Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.mft
File:                     EF55D32540CC64935F37B5C7BF144EF9C489D9BE.mft (raw, json)
Hash identifier:          hQ12y2wdAQelnENr1unxW+kqYCVQYA9Qno0GM4vEFhU=
Subject key identifier:   BE:15:D8:E3:1B:AE:1F:D2:9F:75:A0:77:DC:CE:C1:79:3A:6A:37:20
Authority key identifier: EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE
Certificate issuer:       /CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
Certificate serial:       789C0BBBFD29414E153471F89F9E5C9DBCF06413
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.mft
Manifest number:          70
Signing time:             Tue 11 Apr 2023 10:08:03 +0000
Manifest this update:     Tue 11 Apr 2023 10:03:03 +0000
Manifest next update:     Wed 12 Apr 2023 12:59:03 +0000
Files and hashes:         1: 326130613a363034303a316130303a3a2f34382d3438203d3e20323030323130.roa (hash: cON7nEkfgDWxuKlwJc/99PkNZbp0+iUIDDZMlyhtxDI=)
                          2: 326130613a363034303a316130313a3a2f34382d3438203d3e20323030323130.roa (hash: cMOlmnpYRRHNaoNTUZiaxxRaoouJoixSVzqU5QSW8gI=)
                          3: 326130613a363034303a316130333a3a2f34382d3438203d3e20323030323130.roa (hash: 6y801QpYpcMFoINKlUGJK/jtUh6thh42IqqcNQ3WUoo=)
                          4: 326130613a363034303a316130323a3a2f34382d3438203d3e20323030323130.roa (hash: qvnvKDJ86IlrvMA5oy/PCM1JHdLMuBmS66oWkz9vwa8=)
                          5: EF55D32540CC64935F37B5C7BF144EF9C489D9BE.crl (hash: xf4WYBNADkbodqeo0RmPCdTn/9MwK5fr5XSYkNCYnZg=)
                          6: 326130613a363034303a316130343a3a2f34382d3438203d3e20323030323130.roa (hash: poJhbI+vn4OFmeNo2DOadzqELar1bV+pvrIqMH0nT8M=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9c:0b:bb:fd:29:41:4e:15:34:71:f8:9f:9e:5c:9d:bc:f0:64:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF55D32540CC64935F37B5C7BF144EF9C489D9BE
        Validity
            Not Before: Apr 11 10:03:03 2023 GMT
            Not After : Apr 12 12:59:03 2023 GMT
        Subject: CN=BE15D8E31BAE1FD29F75A077DCCEC1793A6A3720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:89:f6:e1:f6:b1:a5:c6:f1:d9:18:a1:4e:b8:
                    a9:7f:e8:f8:ac:67:85:c1:61:59:dc:d1:03:dd:04:
                    bb:f2:38:ef:9c:8f:6b:df:4c:47:7a:67:b5:ab:8d:
                    d9:50:59:14:1b:e2:3c:45:af:0d:c7:98:db:b9:d4:
                    5f:7a:6d:7d:89:fb:3b:4f:d6:c5:c6:f3:78:d0:59:
                    4e:cf:f5:e5:52:6f:e1:70:48:ac:f1:2f:50:a8:98:
                    93:37:4d:ce:ff:35:94:63:32:0c:ec:79:71:75:50:
                    a2:59:aa:b2:2e:3a:ba:48:83:1e:68:a3:22:39:f3:
                    ad:a1:a7:18:d5:ac:11:99:50:fe:71:e4:c6:3d:b7:
                    90:21:44:47:04:79:19:b7:c3:97:15:c9:e9:e8:e7:
                    c7:c8:6f:58:1d:a6:da:3a:ba:42:ca:0c:f1:e9:18:
                    aa:51:62:74:50:7c:65:ed:c3:77:53:bc:70:90:31:
                    96:26:a7:31:55:bc:5c:fd:92:46:f1:ae:65:d8:84:
                    9b:da:61:08:12:d5:e3:73:b3:62:20:54:3d:ad:d8:
                    12:99:f5:27:bb:1b:f4:a4:d2:2d:14:f3:f5:65:d4:
                    f8:c4:12:fe:54:eb:61:00:79:2e:09:66:36:03:1b:
                    ab:da:49:63:ca:6a:d7:79:67:00:05:b5:b0:c7:fb:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:15:D8:E3:1B:AE:1F:D2:9F:75:A0:77:DC:CE:C1:79:3A:6A:37:20
            X509v3 Authority Key Identifier:
                keyid:EF:55:D3:25:40:CC:64:93:5F:37:B5:C7:BF:14:4E:F9:C4:89:D9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2288b0e-a1d0-4c1a-8ced-a057a6076a7f/1/EF55D32540CC64935F37B5C7BF144EF9C489D9BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ea:57:66:c4:0b:92:7b:90:61:e4:70:5a:0c:7a:50:87:4b:
         be:80:b0:87:a7:0f:6d:89:7d:ab:d9:e9:7a:cb:79:73:ec:1d:
         2a:09:8d:f9:2a:c7:da:41:4c:0c:50:ae:b8:5f:94:34:df:24:
         c0:64:bb:5a:d3:d0:49:b8:18:77:c2:b8:60:9b:7b:54:32:a9:
         7b:22:cc:72:6d:96:9a:3d:dc:d5:22:4a:db:bf:91:5b:10:58:
         65:ba:f8:28:23:97:06:01:57:70:df:f6:a9:4c:f2:14:d2:a2:
         3e:a2:19:00:58:48:6f:f7:b2:e1:05:68:f1:79:d3:62:12:ad:
         8d:45:48:b7:ae:27:16:c6:d5:7b:3f:1d:e8:da:55:bf:c9:6d:
         ca:15:8f:a4:17:a6:05:22:1f:89:17:7a:cc:03:27:0d:94:99:
         6d:aa:5a:df:a7:20:44:52:b0:9f:26:e0:46:57:52:93:ed:be:
         63:d7:14:86:55:45:b6:10:3d:3d:25:61:f9:b2:fe:3c:ab:b6:
         a4:c4:57:63:8b:a4:61:4c:04:1b:22:d2:bc:3c:94:b7:61:69:
         ab:93:df:5c:83:97:86:03:2d:ba:a2:9b:80:73:4f:a2:99:a9:
         8d:8a:6f:02:ce:a4:b5:c4:de:d1:89:cc:c5:89:aa:8e:d8:96:
         9a:2e:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----