Manifest
$ rpki-client -vvf testbed.rpki.nlnetlabs.nl/repo/Test/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.mft
File: D2573E9C1203B37002430036F22CF52F5EE4CC89.mft (raw, json)
Hash identifier: L7U3b+sRqIyOMvzSM6LeFVSQCxc4mqIZMCw8btKJehs=
Subject key identifier: AD:03:74:A6:DF:45:93:3C:3F:10:D2:A9:8D:80:61:34:EC:E1:DF:12
Authority key identifier: D2:57:3E:9C:12:03:B3:70:02:43:00:36:F2:2C:F5:2F:5E:E4:CC:89
Certificate issuer: /CN=D2573E9C1203B37002430036F22CF52F5EE4CC89
Certificate serial: 2D598BFC36EC612295552E85B69A11E55FCF9FEA
Authority info access: rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.cer
Subject info access: rsync://testbed.rpki.nlnetlabs.nl/repo/Test/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.mft
Manifest number: 05
Signing time: Wed 16 Feb 2022 09:10:00 +0000
Manifest this update: Wed 16 Feb 2022 09:05:00 +0000
Manifest next update: Thu 17 Feb 2022 11:09:00 +0000
Files and hashes: 1: D2573E9C1203B37002430036F22CF52F5EE4CC89.crl (hash: n37oSXQXeaP1aEU4TpaL38htuAsuaB4YcmeRzdAw85A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:59:8b:fc:36:ec:61:22:95:55:2e:85:b6:9a:11:e5:5f:cf:9f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2573E9C1203B37002430036F22CF52F5EE4CC89
Validity
Not Before: Feb 16 09:05:00 2022 GMT
Not After : Feb 17 11:09:00 2022 GMT
Subject: CN=AD0374A6DF45933C3F10D2A98D806134ECE1DF12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:d5:b4:e0:3b:00:ba:3d:b7:ab:7e:4d:88:
95:33:62:55:01:52:d7:42:50:5e:b8:1c:5d:5b:f4:
f6:c2:0f:d9:ca:73:44:98:f0:af:9d:4f:76:d2:6e:
95:82:5f:b5:60:27:d5:69:e9:03:98:02:ff:17:5f:
07:9c:16:c8:08:24:f1:65:56:fb:a3:13:40:e9:7a:
7b:31:34:11:60:13:06:be:e2:f8:5a:85:0a:96:40:
7f:c4:63:97:30:f6:e7:8d:ec:04:b4:11:cc:b6:08:
9a:01:22:d1:88:8a:35:7c:4b:08:8e:67:d2:38:29:
ed:29:0c:08:9e:81:53:86:bc:5f:e6:55:65:6f:42:
90:7c:13:f0:90:6f:96:af:32:fd:42:5c:dc:38:3a:
75:b4:be:ea:f9:65:7c:d2:b5:91:e7:0a:fe:71:df:
cc:41:d7:41:0f:cc:ad:0d:18:9a:09:cf:63:06:99:
bb:f7:db:2e:26:14:2e:79:ac:90:d0:36:02:77:05:
df:a9:6b:5b:d7:01:05:df:e9:59:c8:a9:b1:73:9e:
73:81:a4:22:e0:30:a4:3c:84:bd:39:bb:8e:9c:ec:
81:84:52:75:20:d2:3c:d0:ea:58:3f:21:62:7e:d8:
4b:00:06:a1:ff:ec:03:bf:a2:68:f7:3a:c1:88:1b:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:03:74:A6:DF:45:93:3C:3F:10:D2:A9:8D:80:61:34:EC:E1:DF:12
X509v3 Authority Key Identifier:
keyid:D2:57:3E:9C:12:03:B3:70:02:43:00:36:F2:2C:F5:2F:5E:E4:CC:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://testbed.rpki.nlnetlabs.nl/repo/Test/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.cer
Subject Information Access:
Signed Object - URI:rsync://testbed.rpki.nlnetlabs.nl/repo/Test/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:df:bd:79:08:b9:28:78:f1:1e:9a:b1:bb:b0:ca:9c:92:
da:e6:b0:bc:5e:43:21:26:21:1b:8d:e3:f9:10:38:fe:76:eb:
5a:3d:e1:8e:25:20:c7:b9:a3:1d:2a:95:ce:1a:34:0a:3b:b2:
88:8a:9a:a1:f0:7d:6b:b9:25:b2:2d:a3:ca:c7:4a:41:70:09:
35:58:ef:28:89:4d:29:d6:a4:cf:0b:09:6b:54:cb:c6:e0:02:
d3:f2:3a:9c:1a:a3:7b:7c:aa:8e:4b:3f:00:8a:2a:7c:de:10:
d2:fe:7b:b7:31:83:f0:08:bb:14:6b:21:a4:ca:ea:7c:b7:35:
5b:b7:fc:60:79:cd:f6:d3:68:e3:41:ba:aa:fa:e1:e2:a9:d5:
98:83:6a:96:3a:67:85:f1:54:8c:9c:15:53:b5:94:d5:4c:91:
0b:65:f9:20:8a:66:68:7d:bb:60:b1:ed:61:68:dd:2b:d7:2e:
49:7a:30:85:c4:f3:98:0d:94:40:92:fb:38:1d:35:4f:10:c9:
28:71:c7:15:72:7d:a6:3a:ba:2f:64:db:33:1d:0d:9f:59:a1:
a8:59:5f:66:35:b6:e1:a3:b3:17:08:b4:f8:35:13:42:92:5c:
a8:e2:e9:6c:04:f9:ff:e4:69:58:84:3c:3b:59:86:a4:a4:e5:
1b:f0:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:05 2025 by rpki-client