Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft
File:                     AB1340E329CCD96287934FA706670D31B73C04E8.mft (raw, json)
Hash identifier:          60Im6veHoSKPszKlDzzTO5TOrAG1ZBVJsDECA5KB+3Y=
Subject key identifier:   F8:4A:FF:32:94:03:E0:1D:4A:39:60:67:C3:0E:13:6D:0D:AF:5E:5D
Authority key identifier: AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8
Certificate issuer:       /CN=AB1340E329CCD96287934FA706670D31B73C04E8
Certificate serial:       45B2C08BC4E24995F2B2EF2A90CEABE258589024
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft
Manifest number:          96
Signing time:             Tue 24 Dec 2024 05:22:19 +0000
Manifest this update:     Tue 24 Dec 2024 05:17:19 +0000
Manifest next update:     Wed 25 Dec 2024 07:24:19 +0000
Files and hashes:         1: 326131343a373538313a376130303a3a2f34342d3434203d3e20323135373331.roa (hash: +9ZBrsye/+7JcfQCN7LZ22z9A0AorbivM4NukTYuELA=)
                          2: 326131343a373538313a376130303a3a2f33392d3339203d3e203431303531.roa (hash: gjKJmUdyGSiubROOyDtzinRPjnlxeY9lwEKnz73F/m4=)
                          3: 326131343a373538313a373130303a3a2f34302d3430203d3e20313530333135.roa (hash: BDbySONHBTFHr4ZJ8R/TKKzKBUQAw/1H/W9cHf9/wlQ=)
                          4: AB1340E329CCD96287934FA706670D31B73C04E8.crl (hash: uarR7lg7w0jgt7tt6DzXxRRKvxf3osiVGnp4nFQ8Ggw=)
                          5: 326131343a373538313a373230303a3a2f34302d3430203d3e20323132383935.roa (hash: 5RvQ11zqA87nSkgET1/LZB/8q01ICMdccwFzuDSJAMA=)
                          6: 326131343a373538313a376130623a3a2f34382d3438203d3e20323135313236.roa (hash: 1HVCCqG4gBoc72OP7Aul3nDfjDWfPvAXodWrVM42/EI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b2:c0:8b:c4:e2:49:95:f2:b2:ef:2a:90:ce:ab:e2:58:58:90:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB1340E329CCD96287934FA706670D31B73C04E8
        Validity
            Not Before: Dec 24 05:17:19 2024 GMT
            Not After : Dec 25 07:24:19 2024 GMT
        Subject: CN=F84AFF329403E01D4A396067C30E136D0DAF5E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:6f:c9:e8:a8:f5:2f:18:d0:bb:7d:9e:15:
                    9c:29:42:6c:b3:f9:27:31:b3:2c:3d:03:f8:3f:27:
                    fa:3b:73:0d:67:37:50:a3:f9:0d:fe:a1:d2:83:1c:
                    5c:b7:c5:3c:79:88:e5:2b:23:7e:ae:a9:1e:6b:1d:
                    1f:a4:7f:f4:20:f4:24:54:8f:a6:01:51:7d:83:e0:
                    d1:92:e5:d0:88:6d:f4:0b:8d:3b:5c:7e:c9:87:4a:
                    6a:05:99:17:2f:85:9b:2a:07:27:13:68:35:68:18:
                    4d:87:e5:cc:8e:f4:72:34:75:cc:4f:c0:4f:52:ca:
                    f6:ca:71:fc:1a:26:21:bb:70:e9:ab:5d:ce:c3:66:
                    21:fc:72:e1:d1:25:9c:81:0f:f5:a3:91:1b:8a:4b:
                    be:c5:71:b7:b8:2a:7e:ad:09:e0:a7:ce:61:5d:44:
                    fd:20:df:b8:99:e1:f0:cc:e0:f7:38:cb:a5:d7:21:
                    62:86:07:ce:72:66:56:d2:d7:3e:16:42:12:10:91:
                    35:01:fd:55:69:8b:c1:16:e5:da:58:b2:ea:09:68:
                    48:12:e3:5a:04:1d:a8:a0:11:70:35:c8:35:67:39:
                    90:7d:1b:bd:ed:41:43:5a:54:30:02:27:1f:64:e6:
                    eb:71:d7:82:ba:8f:61:a1:08:26:d4:e2:80:eb:d5:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4A:FF:32:94:03:E0:1D:4A:39:60:67:C3:0E:13:6D:0D:AF:5E:5D
            X509v3 Authority Key Identifier:
                keyid:AB:13:40:E3:29:CC:D9:62:87:93:4F:A7:06:67:0D:31:B7:3C:04:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AB1340E329CCD96287934FA706670D31B73C04E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c58479df-f5b7-4453-92bf-de1f61b3d4b0/1/AB1340E329CCD96287934FA706670D31B73C04E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:a3:b8:f1:cb:6b:43:9d:70:61:b5:44:99:fe:8f:f1:af:
         a8:99:87:5f:81:83:2a:ed:b4:7e:12:18:6d:c9:be:b3:ee:06:
         92:f4:2d:0d:23:cf:f8:f2:43:20:48:d3:86:6f:ce:d5:70:53:
         95:2e:c5:d2:fe:47:16:47:10:1a:de:c9:f1:45:5a:99:7d:1e:
         d3:4c:20:83:33:7e:a2:53:07:fd:f5:95:c3:c3:81:56:0c:02:
         99:00:bd:36:bd:a6:88:0c:9b:c9:b2:15:5e:1c:8e:91:f0:01:
         87:26:1d:66:4e:b8:74:c3:64:d8:df:81:9b:09:25:07:0b:4a:
         fd:1d:f0:05:01:08:6b:a8:24:ac:45:69:5f:43:d6:8e:75:6b:
         c6:eb:50:83:40:d5:dc:68:4e:dd:8e:51:f8:95:66:d4:7d:b0:
         33:38:de:cc:38:ae:ad:c8:63:5d:24:60:bf:89:be:34:b9:30:
         2b:b1:fd:cb:3f:25:d1:ca:c6:57:b5:1d:2c:1d:d1:38:dd:bf:
         6e:ef:86:55:be:07:38:ad:a6:67:07:cb:25:13:80:68:5d:f4:
         b3:f4:ad:a6:97:01:2b:34:25:3e:b3:e3:2e:27:9d:28:5f:91:
         07:96:66:40:62:87:93:4f:44:7f:d4:2b:b0:29:d3:8a:59:4a:
         22:e4:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:24 2025 by rpki-client