Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft
File:                     5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft (raw, json)
Hash identifier:          VeYkAQxEuZlAS0rhCvVkM2sNV3/eo1QhtXP+DBI4NBk=
Subject key identifier:   37:FE:50:5D:04:08:E1:93:CE:B3:1C:0A:83:C1:60:B8:77:FA:15:4C
Authority key identifier: 5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9
Certificate issuer:       /CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9
Certificate serial:       2571BAFB9C0D6559EAB4E796C1E1823BF394EFB3
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft
Manifest number:          2B
Signing time:             Fri 16 May 2025 05:35:52 +0000
Manifest this update:     Fri 16 May 2025 05:30:52 +0000
Manifest next update:     Sat 17 May 2025 06:25:52 +0000
Files and hashes:         1: 5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl (hash: +49d81xJYd3cg3G1g/DSMFXhhlr+6cJznGW4WcyisCI=)
                          2: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: GjvfeB16Dq44ljlvPcegJERTdmH8Ubv3C8M2ssZH0r4=)
                          3: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0unAsI8V1gSzCFkFuiXCKj+qBRO+IDm5TxOFvRQfPXM=)
                          4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: wCQx6AVbdx3+Kj+Us2aAmoxx84TC0UWyCZ76TDOkAHY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:71:ba:fb:9c:0d:65:59:ea:b4:e7:96:c1:e1:82:3b:f3:94:ef:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9
        Validity
            Not Before: May 16 05:30:52 2025 GMT
            Not After : May 17 06:25:52 2025 GMT
        Subject: CN=37FE505D0408E193CEB31C0A83C160B877FA154C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:c3:54:6c:e5:d6:f9:bd:6f:a4:98:e3:a1:
                    6c:cf:62:ee:1b:ef:c1:c0:96:39:3b:99:6a:d7:b7:
                    5a:27:7b:03:a8:0d:42:5e:74:ba:d0:93:d0:ac:aa:
                    29:9e:c1:ca:39:94:68:41:8f:9b:52:28:14:60:53:
                    4b:6c:aa:e6:c5:6e:a7:fe:e8:7b:63:4b:58:6d:18:
                    7d:3a:2b:5c:7d:65:17:dd:1b:b2:f2:40:fe:e7:9d:
                    e4:4e:dd:a4:c9:01:b8:9e:ac:45:e1:19:60:7b:19:
                    d8:1c:0c:71:f1:b3:49:e1:1d:2a:3c:c7:90:0d:a4:
                    aa:1c:3c:f2:20:98:92:91:58:ee:6b:bb:d2:f3:2b:
                    48:fb:b9:d7:ff:05:36:03:12:a9:69:c4:6b:cf:2b:
                    02:98:10:75:2d:9a:fc:84:4d:90:d8:34:42:93:07:
                    3b:d7:9d:0d:ed:f1:38:fd:44:28:07:af:f4:67:34:
                    fc:0c:7f:3e:c3:05:76:ad:42:6b:e1:0f:ac:62:8a:
                    d4:b2:32:e7:07:d6:e9:25:91:0d:d9:93:d0:25:3a:
                    8b:84:9d:6e:40:9f:3a:6d:2c:37:2b:92:3b:22:65:
                    6e:74:0f:5e:41:f8:1b:53:2b:ef:2b:c9:fd:8e:43:
                    76:47:29:81:39:fc:6e:d9:a7:95:95:38:41:ab:2b:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FE:50:5D:04:08:E1:93:CE:B3:1C:0A:83:C1:60:B8:77:FA:15:4C
            X509v3 Authority Key Identifier:
                keyid:5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2f:e5:96:cd:44:4e:62:48:f4:e5:ac:8e:d4:26:7a:ef:0a:
         f1:82:0e:b7:48:37:e5:ec:0e:16:f3:bb:58:f8:46:95:3b:6e:
         2f:88:02:3f:89:2c:ee:cd:97:fd:85:03:d3:d3:d2:57:93:ce:
         9a:36:60:ee:6d:3b:d3:2c:86:1a:11:07:d9:7c:bf:78:50:b9:
         d7:0c:67:b5:92:58:c3:f0:e0:d1:c4:4a:30:a7:75:ad:1b:4e:
         d3:20:fd:e9:1c:d5:2b:cc:9c:3e:cf:f2:6c:2f:63:f4:03:df:
         ec:ac:f0:e1:b7:b8:9b:11:40:8f:3c:73:41:d7:cd:0f:7e:21:
         80:f8:ed:70:d0:60:c7:a1:1d:52:02:ab:38:3e:6e:66:84:8e:
         d4:2d:9d:6c:72:4c:fe:cd:b5:d8:1b:1e:e8:c6:ae:70:da:28:
         c7:ce:b6:15:f1:ab:bc:c8:e4:29:24:25:49:6a:c9:39:6f:53:
         70:4e:5d:16:a5:5a:4e:9f:81:76:91:67:f9:e3:13:ad:74:b6:
         c0:02:2b:20:16:e2:9f:c2:04:1c:7d:41:48:5f:10:29:e1:e0:
         3b:91:74:b6:17:9b:d8:01:44:45:6c:24:85:c4:47:c7:c9:fb:
         bb:1e:54:45:26:08:13:db:b6:37:29:7c:c9:05:e8:c9:cf:b1:
         c9:89:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----