Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File:                     GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier:          MkT5QHnr1WoQIz4aQ/l5dkzTp9bRfbfkbgY0busYUiM=
Subject key identifier:   EB:6A:CC:41:A9:FE:FE:CE:A6:7D:DA:6E:4D:19:D3:D9:21:F3:01:3C
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer:       /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial:       01964F6D737ED057645F00DA3389BE86021B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number:          1489
Signing time:             Sat 19 Apr 2025 19:01:35 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:35 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:35 +0000
Files and hashes:         1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: E8K+I8HBout9biaKp9IlXfm1OZaMc7eNPBbG4ue6VK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:73:7e:d0:57:64:5f:00:da:33:89:be:86:02:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
        Validity
            Not Before: Apr 19 19:01:35 2025 GMT
            Not After : Apr 20 19:01:35 2025 GMT
        Subject: CN=eb6acc41a9fefecea67dda6e4d19d3d921f3013c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:c1:e1:ec:f7:97:53:21:c9:13:e4:f1:b2:
                    6e:02:c3:58:e3:57:b0:49:d1:4e:d4:70:36:0d:c6:
                    cd:ba:40:7d:18:16:3e:01:af:ea:25:8f:07:a1:f4:
                    d7:37:9b:0f:ec:1e:45:82:06:ab:89:a7:90:97:78:
                    4e:01:f7:70:09:39:67:c1:15:21:35:59:ae:de:63:
                    d8:19:e5:d5:45:21:65:c8:15:ea:23:fd:83:91:dd:
                    71:f0:6c:d3:7a:69:88:f8:3c:cb:63:69:e4:7a:9d:
                    bf:fb:69:5d:2d:b9:f7:73:95:28:71:0c:29:88:b4:
                    c6:7a:18:25:ea:3c:57:91:89:d3:0d:cc:01:12:64:
                    12:07:21:0e:d1:5c:11:0a:74:4a:eb:0d:eb:52:c2:
                    b7:47:dd:f8:91:6f:8c:68:b8:f2:8f:92:52:82:c8:
                    2b:9d:fe:09:ec:50:4f:d4:e7:51:ec:9c:56:ef:ef:
                    2a:0e:d7:a4:23:d9:54:b2:d8:a9:56:2d:c9:f3:bf:
                    5a:1b:a2:9c:96:77:00:44:58:cf:ff:c7:ed:73:47:
                    55:f6:69:b9:f4:70:15:b3:25:55:62:dc:1c:10:5b:
                    5e:b9:ce:cc:96:51:b3:e8:ee:fb:a6:a7:6b:ff:c2:
                    61:46:83:96:91:9c:f9:c3:ae:2d:f6:33:09:bf:7a:
                    a8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6A:CC:41:A9:FE:FE:CE:A6:7D:DA:6E:4D:19:D3:D9:21:F3:01:3C
            X509v3 Authority Key Identifier:
                keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:ba:c4:bd:ec:2c:ed:e8:12:29:3f:45:26:20:65:c1:00:c2:
         c5:19:5f:8b:0b:1e:64:8a:9b:c3:41:ee:64:f5:9e:1a:62:17:
         e7:37:20:99:5d:b8:de:e3:b7:36:4a:3f:73:31:bd:d1:8c:0e:
         97:71:bd:bc:1d:15:ae:4a:d2:23:57:7d:ff:6d:cb:ad:38:bc:
         74:d9:ee:02:39:b5:de:50:72:47:0a:07:34:63:9f:ee:10:72:
         1b:70:fb:76:49:6c:39:92:b4:00:1a:21:72:d2:07:3d:da:34:
         01:89:b3:31:0c:ee:63:88:5f:fe:84:16:03:60:72:52:2c:73:
         2d:24:07:b7:b9:4b:cd:7e:99:88:03:30:39:e4:d6:61:0c:ad:
         5d:f4:c2:ae:1b:e8:76:98:37:84:7c:3c:99:24:5d:3d:96:0a:
         01:93:c7:f6:d6:df:13:78:c5:1f:60:af:8d:bb:e3:59:1f:50:
         fc:e5:3c:dd:85:81:bb:6e:4a:18:a3:8a:0f:e5:73:ec:94:3d:
         14:91:d8:de:a2:b5:0f:00:56:e7:79:44:b4:ee:1e:8e:97:fa:
         d6:b5:b7:44:df:86:54:24:36:13:59:89:30:8f:49:26:8c:78:
         ca:49:fa:0b:9f:2e:de:6d:42:5a:5b:19:e6:e6:3e:9e:7b:cd:
         a2:f9:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:21:11 2025 by rpki-client