Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File:                     21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier:          2DfGF/upZgiBgBba5KbkDKmErFf8wfIc7BTQGknrA+0=
Subject key identifier:   B4:00:2A:99:A4:72:AA:CE:49:A4:54:8E:4E:64:6A:63:2C:7F:35:2E
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer:       /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial:       3E53F0BE5B7581F24EA554AB3A17CF30B06B87A0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number:          18
Signing time:             Sat 12 Jul 2025 10:54:43 +0000
Manifest this update:     Sat 12 Jul 2025 10:49:43 +0000
Manifest next update:     Sun 13 Jul 2025 11:46:43 +0000
Files and hashes:         1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=)
                          2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: 3/at5RW4w/jBx6A8gyUzaSLaUew82owt5PmsPY8cTzA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:53:f0:be:5b:75:81:f2:4e:a5:54:ab:3a:17:cf:30:b0:6b:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
        Validity
            Not Before: Jul 12 10:49:43 2025 GMT
            Not After : Jul 13 11:46:43 2025 GMT
        Subject: CN=B4002A99A472AACE49A4548E4E646A632C7F352E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:1f:ab:60:34:68:a5:e0:90:9c:85:03:6d:
                    f4:06:f5:e2:78:cc:01:a3:12:f4:03:ae:9f:41:cc:
                    aa:cb:a0:8f:c8:29:8e:a0:e4:f4:04:4e:b4:d6:9e:
                    72:8e:84:58:04:56:eb:22:1d:4e:ec:d5:64:a0:05:
                    f8:4a:cd:d0:49:68:63:4a:bd:6e:5e:b7:81:81:6f:
                    cf:44:91:61:b7:bb:1a:b6:53:af:0a:e6:4c:36:b1:
                    84:2d:d3:dd:91:2f:44:f6:8d:65:2b:53:0b:91:0b:
                    a7:64:11:5a:8b:ca:50:b2:d7:a7:10:85:cc:3a:d0:
                    11:bf:9c:02:55:9c:58:cb:9e:10:94:10:b3:fa:f9:
                    1d:ef:6d:78:4e:34:70:1f:25:e1:da:34:5e:1c:e9:
                    a6:7f:85:00:ae:f9:7b:60:8e:07:e2:d5:4c:5f:9e:
                    22:55:31:53:1b:3d:97:81:e9:ab:e4:19:b7:f1:46:
                    ef:1c:24:ec:fd:a6:91:0b:c7:18:14:8d:6f:be:d7:
                    e9:0e:4f:8b:d4:96:46:7c:66:97:cf:81:98:e0:be:
                    ea:6f:d9:4e:d8:26:a4:6c:3d:af:1c:97:57:02:3c:
                    e2:c8:b5:a5:31:97:35:b7:b6:d0:f1:44:75:12:f2:
                    82:01:2e:44:d4:7d:5d:cc:2e:40:6f:25:75:a1:31:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:00:2A:99:A4:72:AA:CE:49:A4:54:8E:4E:64:6A:63:2C:7F:35:2E
            X509v3 Authority Key Identifier:
                keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:65:c1:12:a4:d5:45:72:fb:f6:23:de:df:91:af:c9:6b:55:
         63:7f:64:8e:15:44:d4:d7:c6:fa:db:0d:9f:70:41:f1:e2:7c:
         ab:4b:16:e4:da:b2:15:37:4e:e3:bb:f2:b4:d6:d9:f0:68:d3:
         c4:98:49:fc:18:7d:fb:fe:d7:f7:3d:50:01:8e:e4:89:bc:4b:
         96:39:fd:95:87:81:75:01:b2:3b:4b:7a:df:2e:02:84:4e:73:
         f4:81:50:79:31:ca:f9:f9:49:43:1d:48:e4:c6:1f:92:c7:37:
         fd:6f:2c:11:f3:e1:32:e6:b2:0a:e9:2f:f0:d9:7d:1e:a9:41:
         af:be:1e:e4:97:39:93:99:00:17:89:81:1f:24:9c:a6:46:d2:
         ad:0a:2e:fb:a5:a9:18:e9:f6:a1:5c:53:1e:dc:47:71:56:f9:
         e5:2d:01:36:c5:8e:6c:88:34:3b:8c:b0:f6:4a:0d:7a:9c:93:
         9f:45:75:32:3c:00:24:7c:bf:09:f7:e8:cd:ab:da:b7:ee:31:
         11:5c:e1:32:40:67:14:a6:0a:39:10:0f:e0:74:8c:d0:de:fd:
         e7:9d:de:ca:13:8c:4c:df:c9:f4:2b:1b:b0:11:a8:63:2d:22:
         b5:a3:f1:b9:56:30:6c:c0:18:80:49:e5:63:52:9e:82:ce:94:
         ed:3c:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----