Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3034e4-db9c-4197-aa42-37dafe8eb4c8/1/coTX52fsTo-kb85wGCMiO7vfsto.mft
File: coTX52fsTo-kb85wGCMiO7vfsto.mft (raw, json)
Hash identifier: LA1DdoBq9JPRSaBQfegfoIoGFzCKvhNbCe5FISajFFo=
Subject key identifier: 59:13:50:3D:F6:7F:4C:0C:5B:A4:C6:15:C6:3B:EC:65:78:FE:A3:99
Authority key identifier: 72:84:D7:E7:67:EC:4E:8F:A4:6F:CE:70:18:23:22:3B:BB:DF:B2:DA
Certificate issuer: /CN=7284d7e767ec4e8fa46fce701823223bbbdfb2da
Certificate serial: 48C8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coTX52fsTo-kb85wGCMiO7vfsto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3034e4-db9c-4197-aa42-37dafe8eb4c8/1/coTX52fsTo-kb85wGCMiO7vfsto.mft
Manifest number: 67
Signing time: Sun 03 Apr 2022 23:51:50 +0000
Manifest this update: Sun 03 Apr 2022 23:51:50 +0000
Manifest next update: Mon 04 Apr 2022 23:51:50 +0000
Files and hashes: 1: coTX52fsTo-kb85wGCMiO7vfsto.crl (hash: gnV+Q8zIehNguamHD9Qz/23Bi40INqTh8wUQynUDr1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4769963 (0x48c8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7284d7e767ec4e8fa46fce701823223bbbdfb2da
Validity
Not Before: Apr 3 23:51:50 2022 GMT
Not After : Apr 4 23:51:50 2022 GMT
Subject: CN=5913503df67f4c0c5ba4c615c63bec6578fea399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:62:75:40:41:85:97:97:bc:29:c8:07:36:
c0:11:de:3e:e2:a3:bc:05:48:d3:eb:de:ed:e0:6b:
1f:00:fa:13:89:80:06:cf:94:df:16:6d:53:ac:02:
60:72:1e:4e:3a:3f:35:55:65:9f:d8:71:a4:03:35:
de:ad:41:5a:dc:5b:16:cd:f2:73:b2:15:cc:bf:60:
19:29:9b:83:73:cc:db:e7:ab:37:70:23:9f:34:6a:
4f:d4:56:d2:a0:8f:df:ea:73:a6:52:dc:99:3d:28:
2f:8a:c2:a6:26:d6:5a:b4:d0:26:a1:5d:4a:f5:52:
d8:00:4c:7e:d0:d5:a2:f7:df:f1:71:be:47:d4:e1:
ec:66:d9:fa:91:a5:9f:cd:2e:82:03:65:d7:6a:56:
7c:e9:3a:6b:21:3e:3e:b3:59:85:c8:e3:62:9f:2e:
11:39:56:e7:c9:10:8a:05:e1:d4:93:20:97:34:3f:
2f:b5:bb:98:90:66:7f:0b:17:c6:86:0d:25:9d:e2:
1f:f0:06:ba:0b:23:40:af:a4:7d:40:55:33:f4:31:
02:1e:93:b3:ec:ee:4e:a5:6b:08:b7:61:34:09:06:
49:43:5b:d0:4d:d2:40:15:ed:b4:23:e9:9d:66:ab:
cc:22:94:39:d8:4f:d7:7e:a1:aa:5c:5a:a1:2d:d5:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:50:3D:F6:7F:4C:0C:5B:A4:C6:15:C6:3B:EC:65:78:FE:A3:99
X509v3 Authority Key Identifier:
keyid:72:84:D7:E7:67:EC:4E:8F:A4:6F:CE:70:18:23:22:3B:BB:DF:B2:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coTX52fsTo-kb85wGCMiO7vfsto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3034e4-db9c-4197-aa42-37dafe8eb4c8/1/coTX52fsTo-kb85wGCMiO7vfsto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3034e4-db9c-4197-aa42-37dafe8eb4c8/1/coTX52fsTo-kb85wGCMiO7vfsto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d9:fe:15:01:22:29:e5:74:c6:5a:dd:ab:95:1c:47:b3:40:
0b:9e:42:22:d9:44:58:5f:77:5c:7f:56:db:c9:a5:d8:42:ac:
0e:bb:9a:d0:33:fc:79:d5:44:4f:79:8c:ff:87:a4:54:53:82:
d3:af:8e:9a:73:2a:70:93:1a:83:be:a4:5f:6e:ac:da:c3:d3:
f9:89:20:b8:c9:20:70:77:d6:c1:b9:7b:cb:1a:99:8e:0f:48:
0f:92:55:b9:ac:a5:a2:6c:4f:2f:9b:d7:0b:b2:9a:3d:33:45:
7a:82:f9:23:06:48:d2:c3:0a:f6:b4:21:1a:f2:0a:2a:60:d9:
c5:69:9b:f3:3e:d8:e4:04:57:30:df:12:78:1c:e9:57:00:f0:
ce:2b:43:26:cc:c0:63:cb:ca:e5:17:bc:fa:3b:01:c0:09:a9:
ea:08:c0:41:7c:15:0f:2e:b8:44:95:0c:b0:f9:e3:57:ba:37:
6a:6c:bd:27:2a:5b:02:98:d6:32:d4:d9:6a:82:b1:90:c1:da:
25:a1:ab:1b:ef:bd:12:6e:81:63:61:e1:7e:b0:0c:16:90:94:
58:5b:34:3f:73:dd:4e:1e:2a:ad:32:9a:e6:62:bb:f4:cd:7d:
ba:b5:c2:99:5b:c2:82:0f:3e:6b:44:f0:2d:de:5f:d7:be:de:
aa:7e:39:df
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIDSMirMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcy
ODRkN2U3NjdlYzRlOGZhNDZmY2U3MDE4MjMyMjNiYmJkZmIyZGEwHhcNMjIwNDAz
MjM1MTUwWhcNMjIwNDA0MjM1MTUwWjAzMTEwLwYDVQQDEyg1OTEzNTAzZGY2N2Y0
YzBjNWJhNGM2MTVjNjNiZWM2NTc4ZmVhMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApk9idUBBhZeXvCnIBzbAEd4+4qO8BUjT697t4GsfAPoTiYAG
z5TfFm1TrAJgch5OOj81VWWf2HGkAzXerUFa3FsWzfJzshXMv2AZKZuDc8zb56s3
cCOfNGpP1FbSoI/f6nOmUtyZPSgvisKmJtZatNAmoV1K9VLYAEx+0NWi99/xcb5H
1OHsZtn6kaWfzS6CA2XXalZ86TprIT4+s1mFyONiny4ROVbnyRCKBeHUkyCXND8v
tbuYkGZ/CxfGhg0lneIf8Aa6CyNAr6R9QFUz9DECHpOz7O5OpWsIt2E0CQZJQ1vQ
TdJAFe20I+mdZqvMIpQ52E/XfqGqXFqhLdWm9wIDAQABo4ICIjCCAh4wHQYDVR0O
BBYEFFkTUD32f0wMW6TGFcY77GV4/qOZMB8GA1UdIwQYMBaAFHKE1+dn7E6PpG/O
cBgjIju737LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Y29UWDUyZnNUby1rYjg1d0dDTWlPN3Zmc3RvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kMy8zMDM0ZTQtZGI5Yy00MTk3LWFhNDItMzdkYWZlOGViNGM4LzEv
Y29UWDUyZnNUby1rYjg1d0dDTWlPN3Zmc3RvLm1mdDCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8z
MDM0ZTQtZGI5Yy00MTk3LWFhNDItMzdkYWZlOGViNGM4LzEvY29UWDUyZnNUby1r
Yjg1d0dDTWlPN3Zmc3RvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8E
BjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNn+FQEiKeV0xlrdq5UcR7NAC55C
ItlEWF93XH9W28ml2EKsDrua0DP8edVET3mM/4ekVFOC06+OmnMqcJMag76kX26s
2sPT+YkguMkgcHfWwbl7yxqZjg9ID5JVuaylomxPL5vXC7KaPTNFeoL5IwZI0sMK
9rQhGvIKKmDZxWmb8z7Y5ARXMN8SeBzpVwDwzitDJszAY8vK5Re8+jsBwAmp6gjA
QXwVDy64RJUMsPnjV7o3amy9JypbApjWMtTZaoKxkMHaJaGrG++9Em6BY2HhfrAM
FpCUWFs0P3PdTh4qrTKa5mK79M19urXCmVvCgg8+a0TwLd5f177eqn453w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:13 2025 by rpki-client