Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.mft
File:                     CEE50F8654426B5A60EE8C52A9AE958F8D77B848.mft (raw, json)
Hash identifier:          zroO5qvQJS7oLSTz2cnoPKeRdG1tTWTIKCLJdPrbG5k=
Subject key identifier:   64:5E:ED:51:99:0A:1B:23:67:17:50:FE:68:C3:49:CC:C3:98:52:D6
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Certificate issuer:       /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial:       1120740EAE7D1A758C29719CBCAC69A34057D6AD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.mft
Manifest number:          D2
Signing time:             Fri 24 Nov 2023 23:59:52 +0000
Manifest this update:     Fri 24 Nov 2023 23:54:52 +0000
Manifest next update:     Sun 26 Nov 2023 01:47:52 +0000
Files and hashes:         1: 326130373a353463313a333830303a3a2f34302d3430203d3e203437323732.roa (hash: 1A2/5y4OBLPAMsQj/6+q22xyO5fi3syRpT1U4pQus/U=)
                          2: CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl (hash: NOdom5ukZAF91FyV5nxVM7noAUoilqNQnHTEoKwqY6E=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:20:74:0e:ae:7d:1a:75:8c:29:71:9c:bc:ac:69:a3:40:57:d6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
        Validity
            Not Before: Nov 24 23:54:52 2023 GMT
            Not After : Nov 26 01:47:52 2023 GMT
        Subject: CN=645EED51990A1B23671750FE68C349CCC39852D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:80:d0:ac:e0:94:4f:7f:56:5a:f4:ba:df:
                    5d:b4:1e:9d:8e:d0:0a:92:07:c0:cf:11:90:27:a4:
                    80:b5:70:c7:b7:bc:75:69:e7:a4:18:46:98:78:b1:
                    0a:ee:e6:a6:2c:12:45:e2:b1:34:e4:77:5d:8a:f3:
                    87:db:28:de:93:65:50:ec:ea:64:7d:99:fe:d1:05:
                    cf:cf:68:15:9a:c7:10:8d:1d:8a:37:e4:8b:b4:8d:
                    42:dd:35:62:e3:e8:fc:9d:38:37:99:66:f4:c7:31:
                    61:15:74:d5:4a:dc:31:e6:88:7f:ad:0e:47:a4:8a:
                    18:45:6b:ba:3a:cf:f0:f7:de:33:fb:23:f1:39:ad:
                    cd:33:09:2d:53:1c:52:3a:ea:3a:85:eb:f5:05:70:
                    c0:7e:a6:55:bb:73:77:90:df:d3:14:b3:7d:ec:75:
                    3b:36:3c:6d:d5:e7:da:a8:a5:ac:0b:e3:42:73:32:
                    95:3f:4d:3a:cd:ae:31:74:39:13:59:d3:90:1c:da:
                    ae:91:bc:d5:a1:fc:96:d5:3a:84:8c:32:e0:e5:62:
                    74:72:71:a4:62:7c:cf:5a:22:ed:20:20:2b:5e:a2:
                    c1:80:c8:3e:21:ab:6e:5f:d8:59:65:9f:69:54:7c:
                    68:9e:71:19:48:f3:cd:2a:a7:82:b2:9a:ca:70:8e:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5E:ED:51:99:0A:1B:23:67:17:50:FE:68:C3:49:CC:C3:98:52:D6
            X509v3 Authority Key Identifier:
                keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:57:b9:95:34:7c:28:49:4d:86:a6:4d:b4:54:2f:e0:b6:
         8e:8d:9e:58:d7:be:1f:bf:7a:2f:e3:df:c1:60:85:4a:b3:c2:
         10:41:c6:89:5e:86:61:9e:eb:1b:e3:4d:9e:0c:3d:f1:f6:3f:
         ac:c3:29:c5:a6:d2:f2:0f:6e:81:b8:19:d1:1c:c4:1a:4f:e9:
         14:23:42:64:31:bf:b0:5d:bc:b5:38:5b:95:cb:ac:68:0b:7c:
         29:e5:b6:f5:a4:3e:56:95:09:5f:51:38:30:a4:19:60:53:91:
         c2:f8:54:57:8b:f9:20:c6:e7:6a:1b:e1:4f:4f:12:e4:6c:d9:
         d6:a4:9f:ee:cb:60:9a:f5:bb:fd:88:ed:d7:07:9a:08:9a:79:
         47:e6:0f:81:7b:3e:d5:cf:d7:26:ca:47:b4:6e:ad:85:fb:f2:
         17:42:81:8a:b3:53:42:34:eb:c5:58:ea:cd:98:10:3e:90:a2:
         eb:77:dc:2d:6d:9f:ee:68:a2:42:e6:95:e8:0b:c5:e5:d6:6d:
         be:d5:b5:45:07:90:13:98:5d:b5:da:b5:dd:c7:00:c0:4f:81:
         b1:c7:8c:80:89:4e:0a:09:f8:d2:c7:4e:c8:13:af:c2:4b:4c:
         db:cc:b3:90:6c:02:54:94:a5:8a:8b:df:cb:b5:ea:d0:e3:ee:
         d2:b8:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----