Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.mft
File:                     C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.mft (raw, json)
Hash identifier:          VsWYUqRV9TiblO8GikEFA2lPtGyTEa+k1F1Xqfqtd64=
Subject key identifier:   5A:FA:D9:F0:58:66:C0:B6:F7:59:CC:42:A8:CB:83:A7:38:06:2B:3D
Authority key identifier: C5:FD:B3:24:9C:FD:C7:86:3C:2B:AA:8B:CE:97:CE:4C:3C:F6:37:C6
Certificate issuer:       /CN=C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6
Certificate serial:       3198C4C2813CB2B2E8D3029AD30A23C796579FE1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.mft
Manifest number:          38
Signing time:             Mon 03 Apr 2023 13:00:59 +0000
Manifest this update:     Mon 03 Apr 2023 12:55:59 +0000
Manifest next update:     Tue 04 Apr 2023 15:57:59 +0000
Files and hashes:         1: C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.crl (hash: M1Ist29jspO1UHU4A3pqs/ebniBrCU5oZI8znMPKWf0=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:98:c4:c2:81:3c:b2:b2:e8:d3:02:9a:d3:0a:23:c7:96:57:9f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6
        Validity
            Not Before: Apr  3 12:55:59 2023 GMT
            Not After : Apr  4 15:57:59 2023 GMT
        Subject: CN=5AFAD9F05866C0B6F759CC42A8CB83A738062B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:80:4e:d6:0a:ea:e1:0b:59:f5:f5:aa:39:
                    5c:99:a7:10:5e:12:af:05:77:c0:07:98:ed:82:ea:
                    7a:6d:6b:bb:7a:30:01:ff:22:ef:d4:1c:e9:3b:25:
                    b7:9c:af:e3:9e:f3:85:56:d7:89:1b:be:5e:44:02:
                    40:00:77:61:87:18:bc:6b:b7:1c:d0:68:12:9b:51:
                    a9:e0:41:56:4c:25:11:06:26:69:d5:e2:98:76:e1:
                    f0:c9:26:86:45:9d:2e:63:27:67:ad:fb:36:33:f1:
                    87:48:a4:a9:3b:26:5f:9e:27:cf:a5:d1:d9:bb:e8:
                    77:f2:53:d1:82:99:c1:92:ab:05:52:1a:94:f0:a3:
                    22:32:6e:f7:4b:93:7b:bf:91:5e:93:ff:2a:54:d9:
                    fe:ab:86:46:df:32:f4:43:ea:d5:a9:6f:74:6b:8e:
                    7f:00:65:70:92:fc:7e:99:99:35:70:0f:d0:ee:6a:
                    d1:55:ce:b6:0c:e0:b3:a5:98:e7:1f:7a:a1:89:1f:
                    e8:31:3c:53:e0:26:e9:d5:a6:c3:e5:65:cb:08:ba:
                    0a:e1:88:f2:a5:ba:14:60:e8:95:fd:77:f8:53:83:
                    05:bb:44:25:55:30:f8:79:2e:fd:bb:85:a6:38:65:
                    82:87:91:a0:5c:5e:78:42:c1:31:74:53:c9:98:52:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FA:D9:F0:58:66:C0:B6:F7:59:CC:42:A8:CB:83:A7:38:06:2B:3D
            X509v3 Authority Key Identifier:
                keyid:C5:FD:B3:24:9C:FD:C7:86:3C:2B:AA:8B:CE:97:CE:4C:3C:F6:37:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/0/C5FDB3249CFDC7863C2BAA8BCE97CE4C3CF637C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1d:e0:f2:65:e3:3d:aa:a1:3d:b8:c0:59:9f:87:f9:61:fd:
         83:0e:d8:a4:0f:0e:82:68:25:32:92:21:aa:60:4c:69:29:f8:
         3b:2b:2b:31:11:50:90:16:5c:f3:1c:dd:04:fa:79:db:ab:7f:
         f0:99:cc:cb:a8:11:50:e8:b0:96:c8:d2:bf:d1:fb:55:8f:17:
         d4:88:d3:9b:1d:62:3a:c7:55:cf:62:65:f5:20:61:a0:c2:e9:
         c4:c5:58:c4:e9:e6:e9:a8:9f:c2:55:42:30:bd:f1:7d:70:22:
         35:37:3b:dd:b5:bc:97:60:5d:a7:09:0c:02:da:26:65:fc:8f:
         8f:c6:8b:cd:3f:3f:2f:36:c0:4e:8c:f8:75:5c:25:99:05:a3:
         4a:65:9a:e6:14:f9:a8:6f:9a:8f:3b:0f:51:07:38:cd:23:83:
         f9:bd:68:63:e8:66:b9:b8:3e:56:a1:78:da:ae:93:3c:27:84:
         16:6a:b8:0e:d7:11:76:5e:99:27:c6:c9:78:37:73:a2:46:69:
         d2:8b:f3:1f:cf:d5:a4:70:fe:06:ee:47:ce:68:0a:d6:27:e1:
         c1:a3:7f:b6:8a:b9:f2:4c:dd:72:0b:26:c3:c5:13:e7:f2:1d:
         0d:2d:4e:68:30:aa:46:28:0d:ea:80:57:53:56:d9:c7:90:e7:
         5f:de:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----