Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.mft
File:                     20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.mft (raw, json)
Hash identifier:          IEujCHjaIJjFTvhvBJk1kavttV+TiP0xJ3vmfg1hnb4=
Subject key identifier:   4C:EB:F5:55:89:21:80:08:FF:D5:BB:42:47:12:9F:FA:DD:F9:A5:6A
Authority key identifier: 20:F7:2F:3C:C9:DF:8F:B0:CA:AB:10:63:44:25:37:DE:31:C2:03:A3
Certificate issuer:       /CN=20F72F3CC9DF8FB0CAAB1063442537DE31C203A3
Certificate serial:       6751CB3FD9072A8D4D60CCE343B06F93130C1EE0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.mft
Manifest number:          1D
Signing time:             Sat 03 Feb 2024 08:28:19 +0000
Manifest this update:     Sat 03 Feb 2024 08:23:19 +0000
Manifest next update:     Sun 04 Feb 2024 10:18:19 +0000
Files and hashes:         1: 326130613a363034343a373830313a3a2f34382d3438203d3e20313939363832.roa (hash: lSei+R6kq5iMDUPAP0txrP7EFNlvoMk/5Pzy3zGHoW4=)
                          2: 20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.crl (hash: JD5kQcsdlcYAjCQ7zxjKwe8N3qvqLWFqR4oXU0diKME=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:51:cb:3f:d9:07:2a:8d:4d:60:cc:e3:43:b0:6f:93:13:0c:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F72F3CC9DF8FB0CAAB1063442537DE31C203A3
        Validity
            Not Before: Feb  3 08:23:19 2024 GMT
            Not After : Feb  4 10:18:19 2024 GMT
        Subject: CN=4CEBF55589218008FFD5BB4247129FFADDF9A56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:52:eb:13:40:a6:e5:8f:ae:3c:04:f6:67:
                    58:18:4d:5a:4c:24:78:3b:a0:9f:c2:77:3c:69:48:
                    f6:3f:55:f1:15:4f:34:9b:7d:de:e7:1c:a7:e5:2e:
                    d8:83:bd:ca:6b:62:2f:4a:be:32:45:bc:4a:39:ce:
                    9f:3e:d8:31:b5:27:e2:7e:c9:21:77:d5:59:59:13:
                    50:ce:6d:22:26:f4:7c:11:83:a4:3e:ba:0e:2d:47:
                    f3:3f:77:52:e0:0c:c7:f6:57:97:84:1a:5c:7a:90:
                    6e:2c:9c:b9:80:3b:20:15:e6:05:fd:dc:b5:51:88:
                    71:aa:b8:e5:3e:28:ff:c8:eb:96:03:a8:be:56:fd:
                    b6:2d:a8:e9:c0:13:46:6f:2c:d4:b3:be:00:68:cd:
                    7b:62:ab:17:be:d8:66:52:f3:9f:bc:82:47:d4:81:
                    39:0c:d0:62:d5:d4:3c:fa:2e:51:9b:f1:1a:a9:9f:
                    88:c2:45:09:c3:98:9a:2b:8b:cc:c8:07:eb:5b:4b:
                    4c:5b:c9:0d:a8:57:a7:64:0e:a4:b5:f0:b7:12:65:
                    9e:41:bb:e9:78:62:5a:5a:72:34:91:3c:db:2b:37:
                    ad:db:45:ee:3b:d5:f2:25:51:0a:82:c9:c6:50:fa:
                    f6:19:7f:e9:a7:a8:c5:95:4f:a9:78:15:e1:6a:86:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EB:F5:55:89:21:80:08:FF:D5:BB:42:47:12:9F:FA:DD:F9:A5:6A
            X509v3 Authority Key Identifier:
                keyid:20:F7:2F:3C:C9:DF:8F:B0:CA:AB:10:63:44:25:37:DE:31:C2:03:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:58:04:c7:22:52:f7:f8:d3:a4:e4:28:7e:02:d3:97:77:
         e5:65:28:5e:8a:70:b1:4b:58:d9:9b:d0:5f:95:b9:f9:de:1d:
         ec:e5:61:bf:b7:88:4e:82:c2:e1:21:5e:62:1b:1f:65:65:4f:
         81:ae:e6:bb:26:88:28:fc:96:29:ea:19:07:ee:b1:0e:7d:74:
         93:82:a9:2f:f7:15:50:19:40:33:21:ee:5e:ed:a1:ff:0b:a0:
         ee:b7:51:0f:e7:59:f1:20:92:7e:d7:3e:40:2b:79:bf:04:80:
         16:a9:26:03:92:87:05:ee:ae:11:52:8d:76:97:6d:9b:d0:85:
         d1:4a:ca:8a:11:09:3e:7c:cf:23:e0:36:ae:21:1a:e6:2c:a4:
         3d:53:dd:94:aa:74:dc:4a:42:90:67:ca:f3:38:de:b8:05:4b:
         58:16:2e:ff:3b:2b:53:f6:6c:b9:09:e7:94:16:1d:d9:4b:78:
         9a:45:eb:d5:3e:d5:73:4f:a5:90:7d:3f:72:45:61:c5:14:85:
         c1:00:5f:1a:63:c0:4f:9e:5d:a3:82:33:67:3b:d4:7d:be:46:
         02:b1:75:d8:4a:3a:67:dd:ed:18:c0:99:8f:a3:f2:a8:fe:d1:
         2b:89:a1:a0:00:47:8f:8d:b6:55:d9:d5:01:cc:43:6e:96:ac:
         7c:e6:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----