Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft
File:                     FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft (raw, json)
Hash identifier:          Fnt1rdA/x+lE/zWwZsCoTtNW3DERoQ43bR7TnE8qhNw=
Subject key identifier:   67:24:71:F2:15:74:99:54:A6:2B:26:63:C1:49:35:D0:1D:78:B5:04
Authority key identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
Certificate issuer:       /CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Certificate serial:       0FB80DEC912CB12ECEDE7E2CBF5E2ADFF64A0C55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft
Manifest number:          0B
Signing time:             Fri 27 Jun 2025 17:11:17 +0000
Manifest this update:     Fri 27 Jun 2025 17:06:17 +0000
Manifest next update:     Sat 28 Jun 2025 19:44:17 +0000
Files and hashes:         1: 326130613a363034343a626330313a3a2f34382d3634203d3e20313939373633.roa (hash: Z+cJH8xenDt3NANTGcMN89CIkYPcp1Jitr3GDCmS4n4=)
                          2: 326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (hash: 5ff9So6R+4JwgBaznVT50fWcxXl/IM1ZqlDezEJNdUI=)
                          3: 326130613a363034343a626337373a3a2f34382d3634203d3e20313939373633.roa (hash: e3RU0172GMNbjGCezkwB9hQQnJwPcDA4Li4ceqgsegM=)
                          4: 326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa (hash: xYMB//iCSdn37gQ250BZYATi3kZW6v80lWT7rj1mTCc=)
                          5: FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.crl (hash: tB0esX33AOTF/w997kn3UrZYWXCK0FZN9/oba2TpqZ8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b8:0d:ec:91:2c:b1:2e:ce:de:7e:2c:bf:5e:2a:df:f6:4a:0c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
        Validity
            Not Before: Jun 27 17:06:17 2025 GMT
            Not After : Jun 28 19:44:17 2025 GMT
        Subject: CN=672471F215749954A62B2663C14935D01D78B504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:c7:0f:16:4e:9b:e4:85:95:d7:78:e3:9e:
                    12:ca:8c:f7:e1:90:99:b3:54:0c:d0:76:76:0c:61:
                    3e:d7:0a:94:d3:8f:1d:3b:72:ba:0c:1a:f8:3c:78:
                    3d:e8:34:8f:9a:a2:58:be:e6:30:17:f2:0d:4d:1f:
                    ec:01:7e:97:6e:15:0e:32:81:7e:6b:32:fd:71:38:
                    eb:00:15:cb:93:35:7e:55:58:50:6c:e2:12:ec:4e:
                    de:77:b0:9a:ea:66:d1:bd:1a:a2:89:10:11:8b:1e:
                    f7:b7:e3:2d:1b:9b:4e:12:d9:4d:5b:7a:14:f4:84:
                    de:83:cd:54:06:8c:d6:9a:0e:f3:c7:26:bf:7d:1b:
                    f4:49:6d:81:6c:31:b0:f7:62:b7:3f:c1:8f:3a:68:
                    01:bb:65:17:a9:ab:20:73:72:0e:bf:e0:51:49:32:
                    65:90:aa:d7:a8:57:c0:d7:37:c0:a3:e2:cb:8a:86:
                    da:df:e1:bc:b8:54:f5:03:10:db:60:b2:29:13:82:
                    3d:bf:4a:02:33:91:e9:fc:c8:2a:fa:f5:d5:95:d6:
                    fc:d0:fc:e3:bf:60:58:e9:4e:17:36:14:64:7f:9c:
                    80:54:46:a5:c0:7a:51:0c:1f:38:29:8e:81:2e:f5:
                    0b:30:3a:30:60:e5:a2:1a:39:6e:23:54:1c:85:91:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:71:F2:15:74:99:54:A6:2B:26:63:C1:49:35:D0:1D:78:B5:04
            X509v3 Authority Key Identifier:
                keyid:FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a9:26:5d:a3:b4:2a:c8:62:aa:4b:82:81:3c:da:34:23:63:
         0d:1e:b9:d4:7e:15:2d:22:b2:cf:60:a4:d5:3c:39:71:6c:44:
         7d:e2:50:30:bf:e0:70:58:c1:f6:5a:9f:27:ed:70:4d:d1:0f:
         3c:b2:74:a7:c0:8c:d9:e8:90:37:43:a9:7e:71:8f:c0:67:d3:
         c5:5e:6b:6e:f1:a3:83:38:07:f9:29:7d:8f:8a:57:c9:8a:45:
         70:e7:75:82:3d:ef:41:06:9c:f0:ed:ca:4f:5b:d6:05:e7:23:
         22:ea:95:e8:14:f3:9f:ff:0c:04:e7:3e:ab:10:f7:c2:90:e6:
         d4:bb:88:ff:f8:8c:87:02:f7:4c:6f:e9:ba:00:0b:cf:29:d5:
         1b:9a:3e:07:99:eb:df:9b:14:73:45:52:bf:dd:96:1a:59:d0:
         39:16:31:d9:b0:d0:47:e2:24:9f:9e:2a:3b:97:5c:63:e9:2c:
         27:c3:73:97:b6:02:e5:c2:c9:b0:91:a7:26:06:83:ee:1e:52:
         8a:24:f4:7d:8b:2b:58:c1:ef:48:5a:e9:66:bd:9b:93:ab:9c:
         31:67:b6:af:d4:4e:b7:8f:07:0b:3b:fa:7a:04:64:ea:24:12:
         d9:56:cd:21:3f:7d:f3:08:4a:88:2a:83:d8:8c:09:fa:c4:c5:
         e3:6d:ec:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----