Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft
File:                     DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft (raw, json)
Hash identifier:          +o0HTdY/1qzQ7/u/Y4/5l6FPhL1LNSU6h3Q0pIFbCSI=
Subject key identifier:   D8:D1:BA:A9:CB:A8:6D:B8:29:AD:E2:EF:59:E6:8C:C5:16:57:B8:1E
Authority key identifier: DD:52:D1:8E:6E:E1:2F:A0:65:9C:A4:CA:95:01:A1:76:AF:07:44:03
Certificate issuer:       /CN=DD52D18E6EE12FA0659CA4CA9501A176AF074403
Certificate serial:       12160A36E84E81CB468D217B6AD8A2117F03C5B1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft
Manifest number:          2D
Signing time:             Sat 28 Sep 2024 17:32:54 +0000
Manifest this update:     Sat 28 Sep 2024 17:27:54 +0000
Manifest next update:     Sun 29 Sep 2024 21:13:54 +0000
Files and hashes:         1: DD52D18E6EE12FA0659CA4CA9501A176AF074403.crl (hash: vIzSq9QobeNuK2TIxygTXFNocHFZVydZPgT3vLlwphA=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:16:0a:36:e8:4e:81:cb:46:8d:21:7b:6a:d8:a2:11:7f:03:c5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD52D18E6EE12FA0659CA4CA9501A176AF074403
        Validity
            Not Before: Sep 28 17:27:54 2024 GMT
            Not After : Sep 29 21:13:54 2024 GMT
        Subject: CN=D8D1BAA9CBA86DB829ADE2EF59E68CC51657B81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:01:31:ad:6a:a7:92:d6:78:3a:e8:b8:7f:
                    5a:72:5f:d9:87:25:3e:ca:8e:f4:19:98:f7:93:0a:
                    da:d4:2a:53:e7:cf:e5:39:3f:1e:bc:88:b5:d6:1f:
                    bd:76:36:88:a1:46:81:65:58:bb:93:fe:f1:0e:73:
                    20:3f:d6:ee:3d:40:fa:8b:d8:44:a8:b0:a7:e1:89:
                    4d:59:c5:d6:2a:29:24:c4:34:95:a8:32:13:e7:36:
                    e5:ef:51:77:4e:75:92:cc:5b:20:e4:59:d3:8e:f6:
                    92:75:60:6d:b1:72:a9:d2:05:f5:67:f3:7b:de:10:
                    69:fd:33:20:7e:3d:ef:b2:f4:36:f0:43:8a:eb:6e:
                    65:95:f9:89:4d:05:e9:e6:d3:37:c6:c3:d6:9e:46:
                    84:e9:b1:3f:f9:d4:30:a4:a6:e1:84:06:d3:bc:ac:
                    72:79:e6:27:68:3f:7d:da:8e:5c:6e:b9:73:be:39:
                    ec:30:c7:99:6b:60:d2:03:b1:09:16:7e:0e:5c:3d:
                    6b:3a:01:2a:83:02:44:46:a5:92:27:1c:db:3e:2c:
                    5a:d4:97:73:11:58:c4:00:fb:d0:98:33:e3:37:7c:
                    a1:0c:73:30:02:67:59:4c:e1:eb:d4:7e:c2:ed:81:
                    ca:c3:cc:bb:cd:94:ae:5b:14:28:ee:a8:bf:9e:4a:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D1:BA:A9:CB:A8:6D:B8:29:AD:E2:EF:59:E6:8C:C5:16:57:B8:1E
            X509v3 Authority Key Identifier:
                keyid:DD:52:D1:8E:6E:E1:2F:A0:65:9C:A4:CA:95:01:A1:76:AF:07:44:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6c:4f:26:f5:3a:e6:ca:72:a3:88:25:46:0f:58:de:66:03:
         ef:16:6e:02:4c:e1:99:9d:ce:10:86:6c:3f:38:89:c4:32:2f:
         01:b4:31:8b:9d:39:68:f1:e5:74:0b:b3:60:63:69:a8:91:d3:
         e3:bc:d4:c1:8e:85:94:c5:d4:45:d6:7b:67:49:7a:28:51:3e:
         1c:35:7e:38:d2:95:70:bb:03:83:32:a9:aa:63:d7:8e:bb:50:
         02:e5:ee:ca:8b:d8:c9:da:bc:e0:97:af:b4:05:ef:5d:41:10:
         04:28:e4:1c:d1:3f:c6:b2:bb:d6:8c:2b:44:9c:25:ac:9c:c2:
         43:62:6e:c5:79:52:88:20:46:ce:a4:47:c7:55:b7:aa:ba:7c:
         4d:ca:35:ef:36:b4:63:74:9a:96:d6:7c:8d:0e:31:c2:6d:28:
         eb:d4:cb:c4:59:bc:5c:48:87:df:01:1b:13:c9:5e:d8:a1:02:
         22:0e:e2:f6:8a:61:ac:73:0d:c7:9d:4e:39:d9:36:f0:5d:a5:
         07:90:72:3e:c8:45:23:39:c5:0f:94:b4:6f:ff:b1:7d:af:89:
         5a:97:9b:c5:a3:2a:56:45:65:56:6e:b4:be:bd:b7:e7:eb:95:
         5f:19:1c:6c:f6:8e:d2:cd:3e:50:f5:41:e6:3b:0a:de:60:a7:
         c3:d6:78:61
-----BEGIN CERTIFICATE-----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