Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
File:                     EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json)
Hash identifier:          +B/To8+Vi+fKBn0Gxd+NZ9mXfn34JwHnrF6gngoW/EI=
Subject key identifier:   B8:B8:6F:B5:07:1E:3D:60:DD:5A:40:6F:E8:AE:70:13:C3:C4:8D:C0
Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Certificate issuer:       /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Certificate serial:       3D46B82115699EAC9F21E18E37F656357CB37AD1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
Manifest number:          02BB
Signing time:             Fri 16 May 2025 16:39:34 +0000
Manifest this update:     Fri 16 May 2025 16:34:34 +0000
Manifest next update:     Sat 17 May 2025 17:53:34 +0000
Files and hashes:         1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: zuDbNZyv767Osf8qslzISWKlh0Hrae8DUUrjcnDNdwE=)
                          2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:46:b8:21:15:69:9e:ac:9f:21:e1:8e:37:f6:56:35:7c:b3:7a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
        Validity
            Not Before: May 16 16:34:34 2025 GMT
            Not After : May 17 17:53:34 2025 GMT
        Subject: CN=B8B86FB5071E3D60DD5A406FE8AE7013C3C48DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:de:b3:ff:78:9b:29:1e:e7:b4:0a:a2:56:
                    16:76:34:0d:7e:ba:d2:0f:5f:c0:ad:ee:34:f1:8b:
                    80:af:60:f5:2d:e5:c0:70:12:e5:72:9a:a6:7c:f6:
                    22:57:46:da:10:68:0e:da:9a:67:94:73:8b:06:be:
                    98:fc:44:49:d7:90:56:de:44:00:b3:a8:31:09:cc:
                    08:7c:9c:4b:88:a2:4e:69:ba:54:a0:36:f2:b1:3c:
                    75:72:f8:f3:0b:03:92:13:15:e3:04:e6:48:9f:23:
                    d5:9d:ee:15:62:7c:eb:c0:e2:54:ed:1b:ab:7c:8a:
                    52:8c:1d:61:2e:50:61:a7:57:70:c3:2c:d3:6c:b2:
                    2a:60:08:01:4b:c3:f0:d9:6a:40:6b:5a:c4:f8:65:
                    ee:22:41:26:a5:24:f0:e2:a3:1d:76:8f:ee:6f:d1:
                    45:04:30:41:d8:11:ea:7a:ea:1b:46:e1:5f:51:1d:
                    0f:13:e5:c2:65:52:14:e0:f1:91:47:0c:9a:f6:a8:
                    84:13:3f:5a:12:33:48:c6:56:51:ed:63:14:ca:9a:
                    98:e7:5f:04:9b:ee:63:b9:0e:fe:f8:b9:d4:26:3c:
                    f1:57:1b:0c:cb:9e:82:74:44:20:d4:44:49:c4:29:
                    2b:53:b6:02:7f:0d:5f:86:fa:9b:93:c3:64:cf:3b:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B8:6F:B5:07:1E:3D:60:DD:5A:40:6F:E8:AE:70:13:C3:C4:8D:C0
            X509v3 Authority Key Identifier:
                keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:78:56:47:de:9f:00:99:ae:f5:86:b9:37:75:a9:f2:ff:
         b3:75:8d:dd:3c:8a:58:02:8b:ae:ab:e0:e7:48:77:93:0c:0e:
         38:38:e0:81:4d:88:57:d2:50:a6:5d:8a:35:39:86:a6:01:b8:
         6d:1d:44:be:49:72:f6:d9:3b:0b:c8:dd:e7:a1:fa:07:94:7f:
         07:96:42:c9:3a:d5:e3:6a:44:f3:3d:bf:68:a9:10:82:aa:cf:
         7f:f9:25:e6:d8:c5:49:90:4d:22:0f:0b:ca:85:e1:28:9e:dc:
         4a:b1:74:9e:03:51:32:3e:96:ad:87:08:25:c3:ee:08:86:55:
         54:56:74:80:97:bd:81:57:bb:72:fe:1c:6a:c9:43:c0:79:83:
         76:7a:76:ac:46:a4:03:b1:46:ee:a3:57:2b:1f:b3:ef:33:58:
         b3:18:05:bf:bc:89:4e:ec:e0:75:9e:94:9c:19:1e:6d:04:cf:
         a6:20:c6:c9:50:76:e0:50:d5:bf:17:7d:81:42:46:0c:e5:eb:
         f1:bf:3d:9a:c4:78:25:34:32:0b:a9:1d:ed:a5:01:56:77:34:
         46:92:47:a0:41:9f:c1:1f:ae:30:9a:c2:1a:03:17:dd:1f:e4:
         83:73:09:59:37:c8:06:4b:48:54:6d:e9:08:cf:d2:44:bd:84:
         29:da:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:58:36 2025 by rpki-client