Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
File:                     53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json)
Hash identifier:          E9E22/7r6BMsbvfHHDFWkmSOvznXTjqsdkkF5jQS47Y=
Subject key identifier:   A4:86:71:4E:D6:8B:B9:09:18:DE:6A:BD:A8:CA:84:46:CD:A5:DC:C3
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Certificate issuer:       /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial:       043FA43EA3C975880EF5BF7B74C880DDA13B64F4
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
Manifest number:          0340
Signing time:             Fri 13 Jun 2025 08:05:49 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:49 +0000
Manifest next update:     Sat 14 Jun 2025 09:44:49 +0000
Files and hashes:         1: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=)
                          2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: iJpluoF3HoeICJtyNSVX2W7UjOGIKihBFoLXBu2iRVU=)
                          3: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: yJpE8Ho5bYukOYXN/H26r4/3CdM2dJJ59XlsfjgrthE=)
                          4: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=)
                          5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3f:a4:3e:a3:c9:75:88:0e:f5:bf:7b:74:c8:80:dd:a1:3b:64:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
        Validity
            Not Before: Jun 13 08:00:49 2025 GMT
            Not After : Jun 14 09:44:49 2025 GMT
        Subject: CN=A486714ED68BB90918DE6ABDA8CA8446CDA5DCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6f:1a:ce:f4:83:3e:44:12:ea:0e:2a:79:cf:
                    4f:f8:dd:6d:c9:40:9d:cf:95:93:37:53:b4:45:04:
                    e8:ef:7e:1c:f2:ea:98:bb:e3:5e:fe:db:f8:38:30:
                    9d:0b:ea:fc:73:f2:57:66:f5:76:b7:6e:e3:28:b0:
                    98:cb:91:15:5e:79:0c:88:8f:42:93:25:cb:57:e6:
                    72:d5:5d:2c:d7:3e:d9:61:45:f0:1f:20:7e:e3:b0:
                    e4:c9:c3:ed:5a:e0:06:12:43:18:7a:7d:1b:b0:90:
                    81:bf:8b:31:30:f1:5e:48:17:66:61:ba:c1:94:66:
                    dc:93:49:a8:c7:d6:28:3c:01:36:7d:95:01:73:af:
                    ef:ef:54:09:5c:bd:17:23:ba:4d:21:56:8f:09:67:
                    2a:65:d8:a7:63:1f:a0:d5:2f:d1:9b:cf:04:94:1d:
                    4e:96:97:ad:82:dc:1b:12:29:83:c9:7e:52:2d:c7:
                    fd:4d:b7:7f:2c:40:19:ee:21:ec:72:8e:59:8a:b4:
                    58:ba:6e:30:69:2e:fa:ae:bc:66:d3:4c:5d:6d:f8:
                    92:0f:1e:c0:c6:48:e0:e7:d1:e4:74:99:68:59:74:
                    71:01:2e:d9:e0:a4:4a:47:a5:51:51:58:96:ff:9c:
                    45:61:5e:f7:c0:27:f6:28:be:57:10:6f:bb:65:16:
                    e4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:71:4E:D6:8B:B9:09:18:DE:6A:BD:A8:CA:84:46:CD:A5:DC:C3
            X509v3 Authority Key Identifier:
                keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cf:35:60:30:51:95:56:28:b8:84:9b:ba:2c:d1:af:7f:86:
         a9:0d:a0:4c:c3:da:3c:3d:eb:16:fc:22:4c:20:3c:db:47:33:
         8f:d1:b1:82:e1:a6:0b:d0:58:6c:ec:17:0a:76:f4:be:4b:12:
         3a:09:8f:0f:8f:aa:8b:2e:64:b5:76:c0:cb:fb:07:e4:fb:10:
         38:ad:16:e7:c6:74:a7:28:a7:61:a0:f0:eb:cb:78:b7:de:8c:
         65:3d:42:23:16:d2:eb:75:10:c2:96:7f:26:83:aa:8c:bb:7d:
         69:18:5f:af:f3:3c:05:b1:3a:b5:70:29:35:96:7f:c8:ab:be:
         72:46:78:26:7b:dd:b9:60:b3:c0:e0:b8:ad:3c:af:ae:a7:6a:
         10:e9:03:30:2e:86:2c:88:8e:8f:a1:70:68:32:6b:64:e1:00:
         81:f0:2b:7d:d1:15:5b:12:19:aa:e3:41:dc:60:19:01:91:30:
         38:89:5d:f3:b4:52:3e:86:cd:86:4f:48:91:1f:f7:5e:96:a7:
         5e:de:f7:80:93:24:fa:de:b0:06:09:59:99:99:1f:3d:e4:94:
         38:ab:01:fd:c6:70:11:51:a1:5b:c5:8e:57:c3:b4:43:26:d5:
         2d:74:65:75:9c:da:28:f2:eb:c7:3f:28:f4:00:d2:7b:ea:49:
         41:ad:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----