMT
        Subject: CN=305D0A8206454C371EED13C92AC69B695572B341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:cc:ea:30:8b:6e:b8:36:d7:09:50:1b:af:
                    7b:90:9f:11:a1:95:20:91:f8:3f:68:ca:28:0f:96:
                    7b:ce:ca:b5:f8:19:00:e3:a5:aa:00:09:bc:6a:cc:
                    8d:33:2d:9e:1d:fd:25:23:ff:a1:da:73:74:51:ff:
                    10:43:13:e4:d9:1c:5a:ab:72:5c:75:84:74:4e:d8:
                    3b:b7:6b:3c:8d:f2:8b:7e:33:60:fc:48:85:f4:48:
                    dd:a8:3c:13:59:45:f0:82:50:49:a1:6a:a0:cd:ab:
                    67:1b:74:4a:93:32:25:2b:d1:b4:48:b9:7a:8e:4e:
                    6e:01:a9:b4:f6:0b:a8:f4:3b:58:77:87:63:2a:2a:
                    f0:e9:eb:39:55:0a:77:ab:83:f8:da:9a:66:6a:10:
                    1c:17:c7:6a:6b:22:c3:99:c6:9b:58:ed:44:e4:ad:
                    7c:81:3b:ec:f7:8c:03:31:4e:22:00:59:f0:db:b6:
                    e4:83:3d:a7:4c:79:71:68:70:00:55:c5:70:b0:fe:
                    45:0a:43:07:1f:cd:be:90:18:1a:a2:1f:20:4c:58:
                    d3:7f:1a:30:49:f6:b1:b6:eb:b0:f8:4d:3d:94:6b:
                    f4:ff:da:98:cb:67:38:5e:1c:44:3d:0b:8b:7a:96:
                    10:8e:e5:f2:70:2f:4d:44:0f:ac:69:64:9d:a7:ed:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5D:0A:82:06:45:4C:37:1E:ED:13:C9:2A:C6:9B:69:55:72:B3:41
            X509v3 Authority Key Identifier:
                keyid:59:3E:81:C9:2E:F9:8F:91:30:AC:43:64:1A:AE:80:22:54:6E:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a8de6d38-be27-479e-80af-03d0095c5d8e/0/593E81C92EF98F9130AC43641AAE8022546E9F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WT6ByS75j5EwrENkGq6AIlRun0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a8de6d38-be27-479e-80af-03d0095c5d8e/0/593E81C92EF98F9130AC43641AAE8022546E9F4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:04:07:90:a0:ac:5c:f1:9f:1b:83:99:37:da:af:71:8e:
         a6:55:1b:1c:76:4e:49:a8:ad:77:54:8b:56:e4:08:2a:82:eb:
         09:fc:e5:5f:1b:2a:19:d5:28:e7:94:4b:f0:89:9d:b6:82:65:
         50:9c:4c:32:1f:00:73:23:f9:72:67:54:a8:e3:b7:f7:9f:55:
         db:74:ff:5d:8d:87:46:41:bd:22:bb:ea:07:8d:31:a9:60:ea:
         95:72:cc:e3:e6:d0:57:ea:a9:23:3d:19:31:34:09:42:3f:29:
         1c:d4:34:d8:49:1e:5b:b4:f0:dc:bb:5e:5a:96:ea:99:0f:f1:
         47:a9:87:6e:67:91:62:5b:0a:7d:ad:d3:2c:27:dd:5c:11:15:
         a3:42:45:b6:19:5f:5e:24:0c:cb:70:1f:1e:8a:af:59:33:20:
         93:1a:ab:11:d9:e2:b2:3e:8c:61:bd:d8:63:02:4c:7d:44:87:
         e2:3f:dd:cc:0e:11:02:8f:38:94:48:e9:6d:21:86:c5:f7:7d:
         82:2c:78:c3:4e:da:3c:da:2d:cf:b0:28:c5:79:2d:06:e4:a3:
         1a:9a:fa:6b:c7:5f:60:1b:24:9f:84:c7:e3:41:b6:33:b2:dd:
         ff:ea:a0:80:18:f1:5c:f8:27:3a:15:c7:4f:33:d2:3f:e3:c7:
         09:04:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----