Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
File:                     B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft (raw, json)
Hash identifier:          AIRQ56M5OiTl5YbQSS0XjuhXHtOvN+YRwH8kr7C6UGI=
Subject key identifier:   41:0E:EE:E2:B9:24:10:0A:E3:2A:BC:C4:48:64:51:BE:69:1C:E1:44
Authority key identifier: B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E
Certificate issuer:       /CN=b1d3049ab90b73314f2adfcad639336d9320b35e
Certificate serial:       7609916F027C214547512503B4B94AA845B52F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
Manifest number:          D2
Signing time:             Wed 18 Jun 2025 23:07:54 +0000
Manifest this update:     Wed 18 Jun 2025 23:02:54 +0000
Manifest next update:     Thu 19 Jun 2025 23:11:54 +0000
Files and hashes:         1: B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl (hash: mX55fmGlM/ew5+0d1kz/ECOZ6SuZ55ymPCXcHGpEACc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:09:91:6f:02:7c:21:45:47:51:25:03:b4:b9:4a:a8:45:b5:2f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d3049ab90b73314f2adfcad639336d9320b35e
        Validity
            Not Before: Jun 18 23:02:54 2025 GMT
            Not After : Jun 19 23:11:54 2025 GMT
        Subject: CN=410EEEE2B924100AE32ABCC4486451BE691CE144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:c6:93:48:e8:54:a8:5d:cf:84:d8:90:76:
                    69:f3:48:0a:83:53:89:ff:ae:f6:da:b7:3c:a0:70:
                    36:c4:c4:9d:59:8d:51:83:0b:4e:3f:b7:5b:e5:d4:
                    94:7e:52:00:4e:d1:4c:ac:c1:08:79:8f:bf:63:ca:
                    13:60:71:22:72:88:26:a6:d2:30:9a:60:b7:d2:e5:
                    11:80:b3:3f:8a:96:2c:4d:54:7d:1a:83:fc:e8:76:
                    71:95:8f:9e:b6:a9:3d:94:df:23:29:7c:89:8e:3a:
                    bd:f4:80:7a:cf:b7:4a:65:16:48:38:bb:05:30:fb:
                    14:e6:c8:db:20:6c:93:ae:dd:bc:f3:f7:c1:07:27:
                    97:b5:e5:80:88:83:13:34:5b:1a:cc:c3:f4:9d:fc:
                    05:19:cf:33:45:52:51:c2:eb:5e:1f:90:e6:87:54:
                    1e:cb:71:8c:36:fd:91:30:d1:3a:df:ae:8f:62:6e:
                    f7:12:d4:f8:01:9e:86:b3:53:6b:37:ba:5c:18:07:
                    48:e8:5b:f1:77:9e:06:4d:11:8e:8e:70:d8:7c:73:
                    5d:98:a1:82:fa:0c:00:d7:ca:31:a1:eb:fb:9e:35:
                    78:e2:ac:43:2e:75:8e:67:dc:0b:98:9f:36:43:78:
                    e9:b7:ed:e5:d9:04:7b:e1:64:c7:6c:07:10:ee:b5:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0E:EE:E2:B9:24:10:0A:E3:2A:BC:C4:48:64:51:BE:69:1C:E1:44
            X509v3 Authority Key Identifier:
                keyid:B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:95:77:a9:34:8d:c8:fa:e4:cc:d8:d2:26:ad:25:fa:85:
         66:34:33:52:97:1c:90:bf:2a:f6:9e:b6:1f:f2:b2:d5:d6:a9:
         ae:06:2a:82:c8:f0:53:0b:bd:de:7b:53:85:d4:3c:9d:5b:bc:
         ed:01:01:3a:ef:78:6a:38:84:1f:c4:9f:d4:45:d0:ac:81:8d:
         b3:9d:82:be:21:83:a0:44:f6:b5:eb:4d:8e:95:3f:fa:fb:ff:
         cf:ef:06:46:47:21:36:87:e6:94:0e:0a:30:83:30:f6:a4:73:
         c7:73:ac:be:54:d0:35:bd:ef:d1:70:1d:5b:4c:93:09:e2:a3:
         09:e9:5c:0b:2e:8f:34:9d:19:5c:59:f4:3c:0c:15:fd:6d:8e:
         34:be:46:60:4a:50:c4:d9:1b:b9:49:61:17:b6:b2:2b:d4:93:
         93:e7:a4:de:d2:85:c8:fe:d9:8c:53:00:07:96:06:8f:19:cc:
         36:64:ea:c9:65:6d:44:cf:14:77:76:da:7a:6e:11:6d:7d:79:
         66:3a:76:85:e2:40:15:bd:b7:c7:e9:53:08:7f:9f:1a:83:e9:
         a7:9e:7b:25:34:73:e0:e5:7b:91:c7:4d:8c:13:79:76:a9:e2:
         91:d1:c2:7a:85:ee:8d:66:e1:c4:dd:c2:6c:87:8c:6b:6a:e8:
         ff:e7:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:23 2025 by rpki-client