Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft
File:                     1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft (raw, json)
Hash identifier:          9ahx1TO32JCCG5kBtWuIWB6nxZaUZ+L1JQarkWuUXGc=
Subject key identifier:   FD:24:13:8C:35:21:03:48:31:49:AD:13:83:8D:80:0C:88:9C:4F:DF
Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79
Certificate issuer:       /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
Certificate serial:       30B63B178FD3FB191E05D400FF873A36A915DB78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft
Manifest number:          4A
Signing time:             Mon 23 Jun 2025 03:08:58 +0000
Manifest this update:     Mon 23 Jun 2025 03:03:58 +0000
Manifest next update:     Tue 24 Jun 2025 03:42:58 +0000
Files and hashes:         1: 326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa (hash: Y5ilvBbE12qO1Ud5YZb+YMRUcGap41Si5541sY2pw8w=)
                          2: 326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa (hash: Hxl/WHpFi1Lrr9tPJHprlKCFg1f6KdSpCnh41pb8RUw=)
                          3: 326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa (hash: omUm+VClsl1esxeSZas8cPGaOt8NK5P0JK8DttORXSQ=)
                          4: 326131343a373538303a3730303a3a2f34342d3434203d3e20313938303235.roa (hash: 4L0QSAftYtcw4WDJTyxob29wy6e4AqxikKCoI1U7ltM=)
                          5: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl (hash: tNZrAaPNQ24swyMjgx+NtiZ6i+mImWtGlQrFUsKQZmo=)
                          6: 326131343a373538303a3730303a3a2f34302d3430203d3e20313938303235.roa (hash: q6g7NvOylKcoMKHIBFZ0Cue6q0bByY4gqgu482bGvYs=)
                          7: 326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa (hash: YgvU7sxrMhf4/I0u7F9ePehiaAqP0nrViPzYLyrcqg4=)
                          8: 326131343a373538303a3734303a3a2f34342d3434203d3e20313337393038.roa (hash: 2XHTj/cfAPJdVFHVIH4P55LBG+fLJn82CtSAwFgxMbs=)
                          9: 326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa (hash: F0yheovlhp7K4XimVlJIY2XY5LQ9rO6Lio/g2Fp5WxY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b6:3b:17:8f:d3:fb:19:1e:05:d4:00:ff:87:3a:36:a9:15:db:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79
        Validity
            Not Before: Jun 23 03:03:58 2025 GMT
            Not After : Jun 24 03:42:58 2025 GMT
        Subject: CN=FD24138C352103483149AD13838D800C889C4FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:b0:01:c5:fb:ce:7e:f7:a3:69:47:e2:09:
                    67:2c:69:ef:f4:e0:4c:68:c3:9c:8d:71:6c:60:74:
                    c8:34:2d:8e:e4:ef:9b:5f:e5:d9:a5:dc:cb:bf:d2:
                    32:c4:dd:f7:46:28:ae:93:5e:5a:ad:e5:b7:25:b6:
                    f8:50:75:18:b0:3e:ae:3a:7a:e4:b1:ea:a7:61:29:
                    66:df:d0:22:fd:e7:45:1b:9d:a7:4b:57:c1:9b:5c:
                    dd:12:2b:72:82:9a:b6:19:04:2f:d2:bf:17:66:e9:
                    de:d6:be:9a:60:83:ea:57:9f:29:aa:29:2a:35:b2:
                    42:39:dc:20:e1:07:b8:96:2e:bf:68:3b:36:50:97:
                    57:d2:49:84:66:ed:d0:ae:d3:2a:40:72:61:4e:fb:
                    46:fd:8d:0e:39:0b:f4:e1:8b:da:bc:31:d2:82:65:
                    43:3c:b4:03:4a:01:70:98:6c:41:17:ad:4d:8a:76:
                    5a:e6:af:84:2e:21:9c:38:f5:8d:83:ae:57:39:8f:
                    72:98:1e:9c:13:1b:56:2f:81:6f:7d:b6:35:39:d1:
                    96:a9:6a:dc:f2:43:77:2e:44:f7:33:6e:4b:d4:31:
                    26:e3:bb:6c:42:68:e2:3c:13:51:b7:72:15:68:60:
                    6f:bd:80:12:16:c4:61:d2:ab:18:b4:78:de:d8:4c:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:24:13:8C:35:21:03:48:31:49:AD:13:83:8D:80:0C:88:9C:4F:DF
            X509v3 Authority Key Identifier:
                keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:3e:2d:ac:2b:59:51:41:dd:31:56:5e:40:d3:59:e3:ef:
         21:6a:b6:a2:72:70:1e:e4:1c:50:15:c0:96:fe:94:bb:e6:8c:
         2b:5b:d2:85:13:38:d4:01:8a:8c:bf:12:d8:2b:ad:a6:79:2b:
         e3:a7:11:fe:26:98:2c:c2:13:2c:fa:15:2f:41:07:3d:9d:f7:
         05:eb:57:ce:e4:ac:76:ac:db:eb:29:6f:d9:b5:eb:39:e7:91:
         96:b1:88:f7:66:95:40:f2:42:a6:a9:ea:6d:87:17:1e:db:b8:
         d0:8e:91:09:8e:2c:6d:8c:18:4f:fc:ac:bf:c0:02:6c:39:ce:
         b3:25:d7:b6:16:fb:7a:60:51:86:f7:7a:04:a8:03:8b:70:d9:
         b6:71:bb:aa:64:ab:6d:24:10:20:95:0d:86:2c:ab:a5:ec:7a:
         ae:ab:a3:cb:c6:71:c8:92:c7:23:c1:a9:4a:5d:8f:59:7c:3f:
         df:b9:c4:55:72:b3:b6:d0:35:41:10:7e:7a:7d:95:26:ab:3b:
         cb:58:8d:6b:bd:b9:c1:c0:e5:29:47:4e:73:c5:56:e8:44:e5:
         2d:1c:84:a2:35:96:30:59:e8:91:20:10:18:c5:37:2d:f2:df:
         b0:ee:32:22:ad:b4:3d:50:a0:85:62:a4:81:1f:e7:fb:ef:a9:
         33:a4:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:25:03 2025 by rpki-client