Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          j+mXLu2QKYYvBp8I0FNRQRHR2cKcul6Mtq9Ugjx8A1Q=
Subject key identifier:   9E:AF:07:52:90:92:5C:45:C3:6A:B3:A7:1A:C0:01:64:88:ED:8E:09
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       66B5DA88C931E54950FCA8074BF2E049414E8800
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          01FB
Signing time:             Fri 16 May 2025 16:39:34 +0000
Manifest this update:     Fri 16 May 2025 16:34:34 +0000
Manifest next update:     Sat 17 May 2025 17:35:34 +0000
Files and hashes:         1: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: zxhwJ8BRHSfhv2IzHdjrBBfqb2fcq5amMTROJBgH6K8=)
                          2: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=)
                          3: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=)
                          4: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=)
                          5: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: dkDlXn7ZTKwdhEvN1AyaOINvq0aj0JnSzR14swqFK7s=)
                          6: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: 3O22La+gxI6Nq4sXOnclZNdvgqhvp4X09oshLD7YzPQ=)
                          7: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=)
                          8: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=)
                          9: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=)
                          10: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=)
                          11: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=)
                          12: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=)
                          13: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=)
                          14: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=)
                          15: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=)
                          16: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=)
                          17: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=)
                          18: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=)
                          19: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b5:da:88:c9:31:e5:49:50:fc:a8:07:4b:f2:e0:49:41:4e:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: May 16 16:34:34 2025 GMT
            Not After : May 17 17:35:34 2025 GMT
        Subject: CN=9EAF075290925C45C36AB3A71AC0016488ED8E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:2b:ec:41:77:2d:d3:43:0b:56:25:e9:c7:
                    9f:9b:2b:b9:50:a7:14:1d:0b:65:ee:fb:77:74:5c:
                    33:c5:d7:63:83:dc:54:2b:ac:2f:c0:39:85:97:8d:
                    57:2b:35:91:fc:71:ea:9e:d9:37:c0:56:3c:3c:ee:
                    46:b5:d2:63:70:a4:23:0c:c2:40:9c:82:08:fe:cb:
                    f1:8e:54:a3:23:1f:3f:64:c2:29:55:07:7a:3f:e3:
                    5a:a0:86:d0:78:ad:ce:8f:44:48:da:fe:4e:0d:06:
                    d6:d0:4d:c8:90:3f:c1:55:a7:4e:45:c8:8e:f4:ca:
                    18:dc:1a:6d:c1:1f:8f:9a:77:78:82:3c:a7:9a:be:
                    28:03:c3:3a:fc:a6:65:f8:c9:03:a1:2a:25:6f:0e:
                    ac:39:f7:ff:83:db:fa:26:76:a2:4f:e2:59:b3:e3:
                    ee:d6:b6:88:5f:29:3f:a0:3e:99:88:fc:f2:0b:55:
                    22:8d:c4:04:ba:82:96:a4:42:3a:31:7d:74:26:48:
                    40:d2:15:96:a2:f6:95:a5:ac:a0:07:fd:b0:fa:3a:
                    dd:42:53:4f:2e:13:b7:90:f4:94:65:54:cc:f9:97:
                    bb:fc:d4:55:ce:fa:82:95:25:ff:12:08:6d:16:b0:
                    c5:dc:db:65:c2:86:8e:83:cb:cd:e3:22:96:ec:5c:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AF:07:52:90:92:5C:45:C3:6A:B3:A7:1A:C0:01:64:88:ED:8E:09
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:49:1e:0f:d5:4e:8e:50:30:be:51:cd:e8:27:e3:cd:ad:36:
         2f:57:d8:92:55:23:c0:5f:b3:a4:b5:fc:aa:92:f4:08:a6:24:
         3d:13:68:72:57:d9:5f:95:c0:cb:8b:12:a0:dc:3d:a5:07:e1:
         59:52:98:ef:1a:71:48:ee:d2:da:63:78:6b:cb:3f:93:d4:9b:
         9b:c4:e6:d4:78:78:54:2a:20:73:45:f8:8a:47:63:98:8a:0a:
         d7:51:8d:2e:0d:54:d3:cb:a3:02:ff:b7:94:a8:5a:83:22:ba:
         b1:60:68:89:72:df:4b:87:44:3a:22:c1:c1:ac:31:de:69:75:
         13:aa:0f:3a:08:83:3f:e1:a8:b6:11:03:fe:84:90:3a:07:81:
         d5:8e:ed:f5:70:d9:ef:1e:f2:26:09:f1:57:ca:0a:75:25:7d:
         55:a6:5a:ca:1b:7b:30:7b:0b:aa:d7:b6:b3:fd:77:35:bc:8a:
         47:23:24:d5:51:ad:ab:29:c3:af:16:07:ec:a7:8e:83:26:8d:
         15:5c:a7:02:f7:03:45:fe:72:96:bd:86:4a:b4:49:c5:f9:e4:
         92:8f:53:16:49:bd:04:c5:5d:7b:be:a1:d7:a4:6b:e8:d0:91:
         08:1f:40:15:65:19:cc:c0:27:12:d6:8a:e6:8f:fa:94:51:59:
         9f:0e:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:08 2025 by rpki-client