Manifest
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json)
Hash identifier: zCz41ziJCf3vWmPgy9kDEbP9Idh0pUup9dYgpf1AqY4=
Subject key identifier: 97:B9:82:D8:E0:1B:62:97:45:06:FA:D5:A8:AE:1B:07:49:66:F9:6C
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial: 4D9EAA802C5660502B7AA8467757F794EBC253D3
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
Manifest number: BC
Signing time: Sat 29 Mar 2025 10:17:57 +0000
Manifest this update: Sat 29 Mar 2025 10:12:57 +0000
Manifest next update: Sun 30 Mar 2025 12:04:57 +0000
Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: cLmUuL65NvVCGAubiY2doRAQs2xoj/CKyOsDbqcV0x0=)
2: 34352e3133322e3139302e302f32342d3234203d3e2033393730.roa (hash: ZvFIRI5Y2rVZcFk84QTgqRybDF5ljbI4FjwVY0yfJVE=)
3: 34352e3133322e3139312e302f32342d3234203d3e2030.roa (hash: eOQL6KtS/fp/gIl2Pd8Tq6HVnPxMLD1miARzzAEJtqE=)
4: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9e:aa:80:2c:56:60:50:2b:7a:a8:46:77:57:f7:94:eb:c2:53:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
Validity
Not Before: Mar 29 10:12:57 2025 GMT
Not After : Mar 30 12:04:57 2025 GMT
Subject: CN=97B982D8E01B62974506FAD5A8AE1B074966F96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:f9:1a:7d:70:56:94:10:b2:30:96:d2:86:
19:9d:30:c0:1a:a5:2b:ae:68:48:6b:ef:cd:e2:e5:
b9:16:ab:f4:f0:31:4c:57:a1:75:98:86:20:01:32:
dc:b7:59:7b:39:42:71:20:f9:12:9f:bc:e4:ed:fe:
a6:8a:cf:df:e7:95:ff:47:d4:41:35:d8:cb:51:1f:
55:d9:32:36:29:50:81:ab:50:3e:49:10:eb:a1:21:
0b:cc:e0:85:c3:ba:9d:e5:7d:26:d5:c1:fb:86:5f:
b5:8b:e9:df:ad:ae:4d:93:5d:98:a6:45:a9:1d:7e:
5c:7f:77:3c:a7:57:35:e1:e7:f3:1e:bf:67:9e:d8:
97:05:6c:a4:21:d4:f2:56:e2:49:84:91:44:20:00:
ae:7c:4a:6b:c4:d7:95:b7:f8:2d:3e:bc:e3:19:b3:
24:f2:aa:95:0a:d1:bf:2c:07:de:ce:78:99:66:0c:
cf:04:99:2b:6f:fa:f4:bd:0c:38:91:dc:5c:dc:61:
52:59:93:e7:ee:a1:67:de:fb:a0:6c:7f:b6:49:c4:
53:e5:1a:7b:1a:ff:b5:3b:ec:1c:a6:bf:a2:ed:d7:
29:56:89:35:a6:2d:57:88:df:75:81:75:3c:df:33:
5b:94:c9:29:80:7f:16:a3:1c:dc:c3:2b:b8:65:11:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:82:D8:E0:1B:62:97:45:06:FA:D5:A8:AE:1B:07:49:66:F9:6C
X509v3 Authority Key Identifier:
keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:db:d4:46:c8:f3:a4:7f:b8:03:94:c4:bd:b7:80:62:ad:19:
48:e3:a2:b7:af:c1:97:6c:cb:79:98:91:72:22:bd:7f:75:7e:
94:c0:87:57:d2:b6:68:b9:b1:7b:24:8d:6d:ae:2a:9c:d3:91:
2b:f5:db:e2:df:d5:97:a9:6b:3c:d1:97:d7:ca:1c:18:80:ad:
e4:4b:2a:6b:0c:a9:dc:56:f9:2d:4e:e2:04:ad:4c:11:ad:e0:
17:59:16:81:d0:74:f8:d1:d0:ab:8a:3d:71:28:2c:6d:c3:71:
36:91:78:31:71:2c:23:76:e5:1f:72:77:1d:f3:d0:8e:e6:a0:
ff:46:eb:b8:8b:95:f5:21:d8:5f:2c:49:a6:a4:3c:47:fc:34:
65:f6:bc:8c:e0:05:19:2e:c2:ef:24:91:3e:a9:f2:ad:5e:98:
49:f5:aa:ba:ca:16:21:71:f8:7d:61:52:b6:71:7d:47:4c:e1:
18:ce:e8:90:1d:1c:98:fc:43:0d:d3:af:29:35:36:1a:10:33:
da:b7:b5:45:8c:d2:97:ef:65:f3:08:6e:4b:c3:e7:ac:e1:dc:
89:54:40:ed:8b:f0:ee:52:ea:b3:db:c2:6d:9f:ed:7f:c6:03:
29:dc:a8:d1:e5:12:ea:6c:02:4c:f1:dc:e2:cb:dc:63:c5:a2:
be:e2:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:40:35 2025 by rpki-client