Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/1/7DDB99F73E7B582C352890E3AD5785D3679F8891.mft
File:                     7DDB99F73E7B582C352890E3AD5785D3679F8891.mft (raw, json)
Hash identifier:          LWRtJFXJCJ35gmvMRKHV0wKANpGV46u52fP7Bq2+xHc=
Subject key identifier:   BB:52:D1:2B:CC:E0:55:8B:53:F7:0F:F1:C1:00:C0:77:97:A0:7F:48
Authority key identifier: 7D:DB:99:F7:3E:7B:58:2C:35:28:90:E3:AD:57:85:D3:67:9F:88:91
Certificate issuer:       /CN=7ddb99f73e7b582c352890e3ad5785d3679f8891
Certificate serial:       562C3471892524C28596D8CFDBAEBE818005CEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fduZ9z57WCw1KJDjrVeF02efiJE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/1/7DDB99F73E7B582C352890E3AD5785D3679F8891.mft
Manifest number:          38
Signing time:             Mon 03 Apr 2023 18:47:27 +0000
Manifest this update:     Mon 03 Apr 2023 18:42:27 +0000
Manifest next update:     Tue 04 Apr 2023 20:01:27 +0000
Files and hashes:         1: 7DDB99F73E7B582C352890E3AD5785D3679F8891.crl (hash: 4H99nhnd07m2GyfXYUHdvV1U5X0ARtbQw7zZNLfYF7k=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2c:34:71:89:25:24:c2:85:96:d8:cf:db:ae:be:81:80:05:ce:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddb99f73e7b582c352890e3ad5785d3679f8891
        Validity
            Not Before: Apr  3 18:42:27 2023 GMT
            Not After : Apr  4 20:01:27 2023 GMT
        Subject: CN=BB52D12BCCE0558B53F70FF1C100C07797A07F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:c8:df:26:fb:54:78:c3:d6:b3:66:fa:4a:
                    45:3e:16:c3:96:a5:5f:28:f2:8d:7d:b1:25:af:20:
                    7e:12:58:bc:b2:5f:a3:26:fc:11:a9:f4:75:7e:0a:
                    79:00:7c:ad:0f:1a:e8:6d:3b:4f:f2:33:0f:50:cb:
                    b8:e0:96:03:40:b3:4f:01:4f:c0:04:a4:c7:3a:7a:
                    f6:62:25:eb:01:f1:52:81:69:82:31:8b:8f:ea:50:
                    ef:d9:70:ca:da:91:3a:f1:03:0b:5b:14:ea:eb:df:
                    6f:a4:51:8c:52:65:b7:9e:01:b3:bd:5d:37:53:36:
                    77:4b:61:be:5e:32:3b:cc:91:48:6f:a5:e4:48:b2:
                    44:b4:e6:b8:4a:ee:f9:02:37:29:71:4f:aa:5f:75:
                    ef:fc:da:62:30:e4:59:f0:c7:a8:c0:69:59:75:04:
                    61:c2:a8:a5:25:84:b4:b6:5a:34:e6:d4:68:47:20:
                    81:dd:02:f2:87:9c:34:aa:76:92:f5:11:dd:83:a8:
                    31:ce:07:b9:e9:7e:23:10:a9:13:34:a2:1b:94:69:
                    a4:52:5b:5e:65:19:09:41:1d:4c:4e:10:1a:43:1d:
                    5c:f5:75:9c:0b:d9:97:2f:f9:46:86:00:f9:85:6c:
                    5c:21:3a:f0:19:87:77:ca:1a:5c:5f:8b:6f:05:7c:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:D1:2B:CC:E0:55:8B:53:F7:0F:F1:C1:00:C0:77:97:A0:7F:48
            X509v3 Authority Key Identifier:
                keyid:7D:DB:99:F7:3E:7B:58:2C:35:28:90:E3:AD:57:85:D3:67:9F:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/1/7DDB99F73E7B582C352890E3AD5785D3679F8891.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fduZ9z57WCw1KJDjrVeF02efiJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b64c075f-eb10-4426-bb40-3a833fe0f9fb/1/7DDB99F73E7B582C352890E3AD5785D3679F8891.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:a2:ff:92:49:16:24:98:10:ca:9a:8d:a1:e6:ba:46:53:
         2e:1b:a8:8b:dd:c5:2d:bb:da:7c:4f:dc:2b:6c:e9:cd:dd:d2:
         e7:7f:a3:33:9f:79:5e:57:4c:fe:b5:a0:be:63:94:6c:1c:9c:
         73:53:a4:4d:db:07:f8:ce:3d:aa:0a:ed:fa:fe:bf:7c:44:c5:
         f9:db:bb:ee:3c:69:e7:0e:97:7a:d3:c6:d1:5f:33:6c:55:3a:
         5f:28:08:29:9c:dd:61:be:91:6c:c3:84:c2:d7:d7:13:08:7c:
         e2:39:75:dd:f9:0e:37:c1:6f:e5:85:5d:32:82:03:c5:be:82:
         80:0c:6f:13:fb:0c:d8:1d:c6:66:37:34:60:3a:bd:e0:a9:65:
         a8:a1:ea:2d:3a:64:7a:40:79:1c:23:dd:fb:10:89:d1:c0:fc:
         cb:59:25:d3:af:e9:20:79:ef:e7:a3:51:94:07:12:18:04:20:
         c1:9f:2d:b6:b1:10:50:4f:d1:b1:22:6f:75:04:11:a9:26:a7:
         54:f2:0f:b2:fb:c4:7b:64:8e:89:57:d4:fd:cd:3b:43:9a:3d:
         bf:17:5d:2b:4e:34:6a:c8:0f:6e:d1:8a:83:ae:cd:ee:87:a7:
         5e:f2:2f:71:56:53:ef:2d:8c:fe:52:f3:3c:83:88:64:af:50:
         f1:31:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----