Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
File:                     miro1LAWhwIbd7h08RDBttv-xlE.mft (raw, json)
Hash identifier:          ieELdVrA7ygrSUbuQLbuBbmACGUJgp/xtact/OkDaHg=
Subject key identifier:   2D:77:F7:B7:91:BF:57:A0:37:8D:94:C4:F0:AA:BA:6A:01:F2:2C:DB
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Certificate issuer:       /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial:       0196B8FEA51E7D43669F6DC14FEAD8041764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
Manifest number:          0C40
Signing time:             Sat 10 May 2025 07:00:18 +0000
Manifest this update:     Sat 10 May 2025 07:00:18 +0000
Manifest next update:     Sun 11 May 2025 07:00:18 +0000
Files and hashes:         1: FEmq_LSCw3qARbc_REHnTueFXv0.roa (hash: w7kLO8zmlwjsil7oxAuK8gh9w7qBy+9fIQiuZhkIXQw=)
                          2: miro1LAWhwIbd7h08RDBttv-xlE.crl (hash: tgL8tdI0OjgJpNGOkDGO5wtZ19LyHaCHC1DxoisnfKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:fe:a5:1e:7d:43:66:9f:6d:c1:4f:ea:d8:04:17:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
        Validity
            Not Before: May 10 07:00:18 2025 GMT
            Not After : May 11 07:00:18 2025 GMT
        Subject: CN=2d77f7b791bf57a0378d94c4f0aaba6a01f22cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:0c:75:bc:b4:c8:d0:54:44:6f:6a:90:a9:
                    1a:46:05:3a:e1:4c:54:eb:f7:ae:de:4b:78:68:6a:
                    df:83:aa:8c:e5:ce:71:28:14:7e:fc:cd:1a:d8:86:
                    92:5f:6c:d8:54:77:65:8e:67:0c:53:3d:6e:1c:a2:
                    8b:3d:a3:8a:c8:d5:f2:38:4c:24:aa:52:c6:1b:b9:
                    80:83:6f:53:03:42:5b:ff:6f:3c:cc:a7:0d:0d:02:
                    cb:c3:7a:ca:2e:ef:a0:8b:e9:c5:41:98:53:d0:d3:
                    d5:ad:8c:cd:b2:66:8a:70:41:fe:63:80:73:0f:af:
                    3f:55:c1:d4:5b:e7:04:04:dc:b5:de:90:62:6f:dc:
                    9d:8b:00:1d:6b:7a:9b:de:3e:ca:24:ba:fa:87:0a:
                    b3:9d:c5:d6:66:db:4f:77:af:ee:6c:de:d1:c9:c6:
                    6c:4b:3d:b8:f5:f6:3c:4f:89:f4:c0:fa:20:a9:b7:
                    98:09:87:7a:84:20:8d:5c:c0:f9:4d:c5:a8:c6:cf:
                    38:7f:e2:43:47:f9:b9:bf:e0:f8:47:68:f9:85:18:
                    4a:4e:f0:b5:53:46:c7:8f:cc:38:bc:18:7e:d1:99:
                    a0:16:61:ed:df:93:5c:2c:b4:0a:42:53:28:0f:f3:
                    45:d4:5e:84:31:56:2c:04:85:5a:30:cd:24:8f:bb:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:F7:B7:91:BF:57:A0:37:8D:94:C4:F0:AA:BA:6A:01:F2:2C:DB
            X509v3 Authority Key Identifier:
                keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:42:ba:46:ba:39:a9:7e:b8:3f:5e:e6:15:a8:ac:93:b2:
         aa:ab:52:da:81:6c:93:43:81:27:91:58:da:11:ac:e8:fe:8a:
         c9:55:0e:cb:ab:93:65:04:e8:9e:dc:c3:a6:40:8f:f9:12:32:
         f4:51:3a:53:4f:75:9d:7b:03:93:10:f2:38:62:b1:f2:7f:0d:
         b5:a7:e9:9e:15:49:2d:0f:6c:57:ff:ea:c9:05:ac:92:52:1a:
         aa:9b:43:5e:d0:7d:99:dd:40:1b:2e:03:c8:ee:60:60:76:a5:
         ac:99:3b:6c:4d:b8:c4:64:b4:7b:fa:38:d2:1a:98:b5:72:a1:
         14:82:76:56:d5:4d:72:25:a6:7b:a8:f8:1c:91:03:bc:55:ed:
         c6:b5:97:17:d7:84:bd:b1:d4:2f:c5:e8:96:88:30:53:d7:8b:
         56:b9:8f:9f:ab:5e:cc:a6:9c:00:39:d6:65:92:20:3e:73:13:
         77:b3:34:81:26:74:3d:2d:97:d0:6e:77:56:00:af:6c:7c:19:
         ba:47:4b:2d:7f:9b:41:49:b0:d3:35:8a:4a:96:28:0c:51:43:
         ff:9a:4c:5a:ce:8a:a7:cb:95:c1:93:68:0c:c9:be:dd:ca:71:
         78:3f:2b:c5:23:4f:e9:11:0e:ae:a2:53:94:7d:52:3b:87:ce:
         af:9a:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:47:13 2025 by rpki-client