Manifest
$ rpki-client -vvf rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/0/185CA68E90574318A0552F0B7F42CC120369F28F.mft
File: 185CA68E90574318A0552F0B7F42CC120369F28F.mft (raw, json)
Hash identifier: i+tZmll6MFxQ/A4SeF6fAVAxyZPPgd5Oj+RUamHGK18=
Subject key identifier: A4:F2:95:AE:9F:DA:23:3D:7E:F6:23:B5:81:DF:A4:13:A2:89:99:7D
Authority key identifier: 18:5C:A6:8E:90:57:43:18:A0:55:2F:0B:7F:42:CC:12:03:69:F2:8F
Certificate issuer: /CN=185ca68e90574318a0552f0b7f42cc120369f28f
Certificate serial: 6C29847FDE09A3AC0690AE67807560393CA29130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFymjpBXQxigVS8Lf0LMEgNp8o8.cer
Subject info access: rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/0/185CA68E90574318A0552F0B7F42CC120369F28F.mft
Manifest number: 4F
Signing time: Tue 29 Nov 2022 07:38:32 +0000
Manifest this update: Tue 29 Nov 2022 07:33:32 +0000
Manifest next update: Wed 30 Nov 2022 09:44:32 +0000
Files and hashes: 1: 185CA68E90574318A0552F0B7F42CC120369F28F.crl (hash: FpP+dggx2DNcH5RvSCOonYu4RDwSW9dZE4D27t+RaxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:29:84:7f:de:09:a3:ac:06:90:ae:67:80:75:60:39:3c:a2:91:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185ca68e90574318a0552f0b7f42cc120369f28f
Validity
Not Before: Nov 29 07:33:32 2022 GMT
Not After : Nov 30 09:44:32 2022 GMT
Subject: CN=A4F295AE9FDA233D7EF623B581DFA413A289997D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:f7:6a:ad:46:a3:04:b7:c6:57:62:b3:4b:
a2:45:a7:3d:88:45:b4:44:4b:16:09:e2:6d:e0:83:
96:79:18:6b:d4:5c:cd:a8:23:49:64:47:6c:0b:95:
77:af:eb:75:20:6b:b4:d1:25:ad:36:e2:9a:b7:c9:
28:82:04:ff:e6:96:47:9d:91:16:67:ba:a8:78:41:
b9:13:7c:fb:32:6b:3e:a4:fe:2b:4c:60:87:1a:a5:
31:96:d7:5f:fc:dd:1e:70:50:11:f3:a3:99:59:a3:
b0:54:d3:87:78:be:17:b1:44:12:59:85:53:62:c6:
d7:c5:cf:6c:7f:38:b8:9c:f8:93:79:5f:d0:cf:ec:
2b:34:2f:03:e5:aa:3b:09:8a:c6:00:95:f9:71:cd:
d7:72:7d:25:a6:44:24:e0:6e:4d:db:94:55:97:ea:
4b:2e:34:b1:5c:b3:ec:5a:8f:18:fe:43:1b:83:03:
b7:bb:5d:49:65:ef:d4:1e:f8:7a:91:04:a7:dd:5d:
0b:00:0d:38:66:bb:a8:c1:31:fc:e6:d7:d2:73:62:
a4:cb:7a:e8:cb:6b:c0:19:7b:a0:27:c8:a9:3a:ac:
05:6d:75:6f:33:4c:d6:de:46:ea:ae:ff:33:b6:3d:
89:8d:72:65:37:47:f1:53:74:5c:da:77:1e:b1:c4:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F2:95:AE:9F:DA:23:3D:7E:F6:23:B5:81:DF:A4:13:A2:89:99:7D
X509v3 Authority Key Identifier:
keyid:18:5C:A6:8E:90:57:43:18:A0:55:2F:0B:7F:42:CC:12:03:69:F2:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/0/185CA68E90574318A0552F0B7F42CC120369F28F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFymjpBXQxigVS8Lf0LMEgNp8o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/0/185CA68E90574318A0552F0B7F42CC120369F28F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:34:94:90:1e:a8:fb:01:0f:f5:c4:1b:a0:d9:db:c0:aa:97:
f3:f3:83:1c:92:e5:86:9b:d5:5b:4d:69:4a:5f:57:a6:17:9d:
64:c2:48:b2:10:c7:d1:19:2d:e9:50:1c:ab:38:16:f6:e6:7a:
b8:ff:0f:1b:7d:c0:82:7e:12:cd:07:65:3f:1e:e9:5e:38:5b:
19:b2:42:04:1b:6e:3b:a9:36:02:4f:21:fc:9b:a1:1f:fa:33:
e4:cc:54:9f:95:ca:57:36:c6:7d:51:14:b7:85:c2:a5:f6:2e:
ac:06:dd:23:85:53:04:e6:10:cc:46:19:c0:fc:21:63:17:a3:
26:3a:db:f5:17:92:67:ec:88:a7:41:61:60:81:80:83:cb:5d:
e7:7f:f1:33:a5:46:67:24:19:03:8b:5d:70:71:36:38:9a:6a:
a3:92:de:91:47:b6:ed:8f:06:97:f2:ed:7c:82:1a:6f:c7:12:
74:4f:02:dd:61:7e:42:84:5d:6b:c2:c0:d8:55:31:d0:fc:b4:
ed:7b:1c:1c:21:e5:c8:26:cc:ed:6e:34:1f:18:c1:b7:f0:1d:
76:28:40:e0:53:e7:03:cb:49:d8:79:dd:79:53:c7:58:0e:d5:
8a:84:ca:1f:1c:f8:f8:86:db:f6:d0:ae:89:4d:6c:9c:19:6e:
43:c0:8e:2e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUbCmEf94Jo6wGkK5ngHVgOTyikTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg1Y2E2OGU5MDU3NDMxOGEwNTUyZjBiN2Y0MmNjMTIw
MzY5ZjI4ZjAeFw0yMjExMjkwNzMzMzJaFw0yMjExMzAwOTQ0MzJaMDMxMTAvBgNV
BAMTKEE0RjI5NUFFOUZEQTIzM0Q3RUY2MjNCNTgxREZBNDEzQTI4OTk5N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwfdqrUajBLfGV2KzS6JFpz2I
RbRESxYJ4m3gg5Z5GGvUXM2oI0lkR2wLlXev63Uga7TRJa024pq3ySiCBP/mlked
kRZnuqh4QbkTfPsyaz6k/itMYIcapTGW11/83R5wUBHzo5lZo7BU04d4vhexRBJZ
hVNixtfFz2x/OLic+JN5X9DP7Cs0LwPlqjsJisYAlflxzddyfSWmRCTgbk3blFWX
6ksuNLFcs+xajxj+QxuDA7e7XUll79Qe+HqRBKfdXQsADThmu6jBMfzm19JzYqTL
eujLa8AZe6AnyKk6rAVtdW8zTNbeRuqu/zO2PYmNcmU3R/FTdFzadx6xxOClAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUpPKVrp/aIz1+9iO1gd+kE6KJmX0wHwYDVR0j
BBgwFoAUGFymjpBXQxigVS8Lf0LMEgNp8o8wDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8vcnBraS10ZXN0LXJlcG8ubmV0LmthZ2wubWUv
cmVwby9LZWF0b25BR0xhaXItUlBLSS1URVNULzAvMTg1Q0E2OEU5MDU3NDMxOEEw
NTUyRjBCN0Y0MkNDMTIwMzY5RjI4Ri5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dGeW1qcEJYUXhpZ1ZTOExmMExNRWdOcDhvOC5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9ycGtpLXRlc3QtcmVwby5uZXQua2FnbC5t
ZS9yZXBvL0tlYXRvbkFHTGFpci1SUEtJLVRFU1QvMC8xODVDQTY4RTkwNTc0MzE4
QTA1NTJGMEI3RjQyQ0MxMjAzNjlGMjhGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzSUkB6o+wEP9cQb
oNnbwKqX8/ODHJLlhpvVW01pSl9XphedZMJIshDH0Rkt6VAcqzgW9uZ6uP8PG33A
gn4SzQdlPx7pXjhbGbJCBBtuO6k2Ak8h/JuhH/oz5MxUn5XKVzbGfVEUt4XCpfYu
rAbdI4VTBOYQzEYZwPwhYxejJjrb9ReSZ+yIp0FhYIGAg8td53/xM6VGZyQZA4td
cHE2OJpqo5LekUe27Y8Gl/LtfIIab8cSdE8C3WF+QoRda8LA2FUx0Py07XscHCHl
yCbM7W40HxjBt/AddihA4FPnA8tJ2HndeVPHWA7VioTKHxz4+Ibb9tCuiU1snBlu
Q8COLg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:59 2025 by rpki-client