Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File:                     dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier:          VHrAwNFr2THR2EQ0yi+ZaS9mOAQvf5qWTy6PnaRpqhs=
Subject key identifier:   BA:42:D3:25:C1:39:97:AF:8E:96:D8:53:D3:39:C2:AA:A1:C3:62:18
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer:       /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial:       018F874982D870DFE9BD40FCF807D988AA59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number:          0996
Signing time:             Fri 17 May 2024 16:01:32 +0000
Manifest this update:     Fri 17 May 2024 16:01:32 +0000
Manifest next update:     Sat 18 May 2024 16:01:32 +0000
Files and hashes:         1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: ljaiLK2vaIGFUGKB8lFrD61XUzmgxSBlqt6hRAH2wnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:82:d8:70:df:e9:bd:40:fc:f8:07:d9:88:aa:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
        Validity
            Not Before: May 17 16:01:32 2024 GMT
            Not After : May 18 16:01:32 2024 GMT
        Subject: CN=ba42d325c13997af8e96d853d339c2aaa1c36218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6d:8f:5f:b4:eb:59:b0:04:4c:5a:24:08:32:
                    16:e7:e9:03:51:8e:84:18:d8:3f:4e:24:3e:af:3e:
                    0e:bb:9e:b8:da:9d:2c:00:14:d1:aa:0c:5a:1c:91:
                    ec:f4:f5:de:37:56:0a:43:8f:88:ea:3a:f3:fb:ae:
                    0c:c2:a5:f2:2a:a8:06:f3:26:9a:fa:5b:c0:c6:f7:
                    b6:24:8a:6b:af:8d:d0:d4:7d:12:d3:6c:70:70:6d:
                    8e:d2:cd:67:c9:0f:ad:09:a6:83:e0:ef:a3:39:1c:
                    e5:77:00:36:45:f8:ca:9a:29:0f:80:45:d9:3a:dd:
                    4b:e6:a1:89:e6:de:77:06:e5:62:48:cf:cd:07:91:
                    c5:8e:25:f0:08:f4:1b:e8:89:5c:df:10:1e:17:e4:
                    2c:3a:2a:f5:19:31:94:8f:db:74:01:e0:64:a0:f3:
                    4b:8b:eb:6a:45:fe:5e:44:1c:2f:7f:3c:11:f1:51:
                    23:31:cf:92:67:40:20:1d:11:27:c4:8b:93:7b:87:
                    62:07:b1:3e:fd:4e:0f:fa:ed:04:bc:da:02:f6:88:
                    96:cd:e5:48:65:90:29:b5:2c:86:82:a7:92:81:b1:
                    d3:1d:ed:df:a9:76:7a:85:aa:56:45:60:ff:7d:fd:
                    db:05:9a:7b:8d:e8:90:ee:ab:9b:a3:5e:85:e9:5b:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:42:D3:25:C1:39:97:AF:8E:96:D8:53:D3:39:C2:AA:A1:C3:62:18
            X509v3 Authority Key Identifier:
                keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:25:58:3f:65:06:ae:7c:1f:37:a9:25:56:ca:10:d0:9c:b6:
         1e:4d:6e:20:71:69:fc:99:8a:35:6e:1b:5d:9d:e1:06:98:ac:
         0d:45:26:43:e1:71:bd:b7:02:45:3b:0f:1a:cd:52:46:8b:09:
         c0:97:71:c1:77:a0:4f:d2:4b:b1:31:73:fe:62:5f:cd:ca:cf:
         35:83:00:c1:09:78:0c:b9:99:65:b5:9c:18:69:6c:8e:7e:58:
         31:ba:0e:68:46:f2:57:f3:e8:82:ff:2c:b7:9d:35:f0:db:ba:
         f7:8e:59:0f:f5:03:ae:7d:c9:46:38:da:f7:54:6d:d8:6d:80:
         e7:b9:51:fd:a8:3a:98:dd:c3:b1:af:48:46:2b:35:e9:d9:ba:
         16:57:17:ba:e6:87:43:53:fd:b9:45:1e:37:90:a8:56:d9:2f:
         1a:41:65:36:ff:56:d5:63:7f:8b:c3:67:26:7f:fd:6f:97:48:
         7f:ef:8d:ff:7c:a2:bf:3e:73:b5:d5:bd:d6:07:2a:3c:ff:3f:
         bd:e8:07:a1:1f:40:c5:27:64:f6:d4:e8:46:45:32:3c:b2:8c:
         fc:c1:f3:7f:43:84:43:00:63:d0:e8:05:33:fa:89:b3:27:99:
         13:66:49:68:76:4e:88:1a:d9:ce:8f:94:2f:43:5e:78:b7:15:
         b6:bc:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----