Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/3/FC5EF1F664F6BB0E1AF7BDA53D67E0589B895E1F.mft
File:                     FC5EF1F664F6BB0E1AF7BDA53D67E0589B895E1F.mft (raw, json)
Hash identifier:          1SxEcO3fBBbn7VIhPK1FXEd8k3kW1uOmWKYQxfuFhh4=
Subject key identifier:   E6:2E:08:F1:A6:93:BA:55:C1:23:63:1E:84:05:3E:69:15:6E:DB:A0
Authority key identifier: FC:5E:F1:F6:64:F6:BB:0E:1A:F7:BD:A5:3D:67:E0:58:9B:89:5E:1F
Certificate issuer:       /CN=fc5ef1f664f6bb0e1af7bda53d67e0589b895e1f
Certificate serial:       6B6CC016079601BFFE98D0810B9ED7D574631ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_F7x9mT2uw4a972lPWfgWJuJXh8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/3/FC5EF1F664F6BB0E1AF7BDA53D67E0589B895E1F.mft
Manifest number:          8E
Signing time:             Tue 31 Oct 2023 16:29:27 +0000
Manifest this update:     Tue 31 Oct 2023 16:24:27 +0000
Manifest next update:     Wed 01 Nov 2023 17:07:27 +0000
Files and hashes:         1: FC5EF1F664F6BB0E1AF7BDA53D67E0589B895E1F.crl (hash: /tbYr1EgyxPS2Aw4LqdT5OWCszKt8pHqq3EH1fIabwQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6c:c0:16:07:96:01:bf:fe:98:d0:81:0b:9e:d7:d5:74:63:1e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5ef1f664f6bb0e1af7bda53d67e0589b895e1f
        Validity
            Not Before: Oct 31 16:24:27 2023 GMT
            Not After : Nov  1 17:07:27 2023 GMT
        Subject: CN=E62E08F1A693BA55C123631E84053E69156EDBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:e1:21:f3:99:1c:3e:f6:dc:6c:55:10:8c:
                    3e:fb:a7:1a:8c:04:c5:9c:14:be:b1:04:2d:ac:69:
                    75:03:d1:ab:bc:e6:2d:4c:3c:ce:74:fb:92:2d:89:
                    61:00:39:19:96:65:9b:8b:a1:f2:95:21:ea:ca:1f:
                    7a:f7:8e:b6:bf:47:29:9d:33:52:41:10:c8:a6:56:
                    d5:15:77:a5:03:98:14:35:14:55:de:b0:fe:4a:c5:
                    61:a2:2d:2b:70:32:42:c9:5c:a9:b4:e3:6e:49:a8:
                    5d:cb:ac:cd:bf:ea:d7:77:c8:c1:e6:31:5c:c2:c8:
                    a0:10:cc:aa:02:dd:4f:03:1f:34:03:c6:ef:51:00:
                    e7:f7:b4:c5:ba:b7:cb:bf:74:b2:ac:d5:b3:86:2a:
                    c7:a3:76:a6:35:f5:d8:b3:25:07:fe:51:0d:53:f1:
                    95:d3:de:43:70:0d:44:71:ac:9f:c2:b4:14:cb:ef:
                    56:a4:ec:ed:1e:f2:83:b7:4d:93:75:c9:9f:f0:97:
                    99:5d:5a:05:15:6c:59:d6:f1:6c:df:1b:41:ba:99:
                    45:70:66:6f:2d:55:15:c4:b8:0c:fc:f1:02:9e:78:
                    71:36:de:70:98:b0:e6:3f:35:62:39:ad:8a:86:c3:
                    4c:fd:93:9f:3f:d9:2f:98:cb:3f:80:ad:83:51:4a:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2E:08:F1:A6:93:BA:55:C1:23:63:1E:84:05:3E:69:15:6E:DB:A0
            X509v3 Authority Key Identifier:
                keyid:FC:5E:F1:F6:64:F6:BB:0E:1A:F7:BD:A5:3D:67:E0:58:9B:89:5E:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/3/FC5EF1F664F6BB0E1AF7BDA53D67E0589B895E1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_F7x9mT2uw4a972lPWfgWJuJXh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/3/FC5EF1F664F6BB0E1AF7BDA53D67E0589B895E1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:17:61:d2:83:de:fd:2b:d9:b4:53:f4:32:29:b3:8e:e5:
         72:e9:26:f5:3f:4d:4f:b6:02:b0:16:12:b7:02:cd:ca:04:60:
         83:b4:54:e8:ff:86:c1:ec:4e:88:a4:ce:4a:0d:57:70:c7:34:
         a3:0e:15:ba:a8:11:db:a4:c9:38:c7:6a:ab:64:0d:46:d7:fa:
         af:5a:a7:f3:1c:28:60:40:b7:58:9f:90:b0:2d:02:02:8e:4b:
         53:41:ab:da:ea:a5:3e:0d:ce:fe:ca:0f:9c:29:de:d5:d2:9b:
         4e:07:f5:8c:3a:cf:52:d2:ea:aa:68:8c:f9:3d:e0:ff:56:33:
         9c:f8:ea:5e:67:23:0f:20:70:f9:5f:51:f9:5d:1d:c9:d4:ea:
         a8:53:66:1f:9d:cf:35:af:e4:88:28:e9:15:b9:a0:18:d7:b1:
         b5:12:c9:f6:92:53:a9:67:9f:13:74:b0:52:db:10:bd:34:70:
         8f:4e:9b:40:a2:db:95:20:f3:af:28:47:43:bb:ff:3c:4a:0e:
         ec:d0:21:b6:f3:74:08:ff:d2:62:2c:ec:7d:12:62:d1:fb:3a:
         21:b9:bc:31:f8:8d:60:19:51:dc:41:c0:8b:6b:85:75:79:9e:
         e4:4d:0e:57:4a:02:8b:50:da:3d:86:f8:73:82:86:79:c3:ad:
         14:20:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:08 2025 by rpki-client