Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/B340A32376D21B74320995356EBA85B40653E672.mft
File:                     B340A32376D21B74320995356EBA85B40653E672.mft (raw, json)
Hash identifier:          r/vcSkdMSLSj7mMVaJ7m/C4H5zBgXP7nWMXAliaj9fA=
Subject key identifier:   E6:3D:63:BE:C8:A8:27:C8:F4:AA:EB:2A:E2:2D:E3:F1:15:8F:C7:A5
Authority key identifier: B3:40:A3:23:76:D2:1B:74:32:09:95:35:6E:BA:85:B4:06:53:E6:72
Certificate issuer:       /CN=b340a32376d21b74320995356eba85b40653e672
Certificate serial:       5FF77ACA4FA0319CA997FACF35C970E1B452779C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s0CjI3bSG3QyCZU1brqFtAZT5nI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/B340A32376D21B74320995356EBA85B40653E672.mft
Manifest number:          0E
Signing time:             Thu 30 Jan 2025 04:58:24 +0000
Manifest this update:     Thu 30 Jan 2025 04:53:24 +0000
Manifest next update:     Fri 31 Jan 2025 07:46:24 +0000
Files and hashes:         1: B340A32376D21B74320995356EBA85B40653E672.crl (hash: fcj54sKeuql6LnSJiHFNYmjb3zi5RHrZaV1RSdqZGJM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f7:7a:ca:4f:a0:31:9c:a9:97:fa:cf:35:c9:70:e1:b4:52:77:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b340a32376d21b74320995356eba85b40653e672
        Validity
            Not Before: Jan 30 04:53:24 2025 GMT
            Not After : Jan 31 07:46:24 2025 GMT
        Subject: CN=E63D63BEC8A827C8F4AAEB2AE22DE3F1158FC7A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:19:23:9a:5a:83:8d:14:89:91:03:c2:fe:
                    18:ba:94:74:18:e6:78:d8:d8:5a:eb:77:49:f5:99:
                    f3:67:4e:7f:0b:35:00:a6:7f:f4:be:06:f7:8d:8c:
                    94:9d:00:59:3d:f2:8e:d3:b7:91:b2:15:8c:b4:41:
                    b4:46:a8:9e:ec:1f:9c:23:9c:49:fe:bb:1c:63:25:
                    00:81:81:4e:2b:ef:6a:04:57:53:72:b9:74:b7:74:
                    e4:1f:b9:48:58:83:43:9a:38:fb:ed:47:f8:fa:3a:
                    02:5a:c6:56:58:60:a8:cc:fc:5f:bc:10:b7:54:f7:
                    26:3e:a0:03:55:da:42:d3:b6:94:f1:15:8b:b2:e9:
                    dd:b6:8e:4f:b5:19:17:0c:b2:26:05:c4:48:8f:bb:
                    2a:32:6d:74:f3:1b:d6:13:60:62:28:42:67:ab:8d:
                    f0:ce:18:d2:7e:57:78:ef:57:28:7e:53:0d:2f:0b:
                    9e:35:64:a7:df:ee:bb:3d:33:bb:da:6a:c3:3c:06:
                    da:39:79:e0:62:87:76:52:cc:03:0b:2e:59:72:73:
                    ff:e4:cd:2e:e1:c4:d8:ab:b3:83:6b:4c:93:f2:20:
                    5a:1e:43:66:b7:5d:40:04:ba:90:0e:77:70:4f:47:
                    e5:35:38:a7:54:d4:28:5d:e6:aa:9c:34:bc:bf:b7:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3D:63:BE:C8:A8:27:C8:F4:AA:EB:2A:E2:2D:E3:F1:15:8F:C7:A5
            X509v3 Authority Key Identifier:
                keyid:B3:40:A3:23:76:D2:1B:74:32:09:95:35:6E:BA:85:B4:06:53:E6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/B340A32376D21B74320995356EBA85B40653E672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0CjI3bSG3QyCZU1brqFtAZT5nI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8188cf9f-0de9-451f-b935-b3ff1d87a666/1/B340A32376D21B74320995356EBA85B40653E672.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:43:06:66:4f:a1:83:5f:79:aa:24:dd:b6:44:0f:ab:cc:18:
         5b:81:db:92:67:15:66:92:e3:72:fd:d8:94:1f:c4:15:bb:b2:
         86:62:5b:94:0b:ba:d2:c6:f3:d5:2d:b9:a1:cf:5c:b5:71:d2:
         5d:c7:fe:e5:29:be:ae:8e:dd:a2:ca:7f:39:00:b2:8d:ac:31:
         05:e1:f5:a0:8f:5b:c6:e3:8e:2e:a6:96:03:66:37:2f:2d:fa:
         3d:08:71:84:f1:5e:2f:82:77:cb:d5:0e:32:f4:52:76:94:d8:
         eb:9e:91:10:95:b3:0b:28:e8:6d:fb:00:0c:e4:be:e9:3f:f2:
         9f:48:5d:54:33:c8:a3:3d:8e:1f:de:97:50:83:4c:ed:19:26:
         bd:fa:ce:8a:a3:4f:d7:f7:cc:cb:5c:dc:30:df:cf:b4:28:a8:
         2f:f6:c5:ce:de:45:f7:c6:65:3a:38:32:e7:fe:81:59:63:53:
         37:22:6f:b3:5a:3e:7c:8c:21:a1:f1:4e:fd:70:6c:32:22:8c:
         3e:96:d8:c7:cc:93:36:5c:2d:b4:53:0e:c8:b9:e5:61:02:e8:
         0a:2f:bf:16:6c:a9:35:36:a9:53:32:cf:71:83:71:5c:7b:88:
         7a:7f:82:9a:20:0f:04:4c:dd:6d:a2:f1:46:4c:0b:56:af:35:
         40:8e:85:f5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUX/d6yk+gMZypl/rPNclw4bRSd5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjM0MGEzMjM3NmQyMWI3NDMyMDk5NTM1NmViYTg1YjQw
NjUzZTY3MjAeFw0yNTAxMzAwNDUzMjRaFw0yNTAxMzEwNzQ2MjRaMDMxMTAvBgNV
BAMTKEU2M0Q2M0JFQzhBODI3QzhGNEFBRUIyQUUyMkRFM0YxMTU4RkM3QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTWRkjmlqDjRSJkQPC/hi6lHQY
5njY2Frrd0n1mfNnTn8LNQCmf/S+BveNjJSdAFk98o7Tt5GyFYy0QbRGqJ7sH5wj
nEn+uxxjJQCBgU4r72oEV1NyuXS3dOQfuUhYg0OaOPvtR/j6OgJaxlZYYKjM/F+8
ELdU9yY+oANV2kLTtpTxFYuy6d22jk+1GRcMsiYFxEiPuyoybXTzG9YTYGIoQmer
jfDOGNJ+V3jvVyh+Uw0vC541ZKff7rs9M7vaasM8Bto5eeBih3ZSzAMLLllyc//k
zS7hxNirs4NrTJPyIFoeQ2a3XUAEupAOd3BPR+U1OKdU1Chd5qqcNLy/txvbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU5j1jvsioJ8j0qusq4i3j8RWPx6UwHwYDVR0j
BBgwFoAUs0CjI3bSG3QyCZU1brqFtAZT5nIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODE4OGNmOWYtMGRlOS00NTFmLWI5MzUtYjNmZjFkODdh
NjY2LzEvQjM0MEEzMjM3NkQyMUI3NDMyMDk5NTM1NkVCQTg1QjQwNjUzRTY3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3MwQ2pJM2JTRzNReUNaVTFicnFGdEFa
VDVuSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTg4Y2Y5Zi0w
ZGU5LTQ1MWYtYjkzNS1iM2ZmMWQ4N2E2NjYvMS9CMzQwQTMyMzc2RDIxQjc0MzIw
OTk1MzU2RUJBODVCNDA2NTNFNjcyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEMGZk+hg195qiTdtkQP
q8wYW4HbkmcVZpLjcv3YlB/EFbuyhmJblAu60sbz1S25oc9ctXHSXcf+5Sm+ro7d
osp/OQCyjawxBeH1oI9bxuOOLqaWA2Y3Ly36PQhxhPFeL4J3y9UOMvRSdpTY656R
EJWzCyjobfsADOS+6T/yn0hdVDPIoz2OH96XUINM7RkmvfrOiqNP1/fMy1zcMN/P
tCioL/bFzt5F98ZlOjgy5/6BWWNTNyJvs1o+fIwhofFO/XBsMiKMPpbYx8yTNlwt
tFMOyLnlYQLoCi+/FmypNTapUzLPcYNxXHuIen+CmiAPBEzdbaLxRkwLVq81QI6F
9Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:55 2025 by rpki-client