Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
File:                     5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json)
Hash identifier:          jKMqXk2SP7AFB8voD3bt7QUORILyG3iVSyrhg0iP2QQ=
Subject key identifier:   6B:52:5B:C5:9B:72:BF:F3:A7:30:65:1B:A5:2B:8A:AE:CC:2E:6E:77
Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC
Certificate issuer:       /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC
Certificate serial:       441FF76C5395E07D8F3794EB9BB5758CAF77989D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft
Manifest number:          DB
Signing time:             Thu 16 Jan 2025 06:11:20 +0000
Manifest this update:     Thu 16 Jan 2025 06:06:20 +0000
Manifest next update:     Fri 17 Jan 2025 06:34:20 +0000
Files and hashes:         1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: KXywjogz4ubjKwByg3Bn9E04TiAaCRx8T+imPPudE+k=)
                          2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: qeaOlY52oQQWD5XZjaWGRHEbjpv+jkgNagBU1ZEkBfY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1f:f7:6c:53:95:e0:7d:8f:37:94:eb:9b:b5:75:8c:af:77:98:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC
        Validity
            Not Before: Jan 16 06:06:20 2025 GMT
            Not After : Jan 17 06:34:20 2025 GMT
        Subject: CN=6B525BC59B72BFF3A730651BA52B8AAECC2E6E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:4c:e5:d4:10:16:ed:b0:e4:2a:1c:f8:e6:
                    c9:f8:bc:bd:5b:f1:26:35:bb:39:06:72:14:55:a9:
                    6b:1e:8e:4a:e7:49:1f:37:bf:f8:bb:14:ef:3e:c6:
                    43:3f:0a:f7:72:23:3c:56:a5:07:42:b9:6e:11:8e:
                    46:72:a3:dc:e7:c6:3c:2b:0c:0f:d9:bf:5d:4d:51:
                    64:32:f1:18:b4:e8:c3:b6:bf:9d:6a:40:05:f4:10:
                    e5:c5:ce:35:b1:96:69:e9:5b:39:f9:81:e1:03:68:
                    22:36:d0:24:b8:79:f3:12:40:51:09:04:7d:ae:f5:
                    9d:f7:d6:b4:e2:9c:41:36:c0:40:57:d0:92:cb:1f:
                    7b:39:5e:69:2b:a8:a6:52:08:9b:76:c1:7b:1c:08:
                    e7:f0:f0:62:61:da:88:07:2d:6c:15:47:ac:18:55:
                    13:3f:ff:ac:c9:21:f6:f6:21:38:2c:17:84:ae:ef:
                    e9:15:a0:fa:2d:65:a5:ab:40:7f:4a:65:53:6b:60:
                    88:5d:e7:4b:41:5b:a3:e1:a0:4d:e2:ba:92:b4:f4:
                    f8:22:d4:df:fd:e4:b8:10:3d:e6:f8:7b:e2:63:1b:
                    79:34:e1:81:15:5d:53:09:46:64:79:ce:38:c5:31:
                    45:db:4b:b6:58:1d:6f:96:41:0f:3e:31:66:cc:9d:
                    fd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:52:5B:C5:9B:72:BF:F3:A7:30:65:1B:A5:2B:8A:AE:CC:2E:6E:77
            X509v3 Authority Key Identifier:
                keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:d4:8b:71:3f:81:f2:bf:12:c7:ad:11:97:43:fe:de:fc:
         9e:01:6c:16:76:97:7f:75:59:a3:00:96:2b:5d:2b:03:77:82:
         e5:f0:ff:8d:09:7e:1f:61:56:e1:65:ce:70:99:63:08:a4:92:
         ed:ba:6c:fd:2f:6f:ac:76:35:d4:d6:a4:50:ae:d7:46:f4:72:
         bf:18:d4:1c:38:94:57:23:9b:ed:bf:75:52:2f:12:52:26:92:
         db:31:7d:23:c2:85:56:f7:67:26:b2:82:b2:c0:b6:76:27:f1:
         a2:34:7c:4a:58:fa:42:b8:32:28:e9:f0:b4:01:32:73:33:af:
         af:6f:d4:1c:85:91:53:c1:22:ee:cc:2b:05:bf:11:95:f9:de:
         63:e0:4a:06:7d:f1:2f:10:80:3c:f7:58:a0:f9:bb:fb:5d:8a:
         ad:ec:cd:d0:3d:51:2b:b6:55:3c:93:0c:ba:0b:18:74:bf:35:
         c8:88:f9:8e:f9:ca:64:21:a3:ab:af:43:17:4e:3d:f2:25:00:
         ae:a6:9d:e7:d1:24:98:cc:b1:a5:c5:00:3f:96:ce:14:73:11:
         33:4e:11:10:27:c0:52:a9:d1:f7:fd:fd:54:f7:70:3d:31:36:
         61:9a:c9:bc:fc:4c:26:4a:6a:54:65:ac:b7:17:ba:4e:b2:a8:
         b8:c4:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----