Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/EB28E9680B83512793C6973868B923D758D0D8A9.mft
File:                     EB28E9680B83512793C6973868B923D758D0D8A9.mft (raw, json)
Hash identifier:          nuoJrsZEDIxVQfUfJCDpFqVZniXFEoRCtFizKBni/u0=
Subject key identifier:   C8:A0:15:43:42:09:DE:3C:65:48:F1:AE:C4:3D:0D:74:6B:58:23:AB
Authority key identifier: EB:28:E9:68:0B:83:51:27:93:C6:97:38:68:B9:23:D7:58:D0:D8:A9
Certificate issuer:       /CN=A91650860000/serialNumber=EB28E9680B83512793C6973868B923D758D0D8A9
Certificate serial:       3EDE2A41F5575EE38308266066410E7057EECF41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yjpaAuDUSeTxpc4aLkj11jQ2Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/EB28E9680B83512793C6973868B923D758D0D8A9.mft
Manifest number:          04
Signing time:             Thu 03 Jul 2025 03:57:28 +0000
Manifest this update:     Thu 03 Jul 2025 03:52:28 +0000
Manifest next update:     Fri 04 Jul 2025 04:37:28 +0000
Files and hashes:         1: 323030313a6466333a656663303a3a2f34382d3438203d3e20313439333031.roa (hash: fQakzTcM/omAhlgcB1mCPCXRW7JoIgU4BOEx0iEhRJc=)
                          2: EB28E9680B83512793C6973868B923D758D0D8A9.crl (hash: 0MbvpA1RDS2IY2KofFOvKNA0elK/4u12aJ4XKG6Hi/c=)
                          3: AS149301.asa (hash: EM4Iuc0LuqI2vu5b529LLJ5lRMP4hWEfTGkjRfnz31M=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:de:2a:41:f5:57:5e:e3:83:08:26:60:66:41:0e:70:57:ee:cf:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650860000, serialNumber=EB28E9680B83512793C6973868B923D758D0D8A9
        Validity
            Not Before: Jul  3 03:52:28 2025 GMT
            Not After : Jul  4 04:37:28 2025 GMT
        Subject: CN=C8A015434209DE3C6548F1AEC43D0D746B5823AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:6c:7b:f3:09:3d:b3:a5:48:c6:5d:c1:d5:
                    a0:e7:52:b6:39:5b:d0:f7:45:c2:61:59:7a:07:f0:
                    0d:19:01:be:4e:3d:d3:75:45:5a:ad:44:12:a7:3f:
                    98:a5:1f:7e:ee:61:7a:38:b6:bf:e7:28:f5:49:c4:
                    47:31:67:67:41:2d:ed:e1:86:3f:ee:ec:7d:22:47:
                    6d:bf:ad:21:dd:de:d6:c5:e4:c0:ef:ca:06:51:fd:
                    3a:ad:53:b5:14:0d:5d:17:b2:aa:5c:2e:06:46:6b:
                    87:6f:fa:8d:2c:a0:fd:a3:fb:e0:95:3e:99:f2:73:
                    80:11:3c:50:0d:1d:db:fe:7a:63:4c:c4:10:0a:da:
                    48:d3:96:e9:be:cb:4a:a9:e0:4a:4a:e9:0c:4c:c3:
                    7a:ad:c2:30:1d:8a:4a:7b:bd:1c:73:03:24:c2:8e:
                    5d:5c:c5:52:7d:78:48:9d:ea:03:5f:e2:99:93:0f:
                    3b:5a:bd:88:ad:46:f7:a3:04:bf:08:5d:3e:91:d1:
                    3c:2b:1f:17:d7:a8:e9:a1:2d:f1:b4:f8:a6:9d:33:
                    d8:d1:88:81:96:52:ca:8d:1d:5a:95:31:3d:db:6a:
                    c1:68:f3:9f:0e:99:20:32:46:c6:85:10:6d:3e:2a:
                    f6:fd:bd:c4:de:45:85:ae:9e:ff:16:cd:36:e5:14:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A0:15:43:42:09:DE:3C:65:48:F1:AE:C4:3D:0D:74:6B:58:23:AB
            X509v3 Authority Key Identifier:
                keyid:EB:28:E9:68:0B:83:51:27:93:C6:97:38:68:B9:23:D7:58:D0:D8:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/EB28E9680B83512793C6973868B923D758D0D8A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yjpaAuDUSeTxpc4aLkj11jQ2Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/EB28E9680B83512793C6973868B923D758D0D8A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a1:64:7d:11:f2:5f:a1:fd:46:07:1a:80:ef:07:93:7a:e7:
         22:96:2a:b8:0c:c6:ae:87:c0:ac:55:77:dc:9a:f3:c6:74:3a:
         29:62:7a:a8:81:f1:12:ea:f3:92:6f:9c:d7:da:92:37:f6:b0:
         86:a0:15:13:49:e9:9f:a3:50:e4:16:44:26:2c:62:33:ae:0b:
         7a:1a:d2:ff:51:6f:b0:26:ad:66:ee:20:57:c3:a7:72:ed:d1:
         90:ed:e4:96:25:cc:3f:68:ca:ee:ce:fb:25:63:50:39:31:31:
         85:57:98:4d:66:6b:b0:86:c7:13:a7:98:cb:a3:0e:4d:26:63:
         0e:48:24:0b:9d:6d:bb:6e:1e:da:8f:09:02:78:d5:fc:17:ba:
         e2:02:14:3f:a7:38:be:cf:27:b0:20:0a:a5:d2:76:cc:00:e9:
         e6:b2:9f:2d:63:56:04:fc:eb:42:08:1c:b0:31:28:de:85:89:
         4b:c9:e7:be:b8:9e:4b:07:d1:48:2d:4d:a5:c8:46:85:9e:8a:
         33:df:3f:34:bd:20:1c:e5:f4:8b:9f:78:03:a2:cb:4f:76:08:
         ed:8a:71:e6:24:4b:37:ac:04:6a:82:6a:78:f9:23:72:c6:74:
         f2:6d:f5:c2:fb:99:d7:de:6f:23:bc:fb:25:49:be:f1:14:e5:
         c3:ad:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----