Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft
File:                     AB1340E329CCD96287934FA706670D31B73C04E8.mft (raw, json)
Hash identifier:          sV16Uf5RuYhRU9FO+4aj/bGXcolWFejQ7+Mpjsi+r40=
Subject key identifier:   AE:AA:58:99:8C:FF:BD:3B:7C:CD:C1:36:B3:D5:A4:ED:A2:FC:8C:A5
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       5E9EA40CD8CD91C735103D4C1EA2F7623A22A453
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft
Manifest number:          5D
Signing time:             Sun 21 Jul 2024 04:17:17 +0000
Manifest this update:     Sun 21 Jul 2024 04:12:17 +0000
Manifest next update:     Mon 22 Jul 2024 06:27:17 +0000
Files and hashes:         1: 326131343a373538313a373130303a3a2f34302d3430203d3e20313530333135.roa (hash: BDbySONHBTFHr4ZJ8R/TKKzKBUQAw/1H/W9cHf9/wlQ=)
                          2: 326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa (hash: 5RvQ11zqA87nSkgET1/LZB/8q01ICMdccwFzuDSJAMA=)
                          3: 326131343a373538313a376130303a3a2f33392d3339203d3e203431303531.roa (hash: gjKJmUdyGSiubROOyDtzinRPjnlxeY9lwEKnz73F/m4=)
                          4: 326131343a373538313a376130303a3a2f34342d3434203d3e20323135373331.roa (hash: +9ZBrsye/+7JcfQCN7LZ22z9A0AorbivM4NukTYuELA=)
                          5: AB1340E329CCD96287934FA706670D31B73C04E8.crl (hash: vIIvcOhUc+Uo+W7rxudOqcSJQyqwNOxuamUlNwn4jys=)
                          6: 326131343a373538313a376130623a3a2f34382d3438203d3e20323135313236.roa (hash: 1HVCCqG4gBoc72OP7Aul3nDfjDWfPvAXodWrVM42/EI=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9e:a4:0c:d8:cd:91:c7:35:10:3d:4c:1e:a2:f7:62:3a:22:a4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: Jul 21 04:12:17 2024 GMT
            Not After : Jul 22 06:27:17 2024 GMT
        Subject: CN=AEAA58998CFFBD3B7CCDC136B3D5A4EDA2FC8CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:58:cf:4f:63:3d:05:f1:e3:4e:8b:25:3a:
                    0c:e3:f6:ad:85:d9:65:8a:89:ac:1c:8a:76:26:f8:
                    67:b2:36:f8:4d:4d:6f:50:ff:2a:ca:7e:06:35:46:
                    b2:9c:55:bd:fd:bf:f0:38:47:70:b4:d8:4f:b9:8a:
                    e3:fa:27:26:8c:d5:a8:88:cf:8f:85:d3:9c:99:20:
                    3f:11:ba:58:ba:11:01:60:ed:20:fe:90:b2:68:7f:
                    f4:3c:6b:ca:ed:a7:19:4f:5a:15:f7:10:e8:49:ed:
                    50:1f:f2:69:46:3c:45:0f:aa:32:25:0b:e2:f3:98:
                    7d:b3:9c:39:2f:d3:fd:6a:b2:ed:b3:b4:e4:66:85:
                    ba:1c:fe:bb:f7:4b:9f:26:75:bd:22:16:12:88:bf:
                    bc:b9:d9:32:b1:31:08:c4:0b:57:3f:3e:8c:0b:8f:
                    68:c5:a6:e4:b6:b4:30:c5:1f:f4:5d:b9:48:2f:12:
                    f0:dd:67:d5:87:8b:d6:81:c5:ef:1f:b6:a9:44:85:
                    34:af:7a:a6:b0:80:ed:4a:cb:da:71:3e:78:d4:42:
                    33:35:f4:10:00:46:72:22:23:21:5b:d4:ba:27:62:
                    7a:0f:72:f5:db:41:1e:d7:87:b8:22:3d:6f:6e:0b:
                    1a:f9:14:55:10:80:28:69:fc:d2:85:b3:7c:82:f5:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AA:58:99:8C:FF:BD:3B:7C:CD:C1:36:B3:D5:A4:ED:A2:FC:8C:A5
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:01:20:9e:62:9f:8b:71:ae:69:61:29:34:43:e1:22:ca:bb:
         4f:30:30:c0:04:83:cc:3d:9c:84:84:f8:b7:5f:fe:22:e5:1a:
         a8:48:f0:13:43:f1:b5:e0:2a:8b:e6:c8:0f:0d:e7:2b:d9:35:
         db:5c:0b:ee:b4:4e:38:25:d1:b9:a5:9e:32:b2:07:42:41:cc:
         20:2b:8d:d4:68:3d:63:25:e9:06:ab:d0:a5:a2:d7:5a:4d:72:
         15:7b:93:a1:83:4f:89:56:42:84:3a:82:18:12:01:82:ee:2f:
         5f:89:99:4a:fc:6e:c7:72:84:aa:81:2a:b1:ca:b8:fa:9a:16:
         c1:80:e8:78:ef:b0:0c:1c:23:04:c8:98:3e:9d:ae:2b:a5:e5:
         62:ab:06:85:3a:a0:3f:00:d2:7a:d4:d5:69:a4:13:38:4a:09:
         ce:48:14:2b:72:ea:05:97:2e:ce:3e:a5:95:63:63:e2:7c:9f:
         0f:ae:b7:b6:dc:c8:97:99:46:12:0b:4f:ae:f5:a3:95:c7:d1:
         8a:93:66:a7:f2:d7:aa:7f:53:f7:01:83:86:dd:4a:98:d0:81:
         95:cc:54:da:af:90:63:bc:74:40:0d:a5:78:b8:b1:5e:46:cf:
         e9:dc:af:1d:0e:dc:06:1d:a6:c2:2b:5d:a2:97:0b:4a:d6:a8:
         3a:36:21:54
-----BEGIN CERTIFICATE-----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