Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.mft
File:                     HzESD-Ild161MVLUkg6cVz_ytl4.mft (raw, json)
Hash identifier:          9iTFqwzzPOm3SW3e0mYzDmdcGzLncri8VsmNuWrEs5U=
Subject key identifier:   A6:81:0C:DF:BB:F7:7D:59:3B:F7:C8:DF:E7:0B:32:42:EE:4B:D9:61
Authority key identifier: 1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
Certificate issuer:       /CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Certificate serial:       0195D6675F5252C262323F91F331106F0A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.mft
Manifest number:          0548
Signing time:             Thu 27 Mar 2025 07:00:53 +0000
Manifest this update:     Thu 27 Mar 2025 07:00:53 +0000
Manifest next update:     Fri 28 Mar 2025 07:00:53 +0000
Files and hashes:         1: 6lWYbK8jnsQYkYc7T4zN_V6coK8.roa (hash: oD2ZLdtxObPkY+WJWRT30l3VTvZxC8dmopiLiRBmA6M=)
                          2: HzESD-Ild161MVLUkg6cVz_ytl4.crl (hash: r2mp8kF/iVh46C9YhvXskaKEn+yky8agTknvamzodM8=)
                          3: fleie-GXSaWqx7f-vmugkjqZDRc.roa (hash: /sQTlxWlihiXPSEnXwcQEmisZgo+vZC9vBk2kctuvnQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d6:67:5f:52:52:c2:62:32:3f:91:f3:31:10:6f:0a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f31120fe225775eb53152d4920e9c573ff2b65e
        Validity
            Not Before: Mar 27 07:00:53 2025 GMT
            Not After : Mar 28 07:00:53 2025 GMT
        Subject: CN=a6810cdfbbf77d593bf7c8dfe70b3242ee4bd961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:7d:fa:4d:57:fe:b2:87:62:b0:83:19:74:
                    52:bd:bd:a2:cc:c9:b0:dc:c7:37:37:41:32:63:0a:
                    db:50:42:7c:30:0c:6e:1c:36:78:a4:7e:91:de:ab:
                    2c:6e:59:ec:e9:74:c5:4a:79:4a:a3:5c:fb:4b:ee:
                    fc:ac:8d:81:81:3d:7d:c9:bb:25:7d:64:f2:46:b9:
                    68:d8:6c:b1:70:30:e6:d4:38:be:d9:7b:96:d8:d2:
                    34:5e:2e:49:50:eb:3a:09:e8:00:0e:7d:e6:5f:79:
                    05:67:5f:ff:c1:4c:d4:08:ba:9e:2b:ee:d4:9b:77:
                    c4:32:aa:ec:a5:26:8a:59:96:14:0e:53:d7:d6:a1:
                    a5:d1:d2:f0:40:b4:4d:0f:e8:d9:62:5e:63:14:51:
                    79:1c:1b:c6:18:6f:27:0f:bf:ac:8b:d4:b9:82:ac:
                    ce:4f:17:e8:9c:05:42:de:6e:31:03:75:f3:c3:a5:
                    06:d0:9e:8d:58:6b:c2:46:ab:e8:9e:b4:ce:4e:ee:
                    e2:96:bb:ef:de:52:03:4f:82:01:f4:5e:18:7e:95:
                    3d:95:bc:cc:4a:93:83:9b:c0:b9:e9:82:bd:9c:29:
                    74:40:1c:d4:34:7e:f5:83:0a:48:6e:59:43:7e:99:
                    f4:02:91:08:26:a2:26:e0:d1:f4:7f:d5:4a:e6:e5:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:81:0C:DF:BB:F7:7D:59:3B:F7:C8:DF:E7:0B:32:42:EE:4B:D9:61
            X509v3 Authority Key Identifier:
                keyid:1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:d5:5b:46:b7:5c:08:7d:a8:44:00:61:f2:81:10:ee:d2:
         51:a3:fd:76:28:4d:6c:ef:5f:d2:05:95:94:51:5c:04:c8:db:
         99:6a:36:40:b3:df:7e:78:c4:ba:92:f7:6f:cf:4a:18:10:db:
         01:28:7b:c3:13:73:9f:77:07:43:ca:fa:1a:28:c0:af:29:d7:
         28:58:c4:37:71:86:df:f1:30:fe:25:ad:1a:5e:6f:91:2e:f2:
         94:3e:a3:17:01:82:fd:6d:67:7b:fc:75:78:0b:94:60:24:7a:
         77:26:00:54:02:84:05:8a:63:73:42:ed:c0:aa:f4:23:b8:48:
         a7:17:ac:cf:1f:3d:b6:d7:f6:ae:86:26:2c:78:8d:da:13:b2:
         5a:1a:60:33:10:45:b4:36:ae:b8:73:11:a4:0f:43:a6:6d:61:
         8e:2b:d1:46:ba:a2:db:15:63:89:0a:6f:73:26:3a:de:a7:c9:
         00:04:99:be:f9:4a:7f:65:5b:3c:b7:8b:57:9f:7d:fa:f0:ac:
         90:b2:67:b3:ec:ec:1f:ef:67:9a:52:ba:cf:c3:e9:97:c2:01:
         c6:85:8d:f7:c2:e6:32:42:96:64:bd:15:0f:f5:30:40:fe:9d:
         12:78:2e:00:73:e8:e4:18:e9:b2:6c:b3:43:d7:da:79:e3:c0:
         af:af:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:02:36 2025 by rpki-client