Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File:                     dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier:          Xg6WP/YnYGnk6PyuiBSoNO3H91IAcjD8uKIC5fVKofc=
Subject key identifier:   7B:5D:B3:5E:F4:45:FE:C5:F0:3E:E5:9A:A8:A5:46:BB:75:B2:3D:C8
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer:       /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial:       01901DEBDA6BF105127D86FCE68EB876EE83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:01:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:54 +0000
Files and hashes:         1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: NjuCNPYefOjd71hbbuQRQ6UQ8pRrnRxUekc61sz7XNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:da:6b:f1:05:12:7d:86:fc:e6:8e:b8:76:ee:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
        Validity
            Not Before: Jun 15 22:01:54 2024 GMT
            Not After : Jun 16 22:01:54 2024 GMT
        Subject: CN=7b5db35ef445fec5f03ee59aa8a546bb75b23dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:55:f4:1a:c5:8c:ff:22:e4:12:d9:94:6e:
                    f4:67:75:10:57:d4:c2:ad:cd:ba:91:c9:6c:31:65:
                    44:f2:6c:04:34:19:97:10:2d:58:9a:00:ba:64:74:
                    8b:53:da:a7:95:7b:bc:cd:03:4a:11:40:a4:d9:eb:
                    e7:b5:97:bb:98:e5:07:4a:48:af:fe:d9:72:93:66:
                    be:b0:aa:b9:b2:8f:63:00:70:48:84:29:d8:79:27:
                    84:ab:51:60:63:c5:e9:bc:6c:50:2d:37:6d:8a:50:
                    e6:3c:53:63:3b:67:0e:ec:f2:af:46:17:fe:38:e1:
                    d9:b5:01:09:bc:d1:67:0a:cf:39:68:71:71:46:46:
                    14:d1:71:b5:e4:20:98:17:d7:45:01:bc:99:5e:00:
                    3a:ae:d7:fc:87:e2:63:ac:ae:68:29:ed:33:56:72:
                    43:4d:79:43:0c:99:ea:fa:30:12:b5:cc:f9:05:a6:
                    b5:94:21:9a:cc:89:12:0d:0a:62:ab:02:3d:c7:0e:
                    2d:aa:9d:a2:b6:b9:31:f4:ab:1f:61:2b:d7:90:d9:
                    e5:5a:08:94:b3:3b:10:59:f5:2c:69:23:dc:07:a9:
                    e4:46:73:98:70:68:92:9f:89:14:a8:cc:dd:b2:f1:
                    7b:86:66:93:4b:af:04:23:5e:c9:78:b2:19:23:22:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5D:B3:5E:F4:45:FE:C5:F0:3E:E5:9A:A8:A5:46:BB:75:B2:3D:C8
            X509v3 Authority Key Identifier:
                keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b5:5e:10:51:93:af:19:fa:e1:35:54:34:9f:18:a9:41:b4:
         9d:06:db:82:dd:d0:87:c0:e7:c4:c3:d1:ea:d3:58:2d:18:17:
         d6:fa:4f:d5:db:89:95:72:6d:dd:00:98:a4:77:45:1c:5a:54:
         d7:b8:e6:1e:35:84:88:a3:21:9a:35:5e:80:f7:03:0d:dd:32:
         d7:69:6b:4c:31:57:d5:ec:22:f4:8d:c5:c5:d7:ab:67:74:c7:
         a5:79:1a:78:0c:93:51:e1:4a:f4:35:36:a7:36:21:88:8b:17:
         1c:9b:e9:fe:d8:b8:d0:7f:de:08:6a:2e:c5:91:e3:02:5d:66:
         1a:90:42:22:fd:ee:5a:da:84:3b:34:db:40:8b:9f:0e:c8:51:
         bc:45:e2:4a:6d:84:83:26:f4:eb:b3:40:b6:b5:b2:18:05:d7:
         29:49:fc:a2:0f:af:7f:4d:af:03:db:7d:e4:b6:0d:99:d3:13:
         2d:22:96:61:19:7b:ba:b9:c7:f0:4f:f7:0d:f4:0e:07:f9:70:
         b3:29:0f:bf:ee:e3:4e:83:b9:38:c6:db:4c:b4:6c:6f:20:26:
         e1:db:7b:ee:72:50:c3:84:8e:e0:c5:a6:2e:ea:40:30:ed:41:
         01:78:ed:48:3a:e5:92:8b:8a:71:a6:a3:f7:9e:71:42:f2:ad:
         fb:87:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----