Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft
File:                     FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft (raw, json)
Hash identifier:          uzOY8UcVRVxUbtOuP2I7BvcH5Md5sc9T3jwP/MkJpfY=
Subject key identifier:   D7:6C:26:7C:DA:F5:22:71:CB:BC:F7:A8:6E:A0:58:94:A1:8A:8D:64
Authority key identifier: FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27
Certificate issuer:       /CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027
Certificate serial:       3A7B4EDD16B696E50ACF86DC1B1D0E99FB99427C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft
Manifest number:          01CB
Signing time:             Fri 14 Feb 2025 13:38:41 +0000
Manifest this update:     Fri 14 Feb 2025 13:33:41 +0000
Manifest next update:     Sat 15 Feb 2025 14:11:41 +0000
Files and hashes:         1: 326130663a383563313a3336323a3a2f34382d3438203d3e20323135363334.roa (hash: htyqyXi7idZLGqx/IEVeWERSMbeQ7T1QlHNct8qG2r4=)
                          2: FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.crl (hash: BsOAv5yUNkeoVJiXwlBNiWyuhPmbv7ikirRTurzf8r4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7b:4e:dd:16:b6:96:e5:0a:cf:86:dc:1b:1d:0e:99:fb:99:42:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027
        Validity
            Not Before: Feb 14 13:33:41 2025 GMT
            Not After : Feb 15 14:11:41 2025 GMT
        Subject: CN=D76C267CDAF52271CBBCF7A86EA05894A18A8D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:a6:c6:f5:ea:85:e2:28:50:63:ec:18:97:
                    84:50:e0:83:31:cb:ff:7e:00:b7:47:9a:a5:d0:17:
                    c3:5f:5e:ae:ee:ad:22:a0:10:8d:f7:43:8a:4e:61:
                    f2:35:67:ed:8b:18:db:7d:c7:65:b7:7e:00:e0:bf:
                    60:f8:68:43:a0:2c:13:68:da:b4:e1:92:54:86:4a:
                    f8:7b:54:af:ac:6a:cf:2c:ea:10:fe:64:a6:12:e5:
                    b9:d2:94:97:30:f5:2a:b3:88:d3:97:67:5d:63:1d:
                    9e:33:b0:e2:64:72:9e:11:2a:fb:e6:7d:be:e6:33:
                    0b:e8:86:7e:9e:ad:5b:c6:a1:b5:64:a9:7e:d3:82:
                    a8:e3:09:ba:05:a8:20:35:00:74:81:dd:6c:f3:d1:
                    ac:1b:b5:8d:59:97:0f:d8:e7:57:9e:80:e7:f0:84:
                    ca:14:08:4f:44:48:8b:61:12:18:e4:13:df:fa:40:
                    dd:3a:b3:ab:31:b9:ff:d7:48:96:c9:e3:4f:a3:75:
                    e7:9e:64:8f:67:90:57:29:15:ea:62:2a:ec:61:31:
                    de:d9:1a:e9:42:ce:98:43:9b:c4:fa:2a:eb:64:89:
                    e4:12:23:76:91:82:75:79:6e:80:d2:3b:70:2e:b0:
                    e1:27:80:8b:af:10:e5:49:25:d9:58:7c:b6:98:4b:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6C:26:7C:DA:F5:22:71:CB:BC:F7:A8:6E:A0:58:94:A1:8A:8D:64
            X509v3 Authority Key Identifier:
                keyid:FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8a:59:63:1a:40:93:2b:ce:34:51:2d:74:00:7b:99:50:fc:
         4c:1e:53:18:1f:88:7a:86:ba:06:a1:56:a1:b0:48:89:b7:80:
         f7:62:dc:a9:a4:c4:23:46:94:2a:18:60:bb:58:bd:9d:89:f4:
         bd:5a:6a:f8:63:13:f0:70:0f:2a:67:c4:fc:ca:7f:d3:23:cd:
         29:45:06:b5:3d:9d:fe:29:d4:ee:0c:87:4c:a3:0f:f4:90:43:
         e5:0b:d5:15:2f:59:3a:05:e9:f7:5a:61:b5:a6:f5:5b:62:66:
         07:bd:c2:1d:1e:ba:1a:99:9d:e9:e0:ba:c8:d5:3a:e5:9a:7f:
         dd:66:43:e7:dc:98:51:9d:79:dd:56:d2:17:d7:2e:5d:88:62:
         54:5c:bc:7f:36:06:81:94:5b:88:34:7f:3e:dd:1d:8a:2f:e6:
         5b:7d:0a:ae:f6:ff:4c:5e:1d:13:c5:a0:c8:0b:a1:04:9b:87:
         c4:ea:f7:af:07:45:81:e1:e9:3a:b6:83:50:8a:6c:db:ee:2a:
         42:67:c3:ed:11:b7:f7:d8:41:fb:3e:45:e7:b8:b7:76:e8:40:
         4a:44:44:3b:94:3d:7e:5e:94:b2:e8:2d:89:ed:68:24:d3:e4:
         1c:cb:19:cd:d6:2e:6a:20:f5:04:35:61:90:aa:93:9a:4c:2e:
         5c:69:19:8a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUOntO3Ra2luUKz4bcGx0OmfuZQnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJERjVDODFBMEQ2Rjc5QzNERkI4QjRFREYyOTY2RjM1
MjYwNjAyNzAeFw0yNTAyMTQxMzMzNDFaFw0yNTAyMTUxNDExNDFaMDMxMTAvBgNV
BAMTKEQ3NkMyNjdDREFGNTIyNzFDQkJDRjdBODZFQTA1ODk0QTE4QThENjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8abG9eqF4ihQY+wYl4RQ4IMx
y/9+ALdHmqXQF8NfXq7urSKgEI33Q4pOYfI1Z+2LGNt9x2W3fgDgv2D4aEOgLBNo
2rThklSGSvh7VK+sas8s6hD+ZKYS5bnSlJcw9SqziNOXZ11jHZ4zsOJkcp4RKvvm
fb7mMwvohn6erVvGobVkqX7TgqjjCboFqCA1AHSB3Wzz0awbtY1Zlw/Y51eegOfw
hMoUCE9ESIthEhjkE9/6QN06s6sxuf/XSJbJ40+jdeeeZI9nkFcpFepiKuxhMd7Z
GulCzphDm8T6KutkieQSI3aRgnV5boDSO3AusOEngIuvEOVJJdlYfLaYSxn3AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU12wmfNr1InHLvPeobqBYlKGKjWQwHwYDVR0j
BBgwFoAU+99cgaDW95w9+4tO3ylm81JgYCcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk3NGUyYWYtZWFhYi00ZDc4LThkOTUtMjgzMTQ0ZGRh
OTYyLzEvRkJERjVDODFBMEQ2Rjc5QzNERkI4QjRFREYyOTY2RjM1MjYwNjAyNy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9GQkRGNUM4MUEwRDZGNzlDM0RGQjhCNEVE
RjI5NjZGMzUyNjA2MDI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2M5NzRlMmFmLWVhYWItNGQ3OC04ZDk1LTI4MzE0NGRkYTk2Mi8xL0ZCREY1Qzgx
QTBENkY3OUMzREZCOEI0RURGMjk2NkYzNTI2MDYwMjcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNillj
GkCTK840US10AHuZUPxMHlMYH4h6hroGoVahsEiJt4D3YtyppMQjRpQqGGC7WL2d
ifS9Wmr4YxPwcA8qZ8T8yn/TI80pRQa1PZ3+KdTuDIdMow/0kEPlC9UVL1k6Ben3
WmG1pvVbYmYHvcIdHroamZ3p4LrI1Trlmn/dZkPn3JhRnXndVtIX1y5diGJUXLx/
NgaBlFuINH8+3R2KL+ZbfQqu9v9MXh0TxaDIC6EEm4fE6vevB0WB4ek6toNQimzb
7ipCZ8PtEbf32EH7PkXnuLd26EBKREQ7lD1+XpSy6C2J7Wgk0+QcyxnN1i5qIPUE
NWGQqpOaTC5caRmK
-----END CERTIFICATE-----