Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft
File:                     B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft (raw, json)
Hash identifier:          EsbaLbG9yk7PWg4V9ZparUumkiorRLbIQWMgh5yrrzY=
Subject key identifier:   DE:E3:CF:9F:42:2E:7D:C3:C8:E8:7F:84:09:08:DF:15:6C:2F:7E:3A
Authority key identifier: B3:DB:14:53:17:13:D5:39:0D:FD:AD:1D:3B:DC:A5:BB:07:9F:53:DA
Certificate issuer:       /CN=B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA
Certificate serial:       4C24EDA46D34F01F9DF92A8B196AA4D60D636FF7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft
Manifest number:          38
Signing time:             Thu 05 Sep 2024 12:31:28 +0000
Manifest this update:     Thu 05 Sep 2024 12:26:28 +0000
Manifest next update:     Fri 06 Sep 2024 12:47:28 +0000
Files and hashes:         1: 326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa (hash: rx6IUKhJahLbRAuJ+9gUsNn7bR5o5GyqNdUE075PAPU=)
                          2: B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.crl (hash: tjQwQLu6l8NzsGgTOnOjMMgxgvGdcNiR7TVCCWeIdDY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:24:ed:a4:6d:34:f0:1f:9d:f9:2a:8b:19:6a:a4:d6:0d:63:6f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA
        Validity
            Not Before: Sep  5 12:26:28 2024 GMT
            Not After : Sep  6 12:47:28 2024 GMT
        Subject: CN=DEE3CF9F422E7DC3C8E87F840908DF156C2F7E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:42:65:12:ed:c6:f0:3d:83:d3:37:b2:a0:
                    3a:bf:cc:4e:9e:6f:b6:b1:06:d4:79:66:05:6e:f8:
                    b4:5b:09:41:ea:8a:97:db:44:eb:14:d7:78:72:90:
                    e3:8d:d4:19:b3:e1:0b:b6:2b:dc:06:74:e4:74:5b:
                    f9:9f:94:1c:a6:a0:d3:f4:b2:0f:1a:f2:72:70:eb:
                    46:91:26:37:6a:52:d9:87:b6:6d:04:b4:47:7f:5c:
                    ac:dd:4b:c0:59:ff:64:83:60:08:35:6f:76:af:a9:
                    c3:a9:c9:52:c2:66:ed:d5:9c:72:c6:a4:80:cf:72:
                    83:90:2e:49:b4:7e:2a:5b:21:d0:cb:9f:64:a2:5f:
                    db:44:3b:65:4a:9d:dd:21:5f:de:7a:85:0b:3d:4b:
                    33:14:f3:3b:ba:89:14:51:f4:6f:3e:6d:e0:43:34:
                    71:dd:84:26:e1:fd:0a:27:43:2a:c5:d3:84:54:a1:
                    02:1a:d8:c0:17:3b:9e:20:4d:3a:af:8b:44:83:69:
                    88:4e:c7:71:c8:10:f1:24:e2:7d:5a:33:4e:17:0c:
                    df:54:fa:34:09:a7:5a:0f:fd:e6:d9:01:23:18:9a:
                    51:b9:c7:e4:ed:7c:c6:03:d5:8b:0e:36:e9:c2:dc:
                    d8:d5:2f:35:41:7a:a3:0e:f2:c8:95:08:7a:53:1f:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E3:CF:9F:42:2E:7D:C3:C8:E8:7F:84:09:08:DF:15:6C:2F:7E:3A
            X509v3 Authority Key Identifier:
                keyid:B3:DB:14:53:17:13:D5:39:0D:FD:AD:1D:3B:DC:A5:BB:07:9F:53:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/B3DB14531713D5390DFDAD1D3BDCA5BB079F53DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:bd:a3:da:94:eb:6f:65:1a:da:e4:e1:82:91:ed:fb:9c:
         e0:d6:95:09:1f:27:06:8b:0e:da:e2:59:1f:7c:ec:1a:3a:10:
         09:85:83:96:0c:b3:90:0f:d5:1f:3c:81:89:c7:7f:a1:8a:8c:
         dc:8a:af:2f:c4:fc:d4:2d:5b:d2:ca:b4:6d:c9:bf:b8:a0:cd:
         9a:1b:47:6b:41:6a:24:d0:d2:60:7d:8f:1d:58:b2:38:bb:37:
         fe:d8:04:ad:cc:37:7c:eb:e3:5b:c5:52:ef:02:d7:45:9b:5b:
         04:ec:d3:10:35:5c:16:ed:be:d2:75:64:f8:c5:f5:13:9c:7c:
         8d:cc:74:8e:2d:12:58:04:e5:3c:63:b5:1e:70:99:f0:60:f8:
         a8:ca:f7:41:f4:1b:9e:58:a2:59:6e:7f:b9:07:e6:9a:56:19:
         a3:47:ec:3b:8b:a2:cc:14:ea:1a:0c:84:0d:b3:07:17:31:61:
         13:00:6c:7c:6e:e2:84:d2:f8:51:8e:db:38:28:03:e2:65:46:
         5e:0e:50:f6:b4:2b:13:18:36:a3:07:d8:a1:d6:96:ec:68:f4:
         6c:7d:7f:17:b3:1b:c8:ce:23:fb:36:d6:05:92:59:ad:cc:6c:
         fe:30:86:b5:da:b7:67:b2:f1:00:a8:54:08:67:8b:64:31:24:
         3a:69:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:11 2025 by rpki-client