Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
File:                     miro1LAWhwIbd7h08RDBttv-xlE.mft (raw, json)
Hash identifier:          ZaBAJc0dZ3g0QMqhi0xHvu2ULmebOX3pSUtTER8YBxE=
Subject key identifier:   70:5A:C2:3A:EC:39:88:2F:3F:C1:8A:A9:D0:D0:1B:74:DA:54:F4:E8
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Certificate issuer:       /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial:       0196A1D295DBE69AF0B8A47C6ABCC64580B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
Manifest number:          0C34
Signing time:             Mon 05 May 2025 19:00:54 +0000
Manifest this update:     Mon 05 May 2025 19:00:54 +0000
Manifest next update:     Tue 06 May 2025 19:00:54 +0000
Files and hashes:         1: FEmq_LSCw3qARbc_REHnTueFXv0.roa (hash: w7kLO8zmlwjsil7oxAuK8gh9w7qBy+9fIQiuZhkIXQw=)
                          2: miro1LAWhwIbd7h08RDBttv-xlE.crl (hash: ghzD4CNN1B5jUNRchDmhGPkHKCSmDBl/TR57+EE0nd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:d2:95:db:e6:9a:f0:b8:a4:7c:6a:bc:c6:45:80:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
        Validity
            Not Before: May  5 19:00:54 2025 GMT
            Not After : May  6 19:00:54 2025 GMT
        Subject: CN=705ac23aec39882f3fc18aa9d0d01b74da54f4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:4c:6c:f7:6c:ea:6d:ba:65:d2:b6:cc:98:
                    4e:8b:bd:cc:1e:09:b3:69:64:ca:d5:66:9f:9a:c2:
                    75:d3:c6:5d:30:43:63:32:ad:90:2b:08:32:40:40:
                    80:cf:6e:de:34:b9:5b:e7:22:00:b9:49:2e:a0:a6:
                    b7:c7:c8:16:36:f1:48:7c:09:a6:d8:c0:c8:c7:ae:
                    f1:56:41:38:dd:02:30:a4:42:c2:29:05:4a:24:8d:
                    e1:ef:ac:1f:10:1e:7d:5c:cc:70:5f:2f:28:af:61:
                    20:f1:63:8a:0d:bf:3f:2a:0f:a7:83:d0:f6:f9:1b:
                    65:fd:6e:10:c2:da:55:72:41:86:66:73:e0:45:95:
                    d0:f4:c7:3c:c4:45:9c:e7:67:f6:52:73:96:d4:96:
                    47:84:e7:0c:24:87:6b:80:ff:e1:6d:65:08:05:5f:
                    be:c4:ff:31:11:b7:36:72:11:2c:9e:d3:35:50:1e:
                    a5:78:5e:0b:11:ce:b8:71:42:96:7f:09:05:e3:a9:
                    58:6e:59:0a:44:21:24:1d:02:54:e7:79:8c:bf:df:
                    9c:14:ea:0d:b5:3b:90:9d:53:88:ea:10:c8:dd:c2:
                    69:e6:a0:03:4d:7e:6d:3e:2c:97:a6:0c:d0:d8:3e:
                    d6:16:a3:b7:bc:42:d7:08:97:f8:fe:ac:b6:3b:7c:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5A:C2:3A:EC:39:88:2F:3F:C1:8A:A9:D0:D0:1B:74:DA:54:F4:E8
            X509v3 Authority Key Identifier:
                keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:0a:08:91:3a:f2:89:38:5a:9c:5e:41:67:8a:df:66:c3:
         38:0c:f7:62:7b:ea:67:c3:6e:87:47:da:bb:0b:38:15:60:42:
         75:07:2d:37:c9:be:bf:d6:90:e3:9a:29:e3:d4:64:30:4e:65:
         d5:f9:28:0d:74:41:97:90:dc:98:2a:73:13:93:8a:aa:61:3b:
         ea:c2:4b:56:3f:67:99:47:24:0a:f6:41:1b:a0:2b:62:06:15:
         f5:53:d9:95:36:c9:70:ba:01:64:7a:c6:b5:53:62:ed:83:ed:
         83:80:61:84:7a:a4:7c:96:8e:32:19:e9:6d:dd:89:84:bb:6e:
         a7:2b:69:dd:81:c1:fb:74:f6:a6:6e:9e:b3:09:b7:3b:0d:90:
         07:04:6f:13:40:6e:db:12:8e:fd:96:60:4d:1e:be:41:1c:eb:
         70:4c:e3:b1:bc:7f:3b:4e:3d:64:9b:89:c5:3b:77:b7:af:1d:
         e5:16:2c:fa:8e:12:b4:ed:45:fe:b2:88:46:62:cd:45:aa:ba:
         1b:a7:34:1a:bf:bc:6f:0c:34:51:15:ac:f6:4c:bf:a5:12:83:
         94:67:3b:2d:83:3a:ba:f7:c4:b4:15:0f:b6:55:ac:08:a5:09:
         ed:54:a4:97:01:02:d7:70:d3:b6:9c:56:17:26:02:4e:49:7e:
         7c:15:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:11:27 2025 by rpki-client