Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft
File:                     CC2B47BFD397E66019550C83BF1B56353173A0CB.mft (raw, json)
Hash identifier:          7Ccv18xD7AuLcH246L2S1aQJR34qJdmNS9wgpDd5gG4=
Subject key identifier:   5E:0D:99:EC:AF:E0:D7:0A:33:61:C8:CC:9D:98:13:EE:39:B1:8D:E0
Authority key identifier: CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB
Certificate issuer:       /CN=CC2B47BFD397E66019550C83BF1B56353173A0CB
Certificate serial:       198A9EDB2CCE5070553ADC203F307CC1E2D8431F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft
Manifest number:          92
Signing time:             Mon 25 Nov 2024 16:05:58 +0000
Manifest this update:     Mon 25 Nov 2024 16:00:58 +0000
Manifest next update:     Tue 26 Nov 2024 17:36:58 +0000
Files and hashes:         1: 326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (hash: PERd4VmCi6mzxYUGdk3Lcmsp5CKw9IJNVRR0bLNOLMg=)
                          2: CC2B47BFD397E66019550C83BF1B56353173A0CB.crl (hash: /eU/Suvgto/pvANRS1pv8+ngPUE1h+aX52Gq2wuN4Qs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8a:9e:db:2c:ce:50:70:55:3a:dc:20:3f:30:7c:c1:e2:d8:43:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC2B47BFD397E66019550C83BF1B56353173A0CB
        Validity
            Not Before: Nov 25 16:00:58 2024 GMT
            Not After : Nov 26 17:36:58 2024 GMT
        Subject: CN=5E0D99ECAFE0D70A3361C8CC9D9813EE39B18DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:cc:92:c4:0f:07:67:af:16:e6:28:16:f9:
                    89:8e:28:7e:39:de:14:72:18:94:d0:03:08:5a:96:
                    5b:a7:d1:6d:59:6a:0c:6b:86:60:2b:01:25:92:2c:
                    c2:eb:9d:e3:18:4d:ac:52:f8:ef:37:00:f0:6e:97:
                    99:32:c4:38:98:b2:77:f8:61:6a:4a:f9:a6:2f:bc:
                    b9:f7:c4:2e:12:b8:f2:6f:23:3e:c8:89:09:cd:cf:
                    d3:20:81:61:e9:fd:94:97:f4:e2:38:76:84:b5:78:
                    04:d9:cd:84:7a:ce:e5:37:f9:d4:7c:9c:39:60:aa:
                    48:1f:e3:31:fa:e8:23:f5:62:0e:a9:57:a9:b4:76:
                    fd:f6:b5:76:df:48:f3:36:7d:a0:e8:3f:a8:dc:84:
                    b4:68:e5:23:8e:0f:d9:b6:48:45:02:22:34:61:8f:
                    d3:0d:10:64:fc:be:43:2d:4e:80:e1:be:db:5d:e7:
                    7f:62:07:bd:80:2b:1f:2b:4d:58:55:34:b5:b4:f6:
                    34:cb:0c:01:31:8d:b0:cc:e6:51:2f:12:27:5f:06:
                    6b:5a:91:0e:7d:ad:98:6e:8a:c9:d3:2a:a2:bf:cd:
                    16:07:83:0e:a4:d7:d1:02:39:72:da:bc:78:a9:b7:
                    01:1f:4b:d1:7b:24:69:52:80:4c:69:b8:66:c7:46:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0D:99:EC:AF:E0:D7:0A:33:61:C8:CC:9D:98:13:EE:39:B1:8D:E0
            X509v3 Authority Key Identifier:
                keyid:CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:df:0f:95:2e:e7:95:16:67:d3:2e:1b:a4:bb:0d:aa:6a:f4:
         1d:13:fa:a7:a9:04:ca:2a:05:e2:c3:d5:84:11:ac:c5:41:be:
         9e:7f:19:a4:b0:ec:9b:6d:e7:38:dc:96:c9:21:e0:bf:5f:a6:
         10:97:37:1b:72:dc:f5:a8:e4:d9:ba:84:30:91:58:35:89:d9:
         e9:cb:84:22:81:1a:ea:31:81:c3:3f:0c:2e:b2:4d:da:3e:3f:
         32:b7:01:3e:cf:cd:42:cc:1e:cf:5e:f0:da:61:1c:9a:d3:55:
         35:fb:f8:b0:40:fe:7c:ad:e8:5b:53:db:20:fc:60:92:c5:25:
         a6:98:27:14:26:69:db:22:ab:ad:3d:d8:43:43:bf:3f:ee:d6:
         07:2a:94:98:7c:23:1c:2b:8b:81:07:bd:b6:c8:87:9b:a3:00:
         76:25:ea:18:84:96:f2:7b:43:28:19:fc:a9:9f:f3:f0:0f:4a:
         4e:9f:97:e4:15:d6:fd:d6:83:a6:17:2c:18:b8:c9:15:b4:ae:
         fc:d9:d5:d1:1d:97:63:57:0a:1d:e6:73:34:38:de:be:76:f0:
         b3:7b:93:b7:24:af:96:4e:7a:07:7b:f3:ab:8d:90:64:02:28:
         11:d1:b5:72:df:43:26:91:59:1f:49:1d:75:2b:5d:8f:67:9b:
         be:b3:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----