Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft
File:                     A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft (raw, json)
Hash identifier:          1Xbalvkw3D8XFeRL7OtGfsvQmeaKiq6loacIvz4JEfI=
Subject key identifier:   38:29:9B:A5:C0:E7:0B:DD:E0:B3:DA:C9:89:CD:3C:EB:77:66:69:71
Authority key identifier: A7:B8:43:EC:30:FE:A3:10:A3:8C:31:4F:45:D3:8E:00:BA:B9:B1:80
Certificate issuer:       /CN=A91650860000/serialNumber=A7B843EC30FEA310A38C314F45D38E00BAB9B180
Certificate serial:       51E3C8C3E4A563B34E363B78040697EE517366B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p7hD7DD-oxCjjDFPRdOOALq5sYA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft
Manifest number:          01
Signing time:             Thu 03 Jul 2025 03:58:52 +0000
Manifest this update:     Thu 03 Jul 2025 03:53:52 +0000
Manifest next update:     Fri 04 Jul 2025 04:55:52 +0000
Files and hashes:         1: A7B843EC30FEA310A38C314F45D38E00BAB9B180.crl (hash: DU1KF9i/WWkZVl4Wz25K6t4zolFmKYQ9ad2zNxM83E8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e3:c8:c3:e4:a5:63:b3:4e:36:3b:78:04:06:97:ee:51:73:66:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=A7B843EC30FEA310A38C314F45D38E00BAB9B180
        Validity
            Not Before: Jul  3 03:53:52 2025 GMT
            Not After : Jul  4 04:55:52 2025 GMT
        Subject: CN=38299BA5C0E70BDDE0B3DAC989CD3CEB77666971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:1f:cf:2a:91:2b:c5:fe:8a:96:c5:e0:07:
                    cd:a5:ec:c7:22:57:e7:67:c4:65:37:04:70:93:8f:
                    7b:7d:2c:a7:9b:b1:7d:77:4e:37:0a:1e:a4:31:ec:
                    ca:23:fa:da:0a:71:41:a9:fa:b9:e7:01:66:d9:c5:
                    e9:f0:ed:83:57:5d:59:0e:eb:7f:3a:72:19:62:eb:
                    a1:86:c6:28:07:ed:65:6d:fc:5e:fa:08:71:c2:ac:
                    c4:f5:2b:cc:9c:dc:42:20:cf:90:74:eb:42:3d:34:
                    51:40:0d:22:78:75:4f:7d:2b:fa:c7:11:d6:13:eb:
                    96:19:20:49:29:0a:6c:dd:37:38:25:1c:e9:f7:43:
                    b1:c4:28:6d:78:12:8f:86:2b:6b:b5:6d:a2:3d:9c:
                    c8:c6:52:7b:ea:f4:b9:09:b2:d0:d1:72:12:f1:66:
                    fd:cd:5b:3f:1b:55:96:40:ca:a9:cc:86:77:04:51:
                    86:65:55:c1:bc:80:a2:f3:e1:1f:60:9d:57:0c:1f:
                    65:13:fe:34:f0:d6:16:ac:8f:62:90:5a:e1:2e:2f:
                    bf:d3:2d:7c:cb:de:a8:89:1f:71:ce:a0:16:e6:52:
                    f6:1d:31:fd:eb:3a:60:aa:8d:6b:08:e3:cb:87:19:
                    80:82:b6:40:bd:21:77:2b:4c:29:c5:7b:e2:e2:e0:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:9B:A5:C0:E7:0B:DD:E0:B3:DA:C9:89:CD:3C:EB:77:66:69:71
            X509v3 Authority Key Identifier:
                keyid:A7:B8:43:EC:30:FE:A3:10:A3:8C:31:4F:45:D3:8E:00:BA:B9:B1:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p7hD7DD-oxCjjDFPRdOOALq5sYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/5/A7B843EC30FEA310A38C314F45D38E00BAB9B180.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d4:f8:04:97:27:0a:25:41:51:8e:67:b0:2d:97:e4:6a:f8:
         7c:75:1c:2e:8e:65:b0:6e:00:27:4b:79:80:ac:6d:80:1b:db:
         24:3c:58:f0:54:e6:c1:25:a6:50:8f:ab:3d:5d:cb:19:7d:8a:
         1f:42:59:ef:ee:7f:e1:9d:34:b2:e0:cb:1c:f7:e6:25:5c:49:
         fa:5c:64:42:41:83:c7:c2:7a:9d:26:b8:e7:e9:af:5f:41:19:
         a2:93:84:5c:37:6b:4f:e6:b4:71:db:20:77:0c:5a:08:26:ca:
         91:98:cb:1f:7d:af:35:42:bc:ba:5a:95:93:4a:0e:58:d2:df:
         0f:b0:1f:f8:ca:b3:46:ce:a3:83:41:77:21:dc:6d:ec:37:17:
         a7:71:29:52:26:0f:74:3d:8b:2a:5b:ea:e8:e8:9e:57:5d:ed:
         03:c6:bd:8b:97:d8:64:66:ce:c5:d4:fb:88:b5:b9:4e:de:26:
         52:1c:e4:0f:77:44:49:a8:d0:50:b1:d1:01:f4:79:e0:44:c2:
         b2:90:db:4a:50:9f:5e:bd:d8:31:b1:62:65:89:f9:e2:8a:b4:
         84:98:77:8f:9d:2b:df:17:92:01:17:ba:04:7d:16:b1:94:7f:
         80:eb:0e:e7:cf:d9:c5:2c:8e:90:e9:01:c4:54:8d:df:32:f4:
         3b:be:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----