Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd30a818-e105-413c-9d00-d36a887eff80/0/1C808584929EC643220D69A77E5E050E1D09D969.mft
File:                     1C808584929EC643220D69A77E5E050E1D09D969.mft (raw, json)
Hash identifier:          tHuxH8yJsg2+eFNrQjNP90j5WWAj+pCIg4r5V+MaA0Y=
Subject key identifier:   64:DB:10:6E:D5:8E:DC:C6:84:F4:E0:F5:28:FC:9B:25:CF:70:7C:DD
Authority key identifier: 1C:80:85:84:92:9E:C6:43:22:0D:69:A7:7E:5E:05:0E:1D:09:D9:69
Certificate issuer:       /CN=1c808584929ec643220d69a77e5e050e1d09d969
Certificate serial:       5F53B08EF8447A841E268489309CF7758627F642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HICFhJKexkMiDWmnfl4FDh0J2Wk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fd30a818-e105-413c-9d00-d36a887eff80/0/1C808584929EC643220D69A77E5E050E1D09D969.mft
Manifest number:          01
Signing time:             Sun 29 Dec 2024 13:51:05 +0000
Manifest this update:     Sun 29 Dec 2024 13:46:05 +0000
Manifest next update:     Mon 30 Dec 2024 17:16:05 +0000
Files and hashes:         1: 1C808584929EC643220D69A77E5E050E1D09D969.crl (hash: 2o+F71YrInc+t+csr++JYWMqpwgVPDlb0/uuf6NlVFw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:53:b0:8e:f8:44:7a:84:1e:26:84:89:30:9c:f7:75:86:27:f6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c808584929ec643220d69a77e5e050e1d09d969
        Validity
            Not Before: Dec 29 13:46:05 2024 GMT
            Not After : Dec 30 17:16:05 2024 GMT
        Subject: CN=64DB106ED58EDCC684F4E0F528FC9B25CF707CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:88:c0:9b:44:57:e9:17:16:74:3b:bc:e4:
                    52:04:71:d6:7a:b9:04:d3:70:ea:f9:1a:fe:47:6c:
                    a3:ea:b8:ae:f2:a9:b9:76:ca:58:f6:2f:2f:cb:4b:
                    77:d6:db:53:09:37:ac:29:8a:57:89:45:da:ae:1d:
                    7f:d4:d0:b5:25:46:a0:d9:de:a1:d2:05:20:e8:96:
                    a7:1a:49:55:41:b8:42:9d:2c:68:cb:cc:70:39:68:
                    f5:ef:1c:ef:68:78:da:8f:33:7a:cb:3a:8a:7f:d5:
                    ab:7c:0c:17:af:a0:1e:88:9c:c3:c2:bc:34:18:86:
                    34:28:a7:a6:fd:a1:23:6e:0c:22:2c:b9:6a:30:89:
                    ed:41:eb:4d:43:e2:e9:e3:4d:96:89:cb:09:78:f3:
                    b6:c2:a7:fa:b3:83:f4:f9:7c:14:b4:0a:10:5b:ab:
                    38:40:ef:3e:4d:4c:e8:c7:e6:6d:cc:5c:c4:f2:b9:
                    44:9e:a7:c6:64:ce:52:f1:67:09:8e:12:73:3f:dd:
                    21:11:6b:03:75:72:b4:0e:54:d1:a4:c1:29:f3:64:
                    48:2a:ac:d5:b6:7b:01:3c:a7:a0:cb:18:59:28:84:
                    79:d9:c1:48:c2:36:97:40:f6:c1:15:4f:08:ba:2e:
                    e2:7b:99:ac:5b:58:61:25:f1:93:27:77:29:76:d8:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DB:10:6E:D5:8E:DC:C6:84:F4:E0:F5:28:FC:9B:25:CF:70:7C:DD
            X509v3 Authority Key Identifier:
                keyid:1C:80:85:84:92:9E:C6:43:22:0D:69:A7:7E:5E:05:0E:1D:09:D9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fd30a818-e105-413c-9d00-d36a887eff80/0/1C808584929EC643220D69A77E5E050E1D09D969.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HICFhJKexkMiDWmnfl4FDh0J2Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd30a818-e105-413c-9d00-d36a887eff80/0/1C808584929EC643220D69A77E5E050E1D09D969.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:5b:1c:95:89:a6:57:94:8f:d9:23:db:1a:30:cc:70:cc:
         35:8f:c4:07:eb:45:1c:94:71:1e:fa:b2:bf:d7:f1:ff:20:54:
         19:1c:8e:3d:52:13:5e:0c:47:9f:16:e1:e5:65:56:97:6c:d8:
         4c:f0:8f:b2:36:3e:04:b9:5d:c0:1a:1b:de:76:69:5d:49:ee:
         77:8c:24:67:37:a9:c5:32:2c:ad:32:bb:44:ea:ff:e1:10:9d:
         10:c7:36:c7:88:e2:2a:56:b7:3d:a6:77:42:ec:de:1a:b4:c6:
         d0:8b:f0:24:64:d7:ae:5a:e4:e0:9f:d3:68:50:c9:23:9d:6c:
         fb:e7:1a:a3:e5:7b:02:42:ab:99:c1:f9:5e:bd:41:8b:1d:77:
         db:93:42:3e:b9:a7:10:69:e9:4f:b0:3d:5b:46:5b:db:37:9a:
         c9:6c:dd:2b:29:d4:95:b8:d4:f7:c9:7e:36:3e:cf:78:45:57:
         f5:ec:7a:dc:84:18:4d:e8:89:44:f7:f2:01:ff:c6:61:8f:ac:
         78:e0:19:b9:16:b5:ff:89:7f:21:67:55:c4:9a:11:3c:59:76:
         1c:95:5d:67:0d:ee:ab:7c:c7:9e:92:48:9e:f2:a5:87:c5:8b:
         a4:2d:d8:85:77:33:37:59:1f:a2:9d:91:9f:97:4d:e3:81:5b:
         9f:a0:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:27 2025 by rpki-client