Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/0/AB4C1697B18C3C715553206C4C39BBE9E52F658B.mft
File:                     AB4C1697B18C3C715553206C4C39BBE9E52F658B.mft (raw, json)
Hash identifier:          k6yep+iscriE1DGkOYxjxE1eueGyG9yyAIyMRxX/6nc=
Subject key identifier:   24:73:5B:1B:E5:AE:2F:47:E7:0E:B7:6A:5A:AF:A1:EA:AF:A2:82:99
Authority key identifier: AB:4C:16:97:B1:8C:3C:71:55:53:20:6C:4C:39:BB:E9:E5:2F:65:8B
Certificate issuer:       /CN=ab4c1697b18c3c715553206c4c39bbe9e52f658b
Certificate serial:       1B73C19F303C2E767775D3D5D6C56F94158C6F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q0wWl7GMPHFVUyBsTDm76eUvZYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/0/AB4C1697B18C3C715553206C4C39BBE9E52F658B.mft
Manifest number:          72
Signing time:             Tue 11 Apr 2023 06:32:20 +0000
Manifest this update:     Tue 11 Apr 2023 06:27:20 +0000
Manifest next update:     Wed 12 Apr 2023 10:22:20 +0000
Files and hashes:         1: AB4C1697B18C3C715553206C4C39BBE9E52F658B.crl (hash: 8bQ0a6Kjh080hjFkVw9pC80bxtt5tn+mPjetLA91oEg=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:73:c1:9f:30:3c:2e:76:77:75:d3:d5:d6:c5:6f:94:15:8c:6f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4c1697b18c3c715553206c4c39bbe9e52f658b
        Validity
            Not Before: Apr 11 06:27:20 2023 GMT
            Not After : Apr 12 10:22:20 2023 GMT
        Subject: CN=24735B1BE5AE2F47E70EB76A5AAFA1EAAFA28299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:8e:be:64:b0:13:1b:e4:a4:2a:e5:29:e8:
                    83:db:01:1b:b1:f7:66:d0:4e:f6:06:55:eb:81:9b:
                    27:67:c5:a3:7f:77:f1:37:a8:7b:69:ff:12:e4:e3:
                    88:43:d7:62:e7:36:60:f8:32:7b:15:0c:99:f7:ea:
                    67:d3:43:d6:6c:20:39:74:a8:09:d4:9e:3f:31:71:
                    e8:8d:b7:e0:9b:ee:58:18:8e:cb:66:05:ca:be:84:
                    1e:ae:7e:86:a1:7c:a5:c9:2a:6b:b1:80:84:46:4b:
                    b4:a8:e6:e0:68:b5:d1:49:bf:09:11:7c:e2:9d:c1:
                    52:6a:b0:20:06:1b:ad:e4:61:1a:ce:8f:01:53:03:
                    7d:f2:90:02:00:71:f7:b1:23:1c:98:ec:05:20:34:
                    fd:1d:fb:fa:eb:58:9c:51:a8:7d:58:45:6c:b0:9d:
                    bf:95:ef:30:fd:08:e3:f7:96:57:78:c0:10:33:b8:
                    75:c7:5f:40:c1:50:29:1c:7d:9f:4b:c5:b8:98:a2:
                    3d:11:2f:01:5e:63:c3:ff:37:e8:65:f1:99:cc:3b:
                    f9:f9:57:23:70:6d:9d:f9:09:56:e9:ac:3f:58:34:
                    8f:5b:e3:0a:99:d1:01:d3:e0:a1:82:81:91:d7:29:
                    d6:bc:65:d0:29:43:d9:51:39:f8:4f:e9:41:8a:5d:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:5B:1B:E5:AE:2F:47:E7:0E:B7:6A:5A:AF:A1:EA:AF:A2:82:99
            X509v3 Authority Key Identifier:
                keyid:AB:4C:16:97:B1:8C:3C:71:55:53:20:6C:4C:39:BB:E9:E5:2F:65:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/0/AB4C1697B18C3C715553206C4C39BBE9E52F658B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0wWl7GMPHFVUyBsTDm76eUvZYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/0/AB4C1697B18C3C715553206C4C39BBE9E52F658B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6a:c7:46:ae:d5:ed:4f:3a:51:92:9b:92:24:e4:75:b7:00:
         c7:d5:e1:ec:b3:29:d9:bf:43:80:6e:84:03:a0:e8:fd:64:62:
         b7:5b:60:1c:0e:81:97:32:ba:b9:09:5b:f6:09:f9:fc:4a:82:
         0f:22:ec:60:58:82:9f:ef:40:dd:6a:7b:11:a5:80:ea:9d:b9:
         14:68:15:e8:28:a6:17:9c:6c:30:6f:ee:86:fa:8e:f8:50:c3:
         04:3d:d2:3f:88:31:89:7e:85:24:3f:14:3a:f3:77:8a:5b:ce:
         52:35:8e:21:a1:f1:34:99:ac:b1:8a:97:aa:d1:6c:ab:84:20:
         ce:ee:ac:38:b7:ff:55:d8:3d:05:cb:18:80:88:35:0c:b9:84:
         d6:88:f2:c2:d6:2d:33:29:be:56:4f:c9:28:bf:9d:ca:a4:3c:
         26:05:e6:44:12:fd:43:7c:06:65:a4:b1:08:b4:0e:ad:02:0d:
         28:96:5a:fc:2d:bc:cf:50:ae:6a:75:74:7a:58:ee:3f:5d:07:
         04:e9:e0:30:b5:2f:33:be:58:30:e1:c9:67:e6:28:7a:68:ce:
         f5:9a:06:a6:79:db:8e:0a:80:65:b7:89:4e:25:6d:df:a0:ed:
         33:05:2d:1d:51:00:49:53:af:52:29:65:47:87:18:9d:c3:6c:
         35:67:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----