Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          oCnLHdq4wrHEJAneGEAI+KLvLaToELAtEQ7CWGnSBto=
Subject key identifier:   45:D8:7A:6A:E3:C9:C3:D8:47:E7:1B:D0:13:76:96:6D:C7:E7:61:0F
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       0FBD9CB3DE8F9EED300951A4E97D15DDF35EB1E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          01F3
Signing time:             Fri 31 Jan 2025 22:19:10 +0000
Manifest this update:     Fri 31 Jan 2025 22:14:10 +0000
Manifest next update:     Sun 02 Feb 2025 01:43:10 +0000
Files and hashes:         1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: 2JhJ/z4TBRVTcsPdwifnuBPNmMpTThJ03WdfAd1P7TM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bd:9c:b3:de:8f:9e:ed:30:09:51:a4:e9:7d:15:dd:f3:5e:b1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Jan 31 22:14:10 2025 GMT
            Not After : Feb  2 01:43:10 2025 GMT
        Subject: CN=45D87A6AE3C9C3D847E71BD01376966DC7E7610F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:bf:95:82:39:9b:15:15:9c:89:b0:1e:5d:
                    59:eb:9d:64:ba:de:2a:ad:0f:e6:fc:2e:a4:1c:cc:
                    0b:94:d1:52:08:7b:6b:f3:f1:0b:0d:7f:1a:65:12:
                    76:32:02:0c:94:f1:5f:c5:7e:3a:71:b1:4a:b2:13:
                    b0:e0:9a:47:f8:bb:64:85:ea:52:07:83:6b:20:1c:
                    ca:14:d8:18:72:35:8a:f5:b2:0e:15:29:3b:49:45:
                    c0:ca:95:aa:a7:c4:60:89:40:3b:a3:8a:09:1a:50:
                    31:06:a9:42:6f:5b:04:c8:37:ba:42:bf:12:f8:97:
                    6b:7c:94:14:19:34:40:72:21:92:c7:75:4a:9c:66:
                    fa:c8:21:64:fd:28:a5:6d:43:7d:33:dd:fc:a1:93:
                    4e:bb:d4:db:2a:47:46:17:be:44:c5:6d:e9:bb:44:
                    79:ed:db:9f:d7:61:e8:c4:02:88:49:a8:ff:0c:97:
                    99:ac:f3:a5:23:04:04:60:6e:2a:65:5e:c6:64:12:
                    56:ff:cd:72:cc:fe:5f:01:f9:e6:c1:db:8a:53:29:
                    83:b3:ff:26:76:32:c3:b0:11:76:0e:fd:52:b2:29:
                    70:74:f9:a3:20:ac:83:96:43:7e:1c:e0:80:9a:ae:
                    4d:71:be:a2:79:26:02:a4:39:ce:87:df:74:5a:77:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D8:7A:6A:E3:C9:C3:D8:47:E7:1B:D0:13:76:96:6D:C7:E7:61:0F
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:49:e9:43:15:fc:29:b1:6d:be:43:7b:0f:fe:94:67:e5:20:
         45:07:4c:3a:a5:16:71:72:29:7e:ef:9e:ca:e0:4b:b1:e9:f5:
         ba:3c:81:8c:38:b4:62:4f:fd:1b:25:9e:3d:98:20:c1:d1:8b:
         8f:ce:df:65:ae:88:14:45:df:a8:b5:18:52:3e:16:80:e9:8a:
         6d:40:e9:1b:3f:d5:67:0b:26:f2:7a:03:c2:1b:e2:8f:b9:1c:
         b3:fb:92:cc:f3:82:f4:8a:fa:2d:47:0a:77:2b:0c:3d:8c:0d:
         33:15:db:1f:5c:a4:89:e1:65:00:4c:1b:2b:df:63:e9:8e:c7:
         6c:54:77:0c:b9:8e:63:cb:63:2d:a1:a8:71:6c:67:a1:ca:1d:
         c8:3d:24:fe:57:86:ba:3f:77:70:e1:7c:ad:e5:b7:72:0c:31:
         df:e5:28:1e:cc:38:23:99:2e:64:57:19:70:16:a1:ab:4f:84:
         ca:76:dc:c4:a1:44:3d:13:26:28:fc:ba:90:9f:bd:69:7e:c3:
         c2:bb:0a:e8:d5:c1:f0:2e:de:11:fe:a1:30:ab:cf:05:07:7b:
         ee:8f:72:2d:e2:16:84:fe:ce:b1:85:6c:25:2d:a3:9a:11:1c:
         f8:64:bb:da:e9:bd:60:09:61:57:8f:d4:55:b7:61:c2:c3:eb:
         80:55:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:10:11 2025 by rpki-client