Manifest
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json)
Hash identifier: 66GKkZO8RfRu8vFMsR+WeKWfPyoVZom96FpNFC8ylDo=
Subject key identifier: 79:39:F1:6A:19:B7:33:D8:C9:A1:E6:5D:DB:8F:5E:60:41:58:6A:00
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial: 77BC14FCD14BA036900B62CB5BFA5677A63F3049
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
Manifest number: 43
Signing time: Fri 31 Jan 2025 12:34:35 +0000
Manifest this update: Fri 31 Jan 2025 12:29:35 +0000
Manifest next update: Sat 01 Feb 2025 13:02:35 +0000
Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: 0trP0UvkooKRqGSnthoJRGEXi79yyTJ30gh0xJfX8DI=)
2: 34352e3133322e3139302e302f32342d3234203d3e2033393730.roa (hash: ZvFIRI5Y2rVZcFk84QTgqRybDF5ljbI4FjwVY0yfJVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:bc:14:fc:d1:4b:a0:36:90:0b:62:cb:5b:fa:56:77:a6:3f:30:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
Validity
Not Before: Jan 31 12:29:35 2025 GMT
Not After : Feb 1 13:02:35 2025 GMT
Subject: CN=7939F16A19B733D8C9A1E65DDB8F5E6041586A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:40:51:71:06:f9:fa:00:fa:b0:2e:19:50:
64:d2:65:ab:1f:a0:f2:6e:e7:52:02:91:c6:11:8b:
73:96:ae:be:77:0e:74:ff:e0:66:10:d3:be:e5:ff:
08:3a:4e:df:8c:94:6c:83:4e:b6:de:c2:69:6a:bd:
82:76:a0:c1:83:aa:ed:13:68:ba:1a:7a:3c:0d:77:
32:96:f4:8b:33:84:26:82:09:d9:d0:33:a9:14:55:
ba:d2:07:71:31:9f:c0:5a:a8:13:e0:39:1e:8d:22:
9e:4a:00:06:f8:e4:82:5e:f4:ce:e1:9b:d2:7d:72:
d1:e9:88:ce:5d:02:82:be:c5:3a:cf:61:27:8e:82:
c4:f3:1a:1c:ca:17:53:6f:b1:19:0d:2b:33:12:23:
c9:b1:ea:7e:be:40:19:f2:ec:a5:53:0a:d0:5b:a5:
6d:70:ff:ea:af:2a:00:20:84:54:18:9d:13:9a:d1:
53:bb:30:7f:03:9c:96:a3:36:44:35:48:7a:6c:92:
1b:1a:9f:91:f7:e6:70:54:64:48:a5:51:37:72:a1:
8c:66:4e:e6:d9:0a:9d:4c:8e:1d:16:f8:16:40:f6:
42:eb:61:9b:94:d0:dc:39:79:dc:fa:cb:50:0f:60:
58:20:9a:40:bc:a8:67:67:7f:7d:d6:ee:5b:19:5f:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:39:F1:6A:19:B7:33:D8:C9:A1:E6:5D:DB:8F:5E:60:41:58:6A:00
X509v3 Authority Key Identifier:
keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:60:2a:97:56:7b:ed:c4:04:2b:6f:9d:93:6a:59:c0:45:36:
dc:b2:87:df:b7:72:b7:0c:2e:46:2e:70:e3:d7:ec:bc:87:e8:
b7:24:0a:9d:f8:86:9a:fb:12:ac:76:4f:de:c6:fc:47:9e:bd:
df:c7:35:7d:96:4a:25:17:54:e0:1f:2c:f4:07:f6:24:24:ed:
98:52:07:12:d7:23:44:98:65:8a:fb:1d:9d:a5:10:aa:b7:e1:
58:b7:b4:d3:38:73:07:30:9b:1b:67:b8:ee:25:3a:37:fd:f0:
64:52:b8:a3:98:dc:7e:2e:77:75:6f:04:0d:4a:de:24:93:01:
f9:6c:36:b2:17:4b:8f:78:eb:d8:a9:70:fb:b4:37:20:be:d9:
9c:19:1a:b0:ac:93:61:f5:91:3c:0f:41:4f:33:f4:e4:83:34:
de:2c:1a:15:83:26:80:a7:0a:1b:68:21:9d:75:c6:89:a3:5a:
8a:9a:14:79:22:23:d8:64:54:51:fd:09:73:f7:a0:7a:62:04:
c9:f8:60:53:87:46:19:9e:a0:73:a0:db:17:47:68:54:72:a5:
68:12:a6:14:ab:06:3e:66:5b:3f:d7:e8:31:49:ee:d4:36:70:
39:66:c3:8b:da:a4:b2:8a:e2:46:24:5a:3d:b0:08:7d:4e:9a:
f5:1d:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:56:03 2025 by rpki-client