Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
File:                     xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json)
Hash identifier:          4v04bLEMYjBd4ohwsv11fKRBp5dB4vD8FoUGILjy6oA=
Subject key identifier:   06:04:05:45:04:61:FE:BB:33:65:CD:EF:64:B6:0F:F2:5A:5D:A7:0A
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Certificate issuer:       /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial:       01962FAB8D485EAC47E69C0BC1196434EDA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: nEhO-4IOflDc16smasjo46yXDrU.roa (hash: TGudjeK9/qruL2a7Ja97DNoAnaGXmeBxOzedTAd1+AI=)
                          2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: iQcPMxthsLHT7beMJroqWyttXbeIzqT5HmE9PYTy/mM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8d:48:5e:ac:47:e6:9c:0b:c1:19:64:34:ed:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=060405450461febb3365cdef64b60ff25a5da70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6e:8f:8a:64:dc:45:50:8f:a1:58:d9:21:72:
                    fe:94:8a:d1:d6:29:68:4c:ca:e3:7c:7b:fe:30:b9:
                    99:fa:f2:fb:35:a7:af:69:a2:96:a8:59:72:9e:bc:
                    dd:5e:ec:72:d0:a5:ec:5d:28:96:59:f3:89:3c:48:
                    d4:89:d9:a9:58:09:42:23:7a:21:21:8d:70:56:a6:
                    0f:62:8c:1f:b8:0d:ba:8e:30:5a:39:8d:04:af:52:
                    e9:31:9e:63:dd:65:90:d9:06:5c:20:95:0b:64:b1:
                    d2:97:25:27:cf:37:a7:cb:53:02:57:15:00:92:de:
                    6a:49:32:21:54:a6:0e:42:3e:c4:dc:e3:99:8b:b1:
                    19:10:b8:f2:4b:10:a2:a7:f2:2f:c7:1b:b6:87:aa:
                    10:69:b9:40:02:2d:7a:72:8d:27:79:aa:a8:ef:a8:
                    c2:85:6f:b7:d3:bd:15:b4:cb:49:fc:04:b4:00:7f:
                    aa:5d:9d:2b:17:63:58:be:de:42:d7:11:df:27:24:
                    4f:80:a9:35:61:29:30:6c:46:5e:7f:91:40:9a:6b:
                    fc:90:e5:c1:a0:4e:a8:b4:e0:37:51:ea:21:c9:d8:
                    66:b9:ad:3f:6c:1a:2d:cf:f5:9a:a7:c1:68:ef:8b:
                    17:31:9e:e4:65:4d:43:69:63:f5:24:16:3f:6f:f2:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:04:05:45:04:61:FE:BB:33:65:CD:EF:64:B6:0F:F2:5A:5D:A7:0A
            X509v3 Authority Key Identifier:
                keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:86:66:07:df:c4:27:db:06:88:3f:15:d2:0c:3e:26:e4:c7:
         72:1d:53:a7:be:45:54:bc:2a:44:bb:9d:02:ce:ac:2c:db:30:
         08:31:08:7d:3a:a0:18:57:c3:45:86:28:96:11:94:7e:b1:42:
         cb:24:3a:d8:a9:0f:c1:81:b1:84:94:d2:77:14:6e:53:41:cc:
         21:de:ce:c6:38:45:0f:de:3c:44:c1:6d:b6:90:20:8d:a1:43:
         72:25:22:71:2a:73:de:30:b7:50:6e:bb:c3:a2:91:14:21:8a:
         66:6d:0d:61:75:6a:ba:7e:d4:aa:da:66:9b:3b:f4:cf:f0:59:
         11:40:f2:9c:ce:70:d2:9a:54:4c:b5:28:25:46:8c:9c:ed:09:
         df:19:90:aa:d0:3e:c4:c2:58:b1:12:69:65:a7:3c:d5:e2:1e:
         93:67:69:80:ef:36:9c:b1:81:75:dd:a5:4a:37:fd:f3:45:4e:
         a6:b5:1a:d5:5a:6e:0e:d6:2c:f1:0b:2e:19:67:43:09:e3:95:
         d8:5a:d4:42:06:31:d5:4c:50:ba:c7:e2:bd:a1:9f:4e:0f:1a:
         11:2e:25:5c:97:01:16:a4:ed:7f:91:47:7a:52:53:60:74:54:
         7d:f8:a0:dd:21:22:8b:ed:ab:ab:14:86:87:87:ec:38:03:89:
         a9:47:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net