Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft
File:                     6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft (raw, json)
Hash identifier:          IXxI0OyZBgtdW0EiY9qATET5pTF1QsEWcENxgB7u2OA=
Subject key identifier:   31:59:34:86:B4:AC:7D:F3:56:CD:8C:AC:26:8F:85:3F:DF:C0:B4:A4
Authority key identifier: 68:27:F6:04:7A:80:0E:BE:4B:0D:C6:29:9C:08:4E:F0:5E:0A:AA:DE
Certificate issuer:       /CN=6827f6047a800ebe4b0dc6299c084ef05e0aaade
Certificate serial:       0DDE47AE4DF751EF649BED35904B9444F2E23EA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCf2BHqADr5LDcYpnAhO8F4Kqt4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft
Manifest number:          95
Signing time:             Fri 13 Dec 2024 03:36:31 +0000
Manifest this update:     Fri 13 Dec 2024 03:31:31 +0000
Manifest next update:     Sat 14 Dec 2024 06:16:31 +0000
Files and hashes:         1: 6827F6047A800EBE4B0DC6299C084EF05E0AAADE.crl (hash: GA/fAdUomPa7Mm9ZlnHoVjjDF4SL5rXobQZjs21Wqks=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:de:47:ae:4d:f7:51:ef:64:9b:ed:35:90:4b:94:44:f2:e2:3e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6827f6047a800ebe4b0dc6299c084ef05e0aaade
        Validity
            Not Before: Dec 13 03:31:31 2024 GMT
            Not After : Dec 14 06:16:31 2024 GMT
        Subject: CN=31593486B4AC7DF356CD8CAC268F853FDFC0B4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:4e:f7:60:9f:01:10:fd:50:d9:c9:5a:9e:
                    6d:9c:16:49:07:3f:0f:d8:d2:5f:4b:eb:2a:d4:3f:
                    5e:43:0e:d3:7c:ca:57:b6:d6:f7:58:4c:1f:f7:65:
                    bc:ef:55:66:0c:ec:48:ab:7f:30:ca:fd:b9:72:65:
                    d4:77:d7:ff:0c:3e:f5:ec:e0:af:fc:ea:95:ea:a1:
                    8a:9f:0a:1e:e6:00:fc:bc:36:62:a6:87:54:59:97:
                    6f:a0:f5:06:af:ae:5c:85:f4:04:b0:65:0a:94:7c:
                    01:60:68:0b:e8:6f:2e:17:bd:27:34:aa:56:4a:df:
                    da:c3:4e:84:dc:d4:d6:e2:ef:10:f3:f5:1b:b0:84:
                    ef:47:42:8c:17:f7:99:41:f7:af:ca:40:4e:07:56:
                    3e:4c:c5:16:ba:e0:e7:66:f2:ed:6a:0f:72:2d:cd:
                    7c:86:fe:8a:6f:a0:56:d1:a0:bf:76:2e:30:4c:14:
                    f8:63:e5:d9:b2:57:0b:3d:87:08:79:24:c1:da:fd:
                    1b:cb:8a:d9:fc:3f:a9:87:ef:d3:07:d0:ce:86:5e:
                    37:db:bc:0c:1d:f0:90:96:10:97:54:c7:41:77:b8:
                    fb:9d:96:d7:47:27:ee:cb:e0:02:40:e9:88:10:81:
                    09:71:b6:d6:bb:b1:64:d7:67:cb:ab:b8:51:58:55:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:59:34:86:B4:AC:7D:F3:56:CD:8C:AC:26:8F:85:3F:DF:C0:B4:A4
            X509v3 Authority Key Identifier:
                keyid:68:27:F6:04:7A:80:0E:BE:4B:0D:C6:29:9C:08:4E:F0:5E:0A:AA:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCf2BHqADr5LDcYpnAhO8F4Kqt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f9:95:99:af:67:52:23:65:97:45:4f:e3:1c:01:72:34:33:72:
         82:e5:9e:81:bf:15:3c:f5:bd:66:b5:cd:26:3a:5c:d9:8a:dc:
         3f:b4:99:85:3e:54:f9:3a:b7:44:df:cf:68:ca:f1:d1:84:d9:
         ce:9d:d4:de:7f:ce:1e:2a:06:b2:f3:a3:9a:22:ff:c5:5a:19:
         53:4c:75:d6:7b:41:e3:cc:c1:fa:c4:f4:d1:d0:ab:da:78:a3:
         f2:4f:9d:be:3b:9b:e3:7a:38:8d:90:1d:4f:5b:63:29:dd:2f:
         6a:d8:43:10:2b:60:8a:5e:14:4d:a2:e7:71:e7:88:2a:68:c1:
         42:b8:ba:53:fc:bb:46:67:53:71:19:8a:bf:2d:b8:f2:bb:68:
         84:eb:38:b7:c6:8b:0d:63:7b:9d:c6:53:25:de:86:6d:9e:43:
         04:1a:d2:8c:8b:99:c2:9f:34:7b:32:c5:cd:3a:6d:61:30:88:
         f7:f0:f1:bc:42:e7:98:b2:e5:44:ca:a0:e2:32:97:0d:23:49:
         85:23:1e:fb:76:2c:9c:b0:a3:4b:7c:76:17:3d:cb:0e:c2:22:
         c0:e7:bf:7d:b9:e9:51:6f:0c:33:23:2c:96:49:5c:52:b8:3d:
         93:77:d3:7b:7a:c2:1c:e2:6e:f3:83:ca:a0:7b:d4:0c:32:f3:
         b4:9f:ae:95
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDd5Hrk33Ue9km+01kEuURPLiPqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgyN2Y2MDQ3YTgwMGViZTRiMGRjNjI5OWMwODRlZjA1
ZTBhYWFkZTAeFw0yNDEyMTMwMzMxMzFaFw0yNDEyMTQwNjE2MzFaMDMxMTAvBgNV
BAMTKDMxNTkzNDg2QjRBQzdERjM1NkNEOENBQzI2OEY4NTNGREZDMEI0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08073YJ8BEP1Q2clanm2cFkkH
Pw/Y0l9L6yrUP15DDtN8yle21vdYTB/3ZbzvVWYM7EirfzDK/blyZdR31/8MPvXs
4K/86pXqoYqfCh7mAPy8NmKmh1RZl2+g9QavrlyF9ASwZQqUfAFgaAvoby4XvSc0
qlZK39rDToTc1Nbi7xDz9RuwhO9HQowX95lB96/KQE4HVj5MxRa64Odm8u1qD3It
zXyG/opvoFbRoL92LjBMFPhj5dmyVws9hwh5JMHa/RvLitn8P6mH79MH0M6GXjfb
vAwd8JCWEJdUx0F3uPudltdHJ+7L4AJA6YgQgQlxtta7sWTXZ8uruFFYVdTvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMVk0hrSsffNWzYysJo+FP9/AtKQwHwYDVR0j
BBgwFoAUaCf2BHqADr5LDcYpnAhO8F4Kqt4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWFmNmMzOGUtODA1MC00ODNkLWEyY2ItYTYxYzllMmFh
NDY4LzAvNjgyN0Y2MDQ3QTgwMEVCRTRCMERDNjI5OUMwODRFRjA1RTBBQUFERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FDZjJCSHFBRHI1TERjWXBuQWhPOEY0
S3F0NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YWY2YzM4ZS04
MDUwLTQ4M2QtYTJjYi1hNjFjOWUyYWE0NjgvMC82ODI3RjYwNDdBODAwRUJFNEIw
REM2Mjk5QzA4NEVGMDVFMEFBQURFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+ZWZr2dSI2WXRU/jHAFy
NDNyguWegb8VPPW9ZrXNJjpc2YrcP7SZhT5U+Tq3RN/PaMrx0YTZzp3U3n/OHioG
svOjmiL/xVoZU0x11ntB48zB+sT00dCr2nij8k+dvjub43o4jZAdT1tjKd0vathD
ECtgil4UTaLnceeIKmjBQri6U/y7RmdTcRmKvy248rtohOs4t8aLDWN7ncZTJd6G
bZ5DBBrSjIuZwp80ezLFzTptYTCI9/DxvELnmLLlRMqg4jKXDSNJhSMe+3YsnLCj
S3x2Fz3LDsIiwOe/fbnpUW8MMyMslklcUrg9k3fTe3rCHOJu84PKoHvUDDLztJ+u
lQ==
-----END CERTIFICATE-----