Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          hg2pT5tDYcKMmli5tiF7PCPjC11AerN8XblIUxizADM=
Subject key identifier:   05:7E:98:C9:DB:71:FE:5C:12:55:40:FD:36:B6:D4:F8:E7:37:0B:EA
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       03983DFEA31D63A20D7EBCDFADFBC82FB4E988B4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          01F6
Signing time:             Mon 28 Apr 2025 21:49:09 +0000
Manifest this update:     Mon 28 Apr 2025 21:44:09 +0000
Manifest next update:     Wed 30 Apr 2025 00:57:09 +0000
Files and hashes:         1: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: dkDlXn7ZTKwdhEvN1AyaOINvq0aj0JnSzR14swqFK7s=)
                          2: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=)
                          3: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=)
                          4: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=)
                          5: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=)
                          6: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: KlZulVdFU1AnNd8CEfBANBSPQonZ3jbxo60IVrz7krA=)
                          7: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=)
                          8: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=)
                          9: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: KfVtaM6pSil5IlE25aJ6GsX8ukKL88HTbLxoecGenMs=)
                          10: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=)
                          11: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: j3Yxep+MI4lCkRyN6TayldqjXbBq5gnnYN1fkBIgW/k=)
                          12: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=)
                          13: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=)
                          14: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: zxhwJ8BRHSfhv2IzHdjrBBfqb2fcq5amMTROJBgH6K8=)
                          15: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=)
                          16: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: 2KFsAHpLftCLwZtbIHo+pYTrjbgMoXhuDq6pQ1osTQE=)
                          17: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=)
                          18: 326131343a373538313a343835663a3a2f34382d3438203d3e20313530323439.roa (hash: 5xKTuxtl6gU1soXvS6gNX1GeC3WIfuH+Q7hlbZVvBVo=)
                          19: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: IFxu47mX+KW2yr5BPkyWwe9T/nmoVdlGCmb5Yjhy+6o=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:98:3d:fe:a3:1d:63:a2:0d:7e:bc:df:ad:fb:c8:2f:b4:e9:88:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Apr 28 21:44:09 2025 GMT
            Not After : Apr 30 00:57:09 2025 GMT
        Subject: CN=057E98C9DB71FE5C125540FD36B6D4F8E7370BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:6d:09:6b:c9:e0:7a:bf:d9:f5:5b:a8:8f:
                    1e:c4:5f:96:77:29:03:0b:18:50:7e:70:30:b9:bc:
                    95:35:c7:70:8c:d2:ca:be:b3:d0:49:71:e8:b0:ce:
                    a5:05:b9:81:5a:19:27:5c:85:61:91:07:cf:41:7f:
                    b9:b9:40:64:9e:70:ad:08:82:61:0a:62:63:e0:9e:
                    f9:eb:6a:f3:97:bf:a2:7a:aa:08:18:57:08:d4:c2:
                    74:17:8d:18:ed:9b:e0:87:ae:01:78:3b:0a:86:98:
                    e5:66:af:91:7e:f0:04:a0:54:25:09:67:e1:51:77:
                    54:22:c3:09:ca:1a:ca:68:23:46:af:30:58:19:bc:
                    6f:81:ec:94:d5:6d:f8:27:50:18:ba:cf:0a:b3:f0:
                    6b:3c:60:22:02:e4:f9:78:96:e4:1f:68:ac:93:81:
                    41:0c:37:f3:b3:c3:46:fe:28:b6:89:4a:d3:15:15:
                    df:b7:a4:8f:fd:af:88:c2:98:3c:39:b1:5d:40:e3:
                    ae:a6:e5:76:2f:53:17:69:2f:8b:cf:17:c9:c0:41:
                    e8:a2:af:38:40:f3:26:48:f2:69:67:57:7c:b3:d4:
                    c4:ac:08:8f:62:ea:6e:74:cb:de:b7:31:bf:18:3e:
                    b1:c6:c0:65:c3:6c:0c:97:1a:df:c8:d7:c8:7b:b6:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7E:98:C9:DB:71:FE:5C:12:55:40:FD:36:B6:D4:F8:E7:37:0B:EA
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:3f:f6:fc:ab:d6:73:9e:77:a6:b8:cf:2b:1c:f8:f6:5a:
         b0:90:66:46:af:ad:00:92:60:ce:8d:cf:37:a5:d0:95:ed:57:
         1c:f0:ca:8d:fe:d9:e2:8a:a7:d6:1c:65:85:58:d2:2e:23:d8:
         1f:c5:f9:40:b7:ba:fd:8c:cc:9a:ff:76:80:f8:3f:99:39:88:
         f8:04:cd:85:20:f5:38:99:b2:af:42:54:f8:34:85:e5:65:00:
         ce:f6:50:64:b6:15:59:d0:91:bc:f1:50:22:7f:6a:19:61:c3:
         bf:ad:7f:3f:02:64:13:7d:4d:ee:ff:ca:e4:40:94:96:8a:95:
         9a:0a:d9:dd:07:d8:1d:28:95:ac:fa:7f:9e:2a:fc:67:31:29:
         03:7a:27:0d:9d:ed:61:eb:1e:0b:5d:3a:06:34:7a:00:03:87:
         38:03:4e:ff:02:0f:69:53:48:02:6f:35:2f:c5:97:63:e4:32:
         5b:87:e3:b1:32:86:1a:be:93:e9:b0:2f:fc:0b:99:c4:48:ef:
         7e:3d:22:d1:b6:2b:c4:08:29:78:a3:d0:a2:85:eb:26:5a:bc:
         30:44:c0:80:f4:f3:5e:ea:da:72:0b:18:55:ec:91:8a:fb:72:
         f6:a6:2b:94:53:cf:09:a4:d4:c1:df:ec:75:b3:6a:23:4e:62:
         87:27:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:57:32 2025 by rpki-client