Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          4ehiMkSBZdgazM+FCoGWAsYkVU0xfHBE1DGt3Jikigs=
Subject key identifier:   31:C8:39:55:1A:17:88:9A:EF:DA:58:8B:59:0B:DB:AF:6A:57:D6:79
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       1BB18EA1547CB29D2331415C8312E6376F6A69B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          01F2
Signing time:             Fri 31 Jan 2025 03:09:09 +0000
Manifest this update:     Fri 31 Jan 2025 03:04:09 +0000
Manifest next update:     Sat 01 Feb 2025 06:15:09 +0000
Files and hashes:         1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: gN42eyl6zSSiCvngLQRJEvVekvQOD7MT7DrhNiPaJr0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b1:8e:a1:54:7c:b2:9d:23:31:41:5c:83:12:e6:37:6f:6a:69:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Jan 31 03:04:09 2025 GMT
            Not After : Feb  1 06:15:09 2025 GMT
        Subject: CN=31C839551A17889AEFDA588B590BDBAF6A57D679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:c9:fe:6b:d9:5c:07:e1:c8:18:fe:65:a5:
                    90:f7:00:00:09:27:fa:bb:d5:2f:3e:3c:2e:8e:5d:
                    dd:4c:24:78:ae:d8:36:5b:b6:b0:6c:7e:f4:22:c3:
                    3c:0e:02:72:9d:ec:a2:22:dc:00:f5:61:15:10:c7:
                    0a:52:be:38:b2:32:2d:d9:d2:a1:98:85:b4:ab:9f:
                    ab:ac:ba:98:3a:2d:88:4e:53:f8:bd:72:a6:57:f4:
                    12:c0:8e:bd:7a:ab:52:63:b5:d7:ed:a4:5c:36:6c:
                    66:53:ca:9e:c5:f4:cf:60:4d:f8:2f:c4:43:f3:14:
                    94:62:6a:4f:56:0b:32:bf:39:5e:4c:e4:f2:2b:9a:
                    f7:2a:36:b0:23:12:b7:87:d3:21:f2:4d:c2:10:82:
                    5f:ad:46:90:4c:0d:1f:70:63:0d:3e:4d:ac:c4:07:
                    d1:56:c0:39:d5:44:8e:e6:7c:18:10:1a:5a:0f:df:
                    26:c2:f7:af:59:a1:a7:3f:75:8f:e4:40:0e:3b:8e:
                    a7:4d:f4:64:c2:29:a7:39:4f:ae:9e:15:ea:8c:8a:
                    b6:73:27:a6:2e:8a:78:37:3d:c9:0e:48:62:a9:ca:
                    57:ac:24:5a:9d:48:2a:20:ed:58:74:6e:7a:59:04:
                    a6:7a:62:b4:0b:6d:05:c4:8c:52:62:5c:f8:a1:39:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C8:39:55:1A:17:88:9A:EF:DA:58:8B:59:0B:DB:AF:6A:57:D6:79
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:de:2f:16:01:5e:9e:39:b4:2f:b3:08:fb:d9:34:dd:79:3a:
         c2:9f:30:f6:36:cc:f6:4a:c9:f1:25:65:76:25:9e:e8:f7:58:
         68:cf:46:53:18:ef:02:39:99:c7:67:ea:6a:5c:a7:20:5e:0d:
         2d:e7:b0:b2:0d:8a:a3:6d:c5:0e:3a:2e:43:bd:8b:0d:29:ac:
         39:5d:02:8e:d4:92:29:4c:23:86:00:90:42:ad:e7:8a:a3:46:
         82:fb:76:5b:a0:c4:9a:62:03:5e:0a:be:c6:70:27:23:fd:29:
         84:03:44:22:a6:15:45:6c:70:b7:bf:c3:ed:48:43:96:5c:6c:
         57:f1:38:80:a2:b1:ca:bd:2a:0e:ae:ac:99:21:e9:7b:41:54:
         81:27:d9:15:32:59:8d:8e:4f:f1:88:91:51:96:c6:3d:6e:fa:
         6b:04:e0:8d:cb:5f:48:dd:58:cf:85:44:75:20:09:2c:ba:d2:
         c6:77:12:fd:bf:e0:0a:94:2b:90:1b:19:0b:44:44:81:24:d5:
         25:af:5e:f8:2c:66:8b:9e:8d:2d:41:d8:0b:42:de:d5:55:33:
         a2:91:f4:82:c9:86:3b:de:09:79:45:ac:db:b3:ec:05:89:2b:
         8d:25:de:d2:38:53:9b:96:ce:7a:78:c7:96:32:97:4d:a0:5a:
         18:8a:e0:dd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUG7GOoVR8sp0jMUFcgxLmN29qabkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmEzMTMwYWNmYmZiYTkwMTdhZGRlZjYzN2FjZDMxMmZj
NzYzODI5YTAeFw0yNTAxMzEwMzA0MDlaFw0yNTAyMDEwNjE1MDlaMDMxMTAvBgNV
BAMTKDMxQzgzOTU1MUExNzg4OUFFRkRBNTg4QjU5MEJEQkFGNkE1N0Q2NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CMn+a9lcB+HIGP5lpZD3AAAJ
J/q71S8+PC6OXd1MJHiu2DZbtrBsfvQiwzwOAnKd7KIi3AD1YRUQxwpSvjiyMi3Z
0qGYhbSrn6usupg6LYhOU/i9cqZX9BLAjr16q1JjtdftpFw2bGZTyp7F9M9gTfgv
xEPzFJRiak9WCzK/OV5M5PIrmvcqNrAjEreH0yHyTcIQgl+tRpBMDR9wYw0+TazE
B9FWwDnVRI7mfBgQGloP3ybC969Zoac/dY/kQA47jqdN9GTCKac5T66eFeqMirZz
J6Yuing3PckOSGKpylesJFqdSCog7Vh0bnpZBKZ6YrQLbQXEjFJiXPihOdzLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMcg5VRoXiJrv2liLWQvbr2pX1nkwHwYDVR0j
BBgwFoAUajEwrPv7qQF63e9jes0xL8djgpowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5
NzMyLzEvNkEzMTMwQUNGQkZCQTkwMTdBRERFRjYzN0FDRDMxMkZDNzYzODI5QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FqRXdyUHY3cVFGNjNlOWplczB4TDhk
amdwby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmE4MDY4Mi1j
NTRjLTRkNWEtOTQ1Ni1iMjM5MjUzMDk3MzIvMS82QTMxMzBBQ0ZCRkJBOTAxN0FE
REVGNjM3QUNEMzEyRkM3NjM4MjlBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIN4vFgFenjm0L7MI+9k0
3Xk6wp8w9jbM9krJ8SVldiWe6PdYaM9GUxjvAjmZx2fqalynIF4NLeewsg2Ko23F
DjouQ72LDSmsOV0CjtSSKUwjhgCQQq3niqNGgvt2W6DEmmIDXgq+xnAnI/0phANE
IqYVRWxwt7/D7UhDllxsV/E4gKKxyr0qDq6smSHpe0FUgSfZFTJZjY5P8YiRUZbG
PW76awTgjctfSN1Yz4VEdSAJLLrSxncS/b/gCpQrkBsZC0REgSTVJa9e+Cxmi56N
LUHYC0Le1VUzopH0gsmGO94JeUWs27PsBYkrjSXe0jhTm5bOenjHljKXTaBaGIrg
3Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:37 2025 by rpki-client