Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
File:                     EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json)
Hash identifier:          FQ8QZSVfc2TuEjjPtZFynW/KjGEsthctM4l1lx88Ec4=
Subject key identifier:   27:82:9A:59:2B:EC:4C:B7:88:D7:56:E7:8C:67:96:EA:73:E2:A4:64
Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Certificate issuer:       /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Certificate serial:       3CB9A1A2CEAEB2F99E5BCEB6197648743CBBB0E2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
Manifest number:          02B6
Signing time:             Mon 28 Apr 2025 18:47:30 +0000
Manifest this update:     Mon 28 Apr 2025 18:42:30 +0000
Manifest next update:     Tue 29 Apr 2025 21:13:30 +0000
Files and hashes:         1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: 3P2AcH/lD37gVv9pAhcosIlF3ZVUPK+LKqCXT4e9oWM=)
                          2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b9:a1:a2:ce:ae:b2:f9:9e:5b:ce:b6:19:76:48:74:3c:bb:b0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
        Validity
            Not Before: Apr 28 18:42:30 2025 GMT
            Not After : Apr 29 21:13:30 2025 GMT
        Subject: CN=27829A592BEC4CB788D756E78C6796EA73E2A464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:b7:7a:96:6c:ea:28:a2:a8:37:c8:f6:c7:
                    23:32:bb:bc:7e:bb:c9:56:7a:fb:21:b7:7e:4a:91:
                    a1:17:c9:af:b2:db:19:a3:04:c1:27:74:5d:f2:a2:
                    11:f7:43:82:dc:60:ec:7f:1a:58:b1:5e:29:09:ab:
                    25:d1:d8:a3:36:7e:90:9b:b7:e3:cc:ae:6a:01:ce:
                    f1:71:f8:f6:37:33:32:fb:43:88:35:f6:5c:16:23:
                    db:86:5f:27:c6:f7:8c:0c:f5:f5:41:9b:fc:27:d2:
                    2e:29:f6:4c:22:b6:23:79:2a:4c:76:32:d5:65:50:
                    fc:20:4f:1f:2e:63:bd:4d:32:a9:87:5c:8d:47:98:
                    9b:37:e4:fe:29:37:2f:4a:d1:39:27:f6:04:04:f2:
                    2b:ae:d2:c1:1f:65:31:6c:5a:ba:bd:7b:63:42:2c:
                    d1:99:93:19:81:bf:cb:43:91:9b:74:55:a1:84:7a:
                    5b:5d:7f:69:4c:b8:4d:27:46:c4:df:e4:e7:e7:31:
                    55:5c:40:52:99:00:1f:00:30:3e:5a:cc:4b:c0:3b:
                    35:75:75:5d:54:20:91:5e:3c:23:d9:88:cb:45:14:
                    fc:9c:61:29:b4:fc:9d:5a:8b:17:ec:b9:b6:2a:db:
                    61:7a:c9:48:dd:27:4c:c7:49:c4:d9:d8:c9:d7:b2:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:82:9A:59:2B:EC:4C:B7:88:D7:56:E7:8C:67:96:EA:73:E2:A4:64
            X509v3 Authority Key Identifier:
                keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:7b:32:3b:c5:c8:5f:77:bd:a1:3f:a3:10:f1:11:69:ba:
         21:bb:3b:44:0d:5a:e2:bc:fe:b1:87:17:be:a8:6d:10:46:3c:
         bb:49:5c:29:22:57:ab:35:d0:40:a2:62:24:94:66:e3:40:d8:
         6c:d7:ce:f2:2a:3e:c2:7f:1b:da:b8:0c:49:f7:03:ff:a9:12:
         85:22:44:b3:4f:d1:4d:b8:bb:69:49:b8:dd:63:33:33:d1:3a:
         29:ab:cd:72:12:19:d1:93:a3:0d:e0:f2:7e:92:ab:98:a6:07:
         62:ec:7d:ec:30:b3:0b:e3:7c:3e:e6:ba:52:95:5a:99:a8:1c:
         82:a1:62:3b:d4:3a:e7:a4:27:61:ba:bb:c8:9c:c9:d7:6b:57:
         2e:d0:be:ca:86:4c:40:90:7c:bd:01:a7:5c:c9:9a:b3:87:63:
         ab:63:cc:51:3a:15:f5:d5:5f:77:79:d0:a5:e0:62:e9:a6:e4:
         00:4c:99:f7:20:f3:48:84:08:ed:a6:43:91:09:65:34:3c:f0:
         8f:67:dc:8a:28:c7:6e:4e:e1:f1:4e:d3:f3:9d:30:d8:da:16:
         8f:63:1d:27:53:f4:76:8f:b6:8c:b1:71:bd:64:9b:63:ac:df:
         d1:d9:25:4f:5d:a7:d9:ac:b8:7e:39:ab:b0:c0:5b:dc:13:ed:
         69:08:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:22:17 2025 by rpki-client