Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
File:                     7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft (raw, json)
Hash identifier:          Cqxc+WqzDB3g+iYPj1Es8CxlvjodRhYT0kDUoOWig7E=
Subject key identifier:   3D:89:43:B6:FD:90:85:8A:4F:1E:06:C3:DA:5B:DF:F2:0F:24:24:E7
Authority key identifier: 7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54
Certificate issuer:       /CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54
Certificate serial:       2F7AACBD602A3275A2CF6A2EC26C8E0CD9D9CA92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
Manifest number:          029C
Signing time:             Wed 15 Jan 2025 23:40:02 +0000
Manifest this update:     Wed 15 Jan 2025 23:35:02 +0000
Manifest next update:     Thu 16 Jan 2025 23:48:02 +0000
Files and hashes:         1: 7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl (hash: I5Bm6E7IfRRFhPtX9ag1pu/gSAYflqkeI2155CtjrgM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7a:ac:bd:60:2a:32:75:a2:cf:6a:2e:c2:6c:8e:0c:d9:d9:ca:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54
        Validity
            Not Before: Jan 15 23:35:02 2025 GMT
            Not After : Jan 16 23:48:02 2025 GMT
        Subject: CN=3D8943B6FD90858A4F1E06C3DA5BDFF20F2424E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:ae:14:12:12:c7:4e:1f:27:ad:26:02:e5:
                    22:89:9d:bc:7b:bc:d9:3f:03:5a:c6:dc:52:72:7b:
                    4d:3f:86:97:98:dc:1e:17:ee:4d:54:84:16:ca:cb:
                    03:3f:56:a0:df:55:3a:ba:9b:3f:17:48:1a:2c:1f:
                    01:be:d4:a8:8b:3b:49:94:86:42:ec:70:1c:c4:60:
                    af:1d:e4:38:f2:f4:83:2e:47:6f:68:52:3e:8e:ed:
                    4a:14:ba:97:95:10:8d:2c:5e:22:cd:61:26:41:8f:
                    ed:0d:27:7a:a0:34:0c:11:0a:83:7f:91:52:ae:b3:
                    50:ed:82:2b:ab:78:df:19:4a:7a:f3:fd:60:f1:dd:
                    4f:01:8f:bc:58:5b:1a:4e:b1:33:95:51:f8:d9:23:
                    85:81:ac:e5:0b:4f:cf:60:bf:9a:c6:65:53:4d:28:
                    02:76:9e:81:3b:f5:ff:b7:79:53:03:03:44:9c:88:
                    24:2b:41:d4:c1:39:29:6e:fc:11:57:cc:14:cb:0b:
                    49:70:f6:4b:3c:37:ea:35:9d:68:d0:2e:14:e0:a7:
                    a7:54:54:5f:66:6b:92:82:89:ff:b6:a7:e9:98:27:
                    9c:78:09:1e:2f:c2:e9:40:be:cf:39:87:6b:5a:72:
                    df:42:a5:f8:33:f3:c8:a1:18:bb:41:c8:05:32:56:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:43:B6:FD:90:85:8A:4F:1E:06:C3:DA:5B:DF:F2:0F:24:24:E7
            X509v3 Authority Key Identifier:
                keyid:7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d9:63:53:05:b9:12:52:91:f8:79:3b:41:7c:fe:7a:65:5e:
         10:5f:26:55:ae:ec:35:c4:fd:86:7b:30:60:b0:3f:98:c7:03:
         fe:da:f3:b7:3d:7c:4c:ef:b5:1a:8a:0d:59:a2:cc:29:8b:2c:
         17:48:86:e4:a0:55:39:c8:d5:34:b0:f8:e4:e4:65:ff:43:ca:
         74:d4:4b:ea:02:82:6a:ac:84:cc:a1:a4:da:31:61:1a:f2:89:
         4c:5f:d1:48:c2:80:a9:5c:25:cc:0e:0e:96:44:67:d2:ff:a9:
         ca:b1:13:f1:2c:00:50:78:a1:77:3b:c1:c2:56:05:39:cb:0c:
         19:26:9f:0f:4a:96:55:c3:76:f0:75:4a:b7:38:b8:fc:08:e9:
         09:1f:bd:90:4a:ed:93:ba:dd:b0:01:6b:49:6b:71:c4:72:a8:
         8d:ef:7c:86:eb:79:6f:20:2b:9c:11:08:56:5e:bd:6f:2e:a0:
         36:91:44:52:91:b8:35:8a:f8:54:ee:36:d1:eb:b8:f2:f9:bd:
         9a:90:f3:6e:9c:23:ec:b5:08:6e:7e:f9:49:18:ea:12:60:31:
         6d:3e:76:50:b7:f8:49:cb:7a:68:e5:68:9b:ff:0b:d8:3d:34:
         50:8f:67:bf:65:ae:e3:16:28:e3:9f:65:46:b4:89:a9:8c:ec:
         e3:a7:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:20 2025 by rpki-client