Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
File:                     WpeXnbcm_j5pPbktT6GP10G-dpk.mft (raw, json)
Hash identifier:          596dtQ+AqIx9h+RUkZgPmNKYkXOMRDqAl0CLFMauCcE=
Subject key identifier:   44:F7:22:3D:E4:42:5F:EB:6D:D2:84:47:C0:F2:A9:90:3D:32:91:BC
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Certificate issuer:       /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial:       018F87492238FF2ED7A41F93F26C87358337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
Manifest number:          0563
Signing time:             Fri 17 May 2024 16:01:07 +0000
Manifest this update:     Fri 17 May 2024 16:01:07 +0000
Manifest next update:     Sat 18 May 2024 16:01:07 +0000
Files and hashes:         1: WpeXnbcm_j5pPbktT6GP10G-dpk.crl (hash: 322t3Qe/Nw40yJRuPbI6n4Sm4VFaup76frf2VA3qCC0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:22:38:ff:2e:d7:a4:1f:93:f2:6c:87:35:83:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
        Validity
            Not Before: May 17 16:01:07 2024 GMT
            Not After : May 18 16:01:07 2024 GMT
        Subject: CN=44f7223de4425feb6dd28447c0f2a9903d3291bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:31:c2:af:5a:ee:65:e9:a4:8c:53:30:1c:
                    e5:56:db:f1:8c:33:91:d0:07:f6:e0:02:f4:68:f9:
                    2e:6e:eb:9d:9a:07:7a:3b:51:97:7f:81:d8:0d:a5:
                    7d:ed:9a:23:69:51:19:b0:59:e4:59:14:a5:e5:5e:
                    fb:06:18:37:d6:58:9a:3a:44:af:45:bd:6d:47:d4:
                    33:8b:40:42:1e:46:58:08:7c:4c:d1:44:ec:9c:8d:
                    eb:df:6e:9c:0a:e7:ad:0f:d8:b6:bb:10:3f:24:87:
                    a3:9a:c8:ae:7a:9f:79:4b:0a:e7:63:cc:54:8e:49:
                    a8:96:f2:08:08:69:c3:d3:64:0d:cf:c2:b5:c5:40:
                    ec:ac:e7:52:1c:6d:b5:00:f2:93:e9:f4:99:2e:ca:
                    0a:39:a2:f7:0b:48:d8:a5:ca:b1:6b:c3:db:df:e7:
                    46:7a:d7:e4:b9:a6:5f:f3:e0:48:42:9c:27:de:b7:
                    b3:dc:7f:8a:a2:d5:00:a8:66:fe:49:82:16:5a:0a:
                    cf:10:5f:90:9b:99:45:29:90:ec:b0:ab:56:56:0f:
                    af:4a:ba:fe:63:9c:38:53:1f:d7:31:1c:2c:55:9c:
                    c8:c0:8a:66:10:b4:2f:e3:aa:93:a4:51:98:ab:67:
                    92:2f:05:2e:be:0d:08:14:66:1e:e9:67:88:a6:77:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F7:22:3D:E4:42:5F:EB:6D:D2:84:47:C0:F2:A9:90:3D:32:91:BC
            X509v3 Authority Key Identifier:
                keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:41:a5:ec:45:cb:b3:d0:00:8e:5a:7c:8b:83:2d:77:04:bf:
         74:86:fa:33:ed:3e:04:50:af:44:77:4c:c5:55:ab:1c:4f:a2:
         6d:7b:76:a9:51:59:94:77:94:4c:bc:e0:76:68:4c:7d:27:ae:
         0b:a3:77:41:08:12:4e:9a:a4:51:5c:be:04:0b:5b:30:1d:33:
         61:f6:a5:56:f0:ed:ac:57:55:c5:09:3e:0d:b0:26:05:4a:74:
         ed:f1:53:27:76:fa:5c:0d:e0:79:90:16:43:38:35:a4:60:9b:
         88:eb:30:b2:63:fc:52:db:f8:63:d7:e9:13:06:d1:6a:f9:9f:
         68:b9:aa:2f:16:8b:66:7f:25:d3:74:03:1f:e8:21:b8:f3:a1:
         43:6f:30:43:28:e8:13:b0:d6:f5:1c:1f:22:19:2a:6e:b2:90:
         51:b5:77:30:81:c7:4b:af:f6:87:3c:2d:7b:5c:06:7e:de:04:
         5d:75:6d:55:67:c6:e2:56:b1:01:50:e6:00:72:b1:83:59:71:
         5a:b4:72:ba:7e:6b:77:c6:95:b6:2c:b7:15:6e:2d:74:10:cf:
         17:82:de:42:a4:ef:ee:9e:e0:02:be:8c:1f:37:cf:c9:b2:87:
         21:69:2b:02:f1:e7:ef:01:06:d9:8e:c6:97:90:39:6e:16:e9:
         f7:a0:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----