Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db83204e-d4fe-40c0-96c2-ae3c6221d2e1/0/140B39800895C6316A46E84D6DB8A40F06DD0F06.mft
File:                     140B39800895C6316A46E84D6DB8A40F06DD0F06.mft (raw, json)
Hash identifier:          rwgG7K/B5vUxEYYXTFeBUn2AnhJ2aivkIom0FGAy8HU=
Subject key identifier:   EC:92:6E:DC:1A:F2:DA:23:B1:78:65:16:EE:AD:56:F8:18:7A:31:0F
Authority key identifier: 14:0B:39:80:08:95:C6:31:6A:46:E8:4D:6D:B8:A4:0F:06:DD:0F:06
Certificate issuer:       /CN=140b39800895c6316a46e84d6db8a40f06dd0f06
Certificate serial:       7ECD5D1C7035972B0B31253AD9D0C5FAC30DD8ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAs5gAiVxjFqRuhNbbikDwbdDwY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db83204e-d4fe-40c0-96c2-ae3c6221d2e1/0/140B39800895C6316A46E84D6DB8A40F06DD0F06.mft
Manifest number:          0A
Signing time:             Sun 17 Dec 2023 01:42:51 +0000
Manifest this update:     Sun 17 Dec 2023 01:37:51 +0000
Manifest next update:     Mon 18 Dec 2023 02:38:51 +0000
Files and hashes:         1: 140B39800895C6316A46E84D6DB8A40F06DD0F06.crl (hash: 6099AlhmU+guC0CWEkf5S+g2E6CeiGcU0u+5lMrr28g=)
                          2: AS215978.asa (hash: JGfazw9b5eWF7vns+6QAlTIYZBIr4eEwjSvZ53qi0M8=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cd:5d:1c:70:35:97:2b:0b:31:25:3a:d9:d0:c5:fa:c3:0d:d8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140b39800895c6316a46e84d6db8a40f06dd0f06
        Validity
            Not Before: Dec 17 01:37:51 2023 GMT
            Not After : Dec 18 02:38:51 2023 GMT
        Subject: CN=EC926EDC1AF2DA23B1786516EEAD56F8187A310F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:b3:af:23:16:16:cb:4b:2a:1b:52:fd:91:
                    09:76:17:3a:30:71:09:dc:29:08:dc:b1:4f:1e:98:
                    9e:aa:b6:c1:24:9a:86:66:67:52:71:2b:79:42:e1:
                    e3:8a:23:15:24:3c:06:5a:d7:da:de:3b:a7:2e:25:
                    a2:97:80:17:02:4e:51:5c:26:14:fe:40:88:30:56:
                    51:2d:d6:99:b0:46:42:b1:98:ba:13:96:89:2e:04:
                    c1:08:4b:2b:eb:a8:64:67:c3:03:f6:af:16:90:7c:
                    b9:94:10:0b:3a:ea:7c:17:91:96:f6:e9:9e:f9:f8:
                    5b:ef:7c:d7:82:df:dc:14:67:42:c6:c2:9f:b2:2b:
                    33:bd:bd:c3:47:ac:b2:b9:e8:47:d7:58:f5:9e:ca:
                    54:38:9f:5a:86:10:78:5d:93:7d:4a:44:55:c1:2c:
                    1c:ef:bf:c9:f3:d4:06:7d:1a:04:5c:aa:c6:d3:12:
                    95:b4:75:da:de:ce:01:66:3f:bd:9b:11:4c:ac:97:
                    1c:24:a0:95:ce:c7:cd:46:d8:1f:9c:33:25:15:e0:
                    13:ee:29:6d:9f:26:ec:e2:ee:c9:c9:7f:d6:95:d8:
                    f7:c9:3c:bd:36:7b:58:03:b5:69:4b:fe:5b:e1:a5:
                    a4:cd:74:bb:a2:46:93:2d:35:3c:b6:a9:8e:49:b4:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:6E:DC:1A:F2:DA:23:B1:78:65:16:EE:AD:56:F8:18:7A:31:0F
            X509v3 Authority Key Identifier:
                keyid:14:0B:39:80:08:95:C6:31:6A:46:E8:4D:6D:B8:A4:0F:06:DD:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db83204e-d4fe-40c0-96c2-ae3c6221d2e1/0/140B39800895C6316A46E84D6DB8A40F06DD0F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAs5gAiVxjFqRuhNbbikDwbdDwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db83204e-d4fe-40c0-96c2-ae3c6221d2e1/0/140B39800895C6316A46E84D6DB8A40F06DD0F06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:38:33:47:e2:26:79:db:db:3d:b1:05:4f:a0:77:12:55:a8:
         55:2f:96:18:03:11:75:1b:32:19:76:52:2a:52:7b:53:de:d4:
         44:ac:52:9d:16:4a:87:db:0f:d9:e8:f1:fd:87:25:45:9f:8d:
         66:74:80:f7:e5:fa:ac:00:3d:11:95:53:fc:c5:40:f0:61:1c:
         c2:31:c4:36:20:fb:71:56:e5:64:ea:2e:46:03:b9:b5:d8:ed:
         ba:74:72:bd:16:f3:9d:99:75:7b:ac:e3:3c:a4:c2:6a:4f:13:
         8b:80:45:c8:ab:c6:4e:22:b8:1a:0f:89:41:d1:68:a4:ab:d7:
         d9:c6:87:a7:98:1d:65:74:3c:ea:4f:60:ca:2a:23:27:79:f9:
         b5:54:c8:e0:65:69:20:e7:26:eb:4c:0b:3f:50:14:4d:96:fb:
         3b:23:b3:a6:cb:aa:e2:5f:14:33:aa:5a:c6:9e:ce:e3:18:55:
         c9:0f:8d:b4:cc:a4:62:25:c4:5a:ab:cc:35:cb:be:95:15:51:
         5d:5d:ce:fd:0b:7e:a3:c3:d9:47:73:ea:1f:e0:17:ef:80:f1:
         96:83:f1:39:de:87:72:7c:bb:e9:b6:5f:eb:5b:11:59:4c:51:
         8c:d3:6c:93:e1:52:f8:ec:86:91:8c:98:eb:8a:fa:e5:c0:bc:
         19:71:7d:fe
-----BEGIN CERTIFICATE-----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