Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
File:                     ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft (raw, json)
Hash identifier:          OgfmpF0flYTbkAdt9vUQomQpKK1HNE0n++nkSnD4qMc=
Subject key identifier:   84:EC:16:9F:9E:57:C2:D5:6F:45:5C:9F:21:FC:04:32:6B:FA:A9:E4
Authority key identifier: AD:AA:2D:F4:F9:F7:F1:B1:03:30:C3:AB:0C:E4:59:8D:59:DF:FD:A0
Certificate issuer:       /CN=adaa2df4f9f7f1b10330c3ab0ce4598d59dffda0
Certificate serial:       34EB51666FDB074ED6B4521C3E717B4EEF71FFED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
Manifest number:          E7
Signing time:             Fri 07 Feb 2025 06:07:22 +0000
Manifest this update:     Fri 07 Feb 2025 06:02:22 +0000
Manifest next update:     Sat 08 Feb 2025 07:01:22 +0000
Files and hashes:         1: ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.crl (hash: p4Cjzaev57PtBmfT9O5lkfv8qUNn3g3MKoHtzmZg0qw=)
                          2: AS215664.asa (hash: 3xgtLcc2KJDcNPvYcpy+weIMwVapy+UkODXe2KlOTz0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:eb:51:66:6f:db:07:4e:d6:b4:52:1c:3e:71:7b:4e:ef:71:ff:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adaa2df4f9f7f1b10330c3ab0ce4598d59dffda0
        Validity
            Not Before: Feb  7 06:02:22 2025 GMT
            Not After : Feb  8 07:01:22 2025 GMT
        Subject: CN=84EC169F9E57C2D56F455C9F21FC04326BFAA9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:46:8b:39:41:bf:69:74:9a:f8:53:de:82:
                    6d:e8:93:8e:1a:4c:82:e9:22:77:81:9f:2d:c7:a6:
                    41:14:cb:f6:5c:3c:9a:7e:a6:fb:7a:c2:3a:12:46:
                    52:62:6d:26:18:f1:11:a6:eb:a7:77:b2:a6:43:95:
                    a0:2b:a4:cf:7f:ce:26:c8:13:de:96:f0:55:83:68:
                    66:aa:dd:d8:1e:bc:44:b7:19:6c:34:db:42:24:32:
                    d1:24:b2:87:87:40:95:94:54:4a:b0:8a:79:64:c7:
                    49:ff:8c:19:ab:37:8d:fc:6e:c5:ed:df:16:2d:b6:
                    b4:87:ca:21:b3:91:47:85:10:99:21:9a:96:18:a2:
                    b4:11:9e:6a:2c:65:f5:2d:8d:4a:cf:86:ad:bb:45:
                    ac:5d:99:15:dd:b7:cc:bc:4a:d2:ab:34:09:7e:17:
                    26:7a:1a:0b:a0:d1:19:4a:22:77:c5:d5:20:4c:c4:
                    ce:d5:d9:5e:7c:06:84:11:00:b9:aa:3a:29:e3:f3:
                    67:ce:9d:16:bd:af:03:51:60:c9:e4:9a:2d:97:a4:
                    b8:23:10:aa:57:ba:4d:6b:da:8f:c8:b0:95:85:1c:
                    81:90:63:58:68:ef:c5:86:90:60:7b:e7:6b:e3:73:
                    d1:4d:21:96:f9:1a:9a:42:7f:b4:e9:21:52:ab:7a:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:16:9F:9E:57:C2:D5:6F:45:5C:9F:21:FC:04:32:6B:FA:A9:E4
            X509v3 Authority Key Identifier:
                keyid:AD:AA:2D:F4:F9:F7:F1:B1:03:30:C3:AB:0C:E4:59:8D:59:DF:FD:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:4d:4e:c3:ab:0a:1d:11:76:dc:57:ac:c4:6b:6c:d5:90:
         1c:62:87:ae:d3:fd:10:8d:ea:ea:48:04:ac:30:9b:ce:08:31:
         f6:b5:5c:06:de:c3:0a:d7:92:4d:d6:a2:8f:cb:44:36:0f:b1:
         69:42:0b:d8:9c:f8:24:a9:e0:11:b5:5b:26:a9:38:38:8c:b9:
         94:21:3b:bf:19:aa:87:d0:72:29:cb:d5:82:3d:f3:b7:6a:9a:
         a9:36:d2:d8:30:92:22:3c:ef:86:a3:1f:3f:1b:d6:ea:8d:fe:
         0f:7c:2b:a0:d0:3c:d5:ab:46:1f:52:7c:21:bf:e6:48:28:a4:
         89:c7:5d:92:bf:67:9a:a6:db:51:b8:48:e5:f2:ee:8e:05:8b:
         38:e7:f1:63:56:36:02:f0:48:85:6f:01:3e:5e:f4:97:ed:a4:
         0b:92:cb:2e:60:ea:09:75:9b:bf:74:55:98:cc:68:28:ef:cd:
         ba:c5:1b:2a:37:65:a6:2b:48:c3:20:52:a2:fa:d5:fe:b6:3f:
         0f:22:ba:fc:d4:69:c5:e8:62:a2:7f:62:82:d6:74:3e:1c:d6:
         91:90:3b:aa:06:cb:f2:2f:4d:29:4d:18:6f:e3:93:35:0c:f6:
         cb:62:ee:e6:35:e9:29:4b:5b:f0:a3:a9:72:f4:ce:e4:c1:50:
         33:cb:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:56:27 2025 by rpki-client