Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
File:                     miro1LAWhwIbd7h08RDBttv-xlE.mft (raw, json)
Hash identifier:          VV/mj2FWBo7PWnfJzRnOQAvBH8FXiqLVjsh1gNOmDBE=
Subject key identifier:   07:AA:1C:F3:55:49:53:F8:F1:5E:1D:68:C4:2F:BD:66:73:78:C5:1D
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Certificate issuer:       /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial:       01901E8F974ABA30A189120A8947CF64176B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
Manifest number:          08D4
Signing time:             Sun 16 Jun 2024 01:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:45 +0000
Files and hashes:         1: TDR1dJ6OmqjSiWW6k7S46v8ENIE.roa (hash: hjuM21TosbfZb2+BiMZekgy7N1qjyb0gDwXqsbnjDpY=)
                          2: miro1LAWhwIbd7h08RDBttv-xlE.crl (hash: DinbV+IwblJSRlGQ9CZZF+ns2QxlRaki9yTXoGeN9M4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:97:4a:ba:30:a1:89:12:0a:89:47:cf:64:17:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
        Validity
            Not Before: Jun 16 01:00:45 2024 GMT
            Not After : Jun 17 01:00:45 2024 GMT
        Subject: CN=07aa1cf3554953f8f15e1d68c42fbd667378c51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:56:16:9d:95:92:29:12:88:3c:ec:ee:83:
                    ad:69:81:8f:e2:81:e0:06:a7:aa:eb:ad:a8:ba:b5:
                    0e:70:09:3e:4e:ff:1f:36:22:37:ec:62:3d:80:79:
                    1e:b5:cd:a0:c3:a4:bc:00:dc:70:e5:c7:b5:dd:5e:
                    c3:d8:ee:c8:3f:a7:a9:e3:35:63:ba:cf:d0:42:d8:
                    b0:2b:ad:12:c2:f9:10:54:8d:75:38:2e:22:ec:8e:
                    d5:4a:c9:65:63:c2:c4:a6:81:34:f2:41:da:ee:26:
                    20:8b:20:be:67:59:17:b0:f6:99:39:41:31:b3:32:
                    a5:66:d0:0c:b9:be:2d:ad:7f:ab:ec:47:86:90:d7:
                    1a:da:84:6c:56:0d:a9:5a:45:28:25:51:a0:cc:50:
                    b4:5a:39:50:13:8f:f7:00:51:9d:62:f4:38:94:ca:
                    ae:6e:54:bc:cc:5d:7f:f5:a5:5d:b2:04:a1:30:06:
                    8e:c1:cb:f5:9d:de:f7:a3:dc:19:03:c1:1d:97:74:
                    b6:81:7c:92:8b:79:7e:ec:99:fd:bf:4b:f9:4b:94:
                    ae:25:7a:f2:77:00:dd:07:e1:31:97:eb:76:7e:3d:
                    22:35:ad:1f:ee:54:ce:2f:39:b5:4d:84:d6:3b:44:
                    e7:8f:cd:69:b6:f9:79:25:0e:ab:ac:c0:de:8f:88:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:1C:F3:55:49:53:F8:F1:5E:1D:68:C4:2F:BD:66:73:78:C5:1D
            X509v3 Authority Key Identifier:
                keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:3b:a9:af:68:6b:ed:a2:85:be:42:79:de:4a:9a:f9:7b:
         eb:90:f2:71:e8:94:d5:ea:f5:4d:dc:c1:70:48:c4:07:8f:2e:
         16:27:99:0b:6c:4d:fb:68:6f:fa:99:7c:dd:b6:cf:13:e0:8d:
         6a:2c:71:cc:71:21:10:fd:70:eb:d9:f0:53:49:45:03:40:0c:
         7c:bf:76:18:0e:f5:89:8c:31:cd:2b:96:b9:80:b0:ec:5b:e3:
         ab:0a:7d:c2:4f:7b:bf:99:a3:f7:51:ad:42:0c:bb:fe:e7:94:
         cc:98:75:47:42:d7:6f:98:21:cd:96:f4:25:7c:52:83:e6:dc:
         a8:6d:35:11:34:d2:53:12:be:74:0d:6a:6c:39:02:2a:86:95:
         3e:72:d4:52:01:d8:00:7d:7b:dc:4d:35:72:9a:35:4e:f5:4e:
         eb:4c:d3:29:ec:f6:29:d0:39:59:42:c5:3b:36:90:d3:5e:4b:
         bd:f8:74:43:6b:50:18:62:05:01:00:73:f2:93:c6:cd:e3:da:
         db:50:38:46:4a:6e:90:cf:d7:cf:b9:23:42:63:a6:b3:29:b6:
         2f:11:9f:1a:b7:11:1b:70:03:e1:1e:36:d4:20:75:32:6b:99:
         14:62:01:c9:57:21:c5:ca:74:f7:bb:b3:e6:79:cd:be:02:3b:
         f1:56:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:29:27 2024 by rpki-client on console-ams.rpki-client.org