Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.mft
File:                     67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.mft (raw, json)
Hash identifier:          s9sXyNbo9CS4MEOXSbYT4guas9YCXnTTP3W4ZLqzBKE=
Subject key identifier:   17:4D:A5:90:30:AF:6B:9A:A8:B2:1C:36:2E:9A:82:83:D7:C6:E2:93
Authority key identifier: 67:DA:C6:BF:E8:CF:4F:99:CC:7D:E4:76:F2:D7:C1:1D:D2:53:70:2A
Certificate issuer:       /CN=67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A
Certificate serial:       269733E6EAC9A31FD851811CA37CB463A02F494A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.mft
Manifest number:          8F
Signing time:             Wed 01 Nov 2023 02:51:31 +0000
Manifest this update:     Wed 01 Nov 2023 02:46:31 +0000
Manifest next update:     Thu 02 Nov 2023 06:30:31 +0000
Files and hashes:         1: 3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa (hash: WE+mDoGyePTkCR4N2Ipxf8U3gYDQpmeIfXQzUaPR9D4=)
                          2: 67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.crl (hash: c846PaY1kGW5ydJaRScfF7BzbL5eofwmu8p26WpsrFo=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:97:33:e6:ea:c9:a3:1f:d8:51:81:1c:a3:7c:b4:63:a0:2f:49:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A
        Validity
            Not Before: Nov  1 02:46:31 2023 GMT
            Not After : Nov  2 06:30:31 2023 GMT
        Subject: CN=174DA59030AF6B9AA8B21C362E9A8283D7C6E293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:62:29:de:ac:2e:24:35:2d:8c:21:af:cc:
                    aa:7c:4b:35:40:6b:f0:07:16:f3:ab:c0:cb:13:c6:
                    a4:e3:e0:59:2a:1f:2b:f3:a3:ff:0d:b5:4c:db:30:
                    17:63:c6:d7:e8:39:7b:5c:b0:f7:e6:e5:d0:0e:3b:
                    58:7e:15:4c:e0:2a:b2:df:e4:e5:7e:4c:56:fa:20:
                    71:9d:02:91:4a:9f:21:ec:50:e1:0c:3c:31:fc:30:
                    b1:3b:e9:95:88:57:c5:fb:f4:ba:cb:6c:af:e1:fa:
                    5e:06:80:33:4d:36:03:5a:31:ee:78:0c:10:e0:77:
                    c0:1e:1c:14:b9:2c:be:d6:2e:85:83:46:ad:a9:66:
                    17:c5:88:e5:72:74:b9:b4:e6:b9:ca:9a:de:38:6d:
                    c1:56:dd:6d:cb:a1:a9:22:a0:00:b3:ec:29:99:82:
                    c1:10:5e:c0:ea:be:01:98:47:04:fa:34:fd:20:c0:
                    f9:dc:1a:72:94:a7:80:bf:67:c8:86:63:e7:fd:ee:
                    42:14:10:d3:c1:f0:db:17:10:52:d4:18:58:79:0f:
                    74:23:f1:50:81:39:ad:d1:df:be:9f:62:97:c4:9b:
                    19:d1:db:42:ee:e1:9c:e5:95:c2:b4:9a:af:5a:39:
                    82:c4:85:17:8b:4f:54:91:0a:18:ac:fd:a6:ea:2b:
                    eb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:A5:90:30:AF:6B:9A:A8:B2:1C:36:2E:9A:82:83:D7:C6:E2:93
            X509v3 Authority Key Identifier:
                keyid:67:DA:C6:BF:E8:CF:4F:99:CC:7D:E4:76:F2:D7:C1:1D:D2:53:70:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:24:ab:5f:7c:c3:ec:9d:db:e2:d1:2a:0e:3e:4c:74:11:18:
         c3:19:34:33:6e:2b:a0:f2:7f:43:b3:de:65:71:6a:09:3f:41:
         2e:47:7a:c8:62:ce:d0:e9:d5:81:3f:e3:ef:b8:6d:c9:2e:3d:
         66:a5:5e:2a:c8:d8:49:f4:c7:54:a2:2d:b6:1c:72:9d:60:34:
         55:d8:f9:e9:46:8f:b7:bc:b4:74:83:65:ee:da:58:2f:e5:37:
         56:1c:6c:bb:d1:7b:df:11:27:7e:9a:8e:0c:5f:a4:81:9a:3a:
         5c:f0:36:d0:4b:0c:85:bd:c8:e6:31:59:5a:b2:0a:67:cf:7e:
         eb:f2:44:66:a2:b1:57:e1:0b:cc:b5:39:46:2b:be:58:4e:9e:
         a9:1d:6a:f4:15:27:d6:48:80:7c:56:82:57:81:42:a6:b8:f6:
         68:8a:b6:33:fc:19:4c:a6:f7:8e:f8:b1:ef:b8:ec:d0:3c:67:
         82:3b:6e:02:23:1f:cf:a9:41:b3:e6:8e:3c:ed:21:19:ed:29:
         91:48:e9:26:46:d0:51:07:56:c0:76:fb:ce:15:c9:63:44:9d:
         9d:2b:31:0c:05:25:2a:c3:65:1a:1d:fa:a2:33:96:5f:22:34:
         45:b8:5e:10:d9:c9:6d:85:3a:ef:62:38:02:61:84:42:4b:50:
         da:e8:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----