Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
File:                     miro1LAWhwIbd7h08RDBttv-xlE.mft (raw, json)
Hash identifier:          CrZ2wPT0s/G9nxLn4sgWER0KEbCsXKOfBnmPDZlB8p4=
Subject key identifier:   C4:BA:7B:F6:82:53:4A:BA:EE:C9:80:23:AE:39:6C:A6:C6:35:DF:DD
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Certificate issuer:       /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial:       01951210BDB4BDA973C59D3CCD10231A1E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
Manifest number:          0B65
Signing time:             Mon 17 Feb 2025 04:00:41 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:41 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:41 +0000
Files and hashes:         1: FEmq_LSCw3qARbc_REHnTueFXv0.roa (hash: w7kLO8zmlwjsil7oxAuK8gh9w7qBy+9fIQiuZhkIXQw=)
                          2: miro1LAWhwIbd7h08RDBttv-xlE.crl (hash: OlqRWg/FIsXD5ERDxod8CIY31URcn6FjJDWaiT7bYJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:bd:b4:bd:a9:73:c5:9d:3c:cd:10:23:1a:1e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
        Validity
            Not Before: Feb 17 04:00:41 2025 GMT
            Not After : Feb 18 04:00:41 2025 GMT
        Subject: CN=c4ba7bf682534abaeec98023ae396ca6c635dfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:ee:0d:45:a4:24:ae:44:66:ed:1a:5b:10:
                    94:79:e9:b0:40:79:31:40:52:fd:b9:a1:1f:3b:3a:
                    67:9c:46:8d:64:a9:39:df:95:dd:d8:6b:c5:cc:04:
                    40:5e:89:89:06:28:bc:2f:cf:a0:70:a7:df:bd:a5:
                    c6:05:dc:cb:ed:ce:64:85:35:65:9e:f1:05:32:40:
                    fe:73:30:e5:8b:2c:97:cf:6a:80:ba:6e:67:05:a3:
                    fa:cd:ce:a0:12:47:2e:b5:d5:3a:b5:34:de:3f:5f:
                    85:60:c7:b4:45:f9:0d:a4:f4:cf:a8:36:21:41:85:
                    17:7c:b7:8e:1d:74:39:22:7a:51:ec:86:85:35:f6:
                    eb:07:78:67:f9:8a:92:68:1d:85:2b:57:7a:f6:93:
                    dd:37:88:b0:11:c8:8f:ac:0f:8a:bb:d8:71:3c:d1:
                    99:7c:f9:91:67:cf:60:39:38:46:f4:a1:c3:27:20:
                    12:2c:2e:49:05:67:ba:fc:0b:4e:ae:4b:e3:db:0f:
                    ac:1c:5c:05:48:c0:30:32:1b:d4:5c:aa:27:f5:9c:
                    5a:af:74:01:8e:1a:ad:cf:61:fe:d9:a7:92:52:9e:
                    c5:a8:8b:6c:c4:31:3c:33:f8:7e:00:f5:b5:d0:42:
                    ae:18:ea:38:64:37:11:2f:4f:2c:0b:59:3f:a1:41:
                    c1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BA:7B:F6:82:53:4A:BA:EE:C9:80:23:AE:39:6C:A6:C6:35:DF:DD
            X509v3 Authority Key Identifier:
                keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0c:a3:8d:ec:71:71:07:1f:bd:8d:85:01:39:72:1f:66:c7:
         67:b7:37:5a:d4:30:d9:69:e4:9c:fb:26:18:ba:f5:2b:6d:9c:
         25:f5:0b:8b:4d:10:6b:27:4a:19:55:69:d5:f9:b0:31:d9:b3:
         07:05:07:0f:fd:3c:00:65:b8:d8:1f:cd:ea:9e:42:61:d3:4a:
         b8:be:98:32:a3:fa:7c:1d:66:9f:f1:5e:14:f1:2e:95:69:b6:
         44:75:be:8c:2e:80:d2:4e:fc:7f:7c:aa:7c:07:d3:0c:1b:85:
         e7:0c:7b:ea:90:7d:5f:29:01:5b:c1:a1:71:65:35:4b:e3:f3:
         8d:a2:f0:ef:71:78:49:09:99:f3:2b:48:69:1d:be:c8:2f:da:
         82:0d:a7:0a:59:69:4c:35:5b:13:24:cd:e4:78:ab:b3:3d:35:
         4c:d0:7f:ea:3b:b1:b4:3d:82:ff:51:26:13:d2:de:4d:52:16:
         06:a6:71:52:06:85:65:35:7d:5d:fb:13:02:a3:34:3e:56:ff:
         65:bc:20:54:d2:50:1e:f5:6d:ef:ea:65:b6:11:ca:f0:92:f5:
         82:e0:29:73:4f:9d:ed:97:54:1d:66:23:a7:27:57:5f:32:68:
         86:37:9c:15:3b:ab:4e:34:65:f2:2e:9d:98:d7:eb:7d:71:31:
         ec:de:e7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:09 2025 by rpki-client