Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft
File:                     DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft (raw, json)
Hash identifier:          FY97w7X8ti6Vwr9JZjggpbWmoNHdVX7XTxsLfmqhpCE=
Subject key identifier:   4B:B3:F7:0E:5F:00:2A:A8:47:DE:46:EB:6E:28:67:BA:11:71:4B:D1
Authority key identifier: DD:65:03:83:6A:2A:33:84:67:4C:6B:05:01:E9:5B:0A:A2:A3:81:C9
Certificate issuer:       /CN=DD6503836A2A3384674C6B0501E95B0AA2A381C9
Certificate serial:       784D7D86123D8C8B1E94099965A8F0B6E02D5551
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD6503836A2A3384674C6B0501E95B0AA2A381C9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft
Manifest number:          45
Signing time:             Mon 28 Oct 2024 17:53:53 +0000
Manifest this update:     Mon 28 Oct 2024 17:48:53 +0000
Manifest next update:     Tue 29 Oct 2024 19:30:53 +0000
Files and hashes:         1: 326130623a346530373a6362343a3a2f34382d3438203d3e20323134333933.roa (hash: ODUilhshRdNsDXfqAe4VZEWbvmhaS4lMhLkZMfOrcKE=)
                          2: DD6503836A2A3384674C6B0501E95B0AA2A381C9.crl (hash: Ypu7QsNZo7oCJgwxbSRduITZD31G7fYipaPDc4sXoxg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4d:7d:86:12:3d:8c:8b:1e:94:09:99:65:a8:f0:b6:e0:2d:55:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD6503836A2A3384674C6B0501E95B0AA2A381C9
        Validity
            Not Before: Oct 28 17:48:53 2024 GMT
            Not After : Oct 29 19:30:53 2024 GMT
        Subject: CN=4BB3F70E5F002AA847DE46EB6E2867BA11714BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:88:6d:d5:51:55:a4:e5:b8:47:6a:b0:db:
                    ae:23:5d:27:38:cd:95:2e:ff:c2:a6:bb:90:a8:9c:
                    0f:8e:30:c5:6f:88:8a:8d:51:af:4d:a4:4f:28:d1:
                    c0:ce:b5:25:28:35:22:aa:df:f8:ee:8b:29:ef:f8:
                    20:0e:b8:7e:59:f1:5b:36:3d:b4:5b:07:3e:32:a2:
                    47:03:0b:eb:61:df:44:9d:13:04:2b:3c:4a:09:6c:
                    ac:84:dc:91:08:a6:9e:f8:c1:02:05:11:94:f4:ff:
                    be:fc:1a:62:4c:5d:80:bb:13:8c:06:ab:64:81:6d:
                    c6:6e:86:c7:86:50:cc:a1:10:9c:89:65:43:31:36:
                    8f:8b:c9:63:ed:ea:cb:e0:16:eb:4a:77:02:c7:dc:
                    60:98:85:78:a5:38:7f:3a:99:44:b7:d7:e3:ed:c6:
                    8b:a5:5f:98:23:31:34:31:1f:5d:8a:5c:a2:ad:d1:
                    10:64:e2:1f:f0:25:21:50:ef:6f:da:63:42:43:64:
                    cd:95:8f:da:4a:07:45:59:c2:03:6d:03:0f:c8:53:
                    7d:45:2a:c2:5b:46:c4:f3:78:a8:74:a1:b7:21:71:
                    30:82:7c:5c:af:47:3c:96:da:41:f7:9c:f0:68:ff:
                    86:74:a9:5e:e9:b9:19:c1:7b:71:b4:a2:e3:a8:f6:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B3:F7:0E:5F:00:2A:A8:47:DE:46:EB:6E:28:67:BA:11:71:4B:D1
            X509v3 Authority Key Identifier:
                keyid:DD:65:03:83:6A:2A:33:84:67:4C:6B:05:01:E9:5B:0A:A2:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD6503836A2A3384674C6B0501E95B0AA2A381C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:37:21:0c:26:9b:d7:a7:02:cd:da:11:4e:b3:8f:7d:ff:d2:
         25:c4:ba:cb:b3:b9:9d:1a:7b:f6:a2:87:0b:9e:4b:dc:b9:15:
         fc:70:eb:4d:23:2f:f4:52:bd:2a:28:af:20:97:50:55:5b:f9:
         aa:bc:26:d4:1a:4b:f2:47:0b:12:3a:4d:53:0a:65:6e:e6:14:
         6e:05:48:29:25:b5:36:4b:7e:6c:23:f6:d3:56:43:cc:e8:82:
         e8:77:d1:20:67:2f:1c:83:3f:ea:e1:40:9c:0a:40:65:05:9e:
         ec:f0:43:cf:dd:a9:1f:df:8a:86:80:e1:d6:a4:cd:8c:6b:6b:
         9d:43:76:2a:62:1b:aa:03:98:62:fa:77:ab:b4:2c:6a:55:37:
         37:4e:7d:08:4f:90:29:d0:a0:6b:dc:fb:0a:cf:c8:3f:21:0c:
         37:fa:54:d1:9d:0d:15:48:d4:c9:43:37:cf:82:47:a5:30:53:
         0a:de:62:6d:db:ee:27:83:72:60:58:41:fe:9d:0d:e5:89:d2:
         d0:21:71:76:89:ae:93:e6:75:cc:65:19:9f:10:b7:74:7b:3f:
         60:1c:f8:09:5f:66:29:d9:50:78:79:8f:97:0b:2b:b4:60:0c:
         a7:d6:fc:70:07:5e:d6:2c:4a:d3:86:e5:e0:3b:ad:ae:72:11:
         22:17:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----