Manifest
$ rpki-client -vvf rpki.netiface.net/repo/Pfcloud/2/D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC.mft
File: D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC.mft (raw, json)
Hash identifier: GnAFHZvdmt8py4JbmaCE7ftdyBhhXIM1uMLVi1gTh2c=
Subject key identifier: B7:33:C4:AD:D4:C1:07:06:97:BB:0D:96:FF:9B:EC:FB:BB:92:18:01
Authority key identifier: D7:4D:1E:9D:E9:B7:7C:51:8B:BB:84:9A:31:ED:EC:3F:87:D6:BC:DC
Certificate issuer: /CN=D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC
Certificate serial: 56363B43350EA1BD73034EA7CBB8405B88B26CE6
Authority info access: rsync://rpki.netiface.net/repo/Apricot/1/D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC.cer
Subject info access: rsync://rpki.netiface.net/repo/Pfcloud/2/D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC.mft
Manifest number: 04
Signing time: Tue 06 Feb 2024 21:32:45 +0000
Manifest this update: Tue 06 Feb 2024 21:27:45 +0000
Manifest next update: Thu 08 Feb 2024 01:29:45 +0000
Files and hashes: 1: D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC.crl (hash: my6eE9PfrbUY4MzWooo6sqgfoBZ1JtasxyBR/8384oE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:36:3b:43:35:0e:a1:bd:73:03:4e:a7:cb:b8:40:5b:88:b2:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC
Validity
Not Before: Feb 6 21:27:45 2024 GMT
Not After : Feb 8 01:29:45 2024 GMT
Subject: CN=B733C4ADD4C1070697BB0D96FF9BECFBBB921801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:10:64:66:4a:8e:fa:20:18:a7:69:b1:41:
92:39:e5:13:43:49:67:1d:51:65:ff:fc:4b:de:3f:
d9:3a:6a:88:08:e8:c8:16:2b:63:c9:59:ec:35:07:
b7:41:57:d6:50:fc:45:16:d3:8e:a1:43:9c:e6:0e:
40:b4:89:a9:b8:c2:08:2f:8f:0a:87:c6:5b:fb:6f:
26:0f:82:29:0c:06:4e:ab:43:f2:d8:8a:b7:63:05:
c2:8d:c9:e7:f6:84:b9:68:59:aa:99:77:03:88:8c:
ec:9d:d7:4a:08:8d:4f:db:dc:2e:0d:c3:a9:0d:35:
91:1c:bc:17:e4:da:ef:02:23:cd:5f:8b:6d:ee:95:
a0:a1:5a:ba:7d:40:34:1d:d3:92:7e:1d:8e:be:6f:
a1:ea:c6:41:8a:4c:ae:94:2e:00:f0:cb:3c:9a:ad:
52:b0:80:68:e8:d6:ce:cd:48:7c:f5:7a:24:d8:77:
e5:c0:e5:c3:26:50:02:2a:e2:a5:2a:d3:62:36:09:
0a:c9:d2:ca:e9:dc:49:20:c0:66:04:41:ca:99:27:
2a:8b:05:49:83:39:7b:3a:26:88:49:9d:9b:b2:6e:
2c:c9:00:5d:31:1e:77:9a:0a:48:c1:fb:d4:1e:22:
59:f5:08:e4:f7:1d:7a:bf:96:87:57:13:ba:f4:a9:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:33:C4:AD:D4:C1:07:06:97:BB:0D:96:FF:9B:EC:FB:BB:92:18:01
X509v3 Authority Key Identifier:
keyid:D7:4D:1E:9D:E9:B7:7C:51:8B:BB:84:9A:31:ED:EC:3F:87:D6:BC:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Pfcloud/2/D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/Pfcloud/2/D74D1E9DE9B77C518BBB849A31EDEC3F87D6BCDC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5b:2b:7f:48:af:06:8a:11:94:13:81:cd:67:e7:ee:b3:74:
32:16:4e:90:03:97:1b:ca:e6:8f:f8:fb:2f:9b:c1:9b:55:b7:
d7:8f:14:22:a8:29:9f:be:12:60:7b:78:31:b8:97:54:5d:be:
39:ca:9e:51:7f:97:f7:68:4a:c1:09:5c:04:f4:a0:05:33:7d:
81:7d:15:b5:e1:51:67:64:25:fa:ff:fa:60:6d:8d:7f:f0:e2:
0f:c8:c9:e7:7d:e4:75:ca:75:6d:49:52:5e:41:d6:4a:35:9b:
91:df:da:db:88:0e:94:a6:29:b4:4d:98:84:95:b6:8a:f7:31:
c2:49:cd:56:98:41:a2:4b:98:08:8f:95:d9:2a:39:f2:44:ec:
1e:f0:b3:85:d8:cf:4c:dc:9e:7d:2a:61:3d:93:fa:83:f8:f7:
b0:dd:e6:40:a3:d1:1a:77:d5:68:a7:69:cf:40:1e:e6:0b:78:
3b:18:02:f3:ea:ae:41:f6:52:1f:78:40:4d:74:c4:1b:86:81:
3a:e8:78:ef:46:f4:cf:13:60:f8:2e:af:03:74:8f:d8:57:77:
1d:66:69:69:8e:1e:54:a3:96:34:8d:d3:d6:96:3a:69:a9:da:
f9:fe:d1:9b:ff:f9:1c:2f:1b:eb:a8:1d:15:a8:e0:88:e5:98:
85:55:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 14:43:10 2024 by rpki-client on console-fra.rpki-client.org