
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
File: xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json)
Hash identifier: 4v04bLEMYjBd4ohwsv11fKRBp5dB4vD8FoUGILjy6oA=
Subject key identifier: 06:04:05:45:04:61:FE:BB:33:65:CD:EF:64:B6:0F:F2:5A:5D:A7:0A
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 01962FAB8D485EAC47E69C0BC1196434EDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
Manifest number: 14EE
Signing time: Sun 13 Apr 2025 15:01:34 +0000
Manifest this update: Sun 13 Apr 2025 15:01:34 +0000
Manifest next update: Mon 14 Apr 2025 15:01:34 +0000
Files and hashes: 1: nEhO-4IOflDc16smasjo46yXDrU.roa (hash: TGudjeK9/qruL2a7Ja97DNoAnaGXmeBxOzedTAd1+AI=)
2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: iQcPMxthsLHT7beMJroqWyttXbeIzqT5HmE9PYTy/mM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:8d:48:5e:ac:47:e6:9c:0b:c1:19:64:34:ed:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Apr 13 15:01:34 2025 GMT
Not After : Apr 14 15:01:34 2025 GMT
Subject: CN=060405450461febb3365cdef64b60ff25a5da70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:8f:8a:64:dc:45:50:8f:a1:58:d9:21:72:
fe:94:8a:d1:d6:29:68:4c:ca:e3:7c:7b:fe:30:b9:
99:fa:f2:fb:35:a7:af:69:a2:96:a8:59:72:9e:bc:
dd:5e:ec:72:d0:a5:ec:5d:28:96:59:f3:89:3c:48:
d4:89:d9:a9:58:09:42:23:7a:21:21:8d:70:56:a6:
0f:62:8c:1f:b8:0d:ba:8e:30:5a:39:8d:04:af:52:
e9:31:9e:63:dd:65:90:d9:06:5c:20:95:0b:64:b1:
d2:97:25:27:cf:37:a7:cb:53:02:57:15:00:92:de:
6a:49:32:21:54:a6:0e:42:3e:c4:dc:e3:99:8b:b1:
19:10:b8:f2:4b:10:a2:a7:f2:2f:c7:1b:b6:87:aa:
10:69:b9:40:02:2d:7a:72:8d:27:79:aa:a8:ef:a8:
c2:85:6f:b7:d3:bd:15:b4:cb:49:fc:04:b4:00:7f:
aa:5d:9d:2b:17:63:58:be:de:42:d7:11:df:27:24:
4f:80:a9:35:61:29:30:6c:46:5e:7f:91:40:9a:6b:
fc:90:e5:c1:a0:4e:a8:b4:e0:37:51:ea:21:c9:d8:
66:b9:ad:3f:6c:1a:2d:cf:f5:9a:a7:c1:68:ef:8b:
17:31:9e:e4:65:4d:43:69:63:f5:24:16:3f:6f:f2:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:04:05:45:04:61:FE:BB:33:65:CD:EF:64:B6:0F:F2:5A:5D:A7:0A
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:86:66:07:df:c4:27:db:06:88:3f:15:d2:0c:3e:26:e4:c7:
72:1d:53:a7:be:45:54:bc:2a:44:bb:9d:02:ce:ac:2c:db:30:
08:31:08:7d:3a:a0:18:57:c3:45:86:28:96:11:94:7e:b1:42:
cb:24:3a:d8:a9:0f:c1:81:b1:84:94:d2:77:14:6e:53:41:cc:
21:de:ce:c6:38:45:0f:de:3c:44:c1:6d:b6:90:20:8d:a1:43:
72:25:22:71:2a:73:de:30:b7:50:6e:bb:c3:a2:91:14:21:8a:
66:6d:0d:61:75:6a:ba:7e:d4:aa:da:66:9b:3b:f4:cf:f0:59:
11:40:f2:9c:ce:70:d2:9a:54:4c:b5:28:25:46:8c:9c:ed:09:
df:19:90:aa:d0:3e:c4:c2:58:b1:12:69:65:a7:3c:d5:e2:1e:
93:67:69:80:ef:36:9c:b1:81:75:dd:a5:4a:37:fd:f3:45:4e:
a6:b5:1a:d5:5a:6e:0e:d6:2c:f1:0b:2e:19:67:43:09:e3:95:
d8:5a:d4:42:06:31:d5:4c:50:ba:c7:e2:bd:a1:9f:4e:0f:1a:
11:2e:25:5c:97:01:16:a4:ed:7f:91:47:7a:52:53:60:74:54:
7d:f8:a0:dd:21:22:8b:ed:ab:ab:14:86:87:87:ec:38:03:89:
a9:47:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net