Manifest
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft
File: B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft (raw, json)
Hash identifier: a8bFk0wAaBzEU+neKmEvvLLqHlHnWSLSepEHxEZysIs=
Subject key identifier: 51:52:BE:87:B2:DE:F9:95:78:33:25:1D:F0:FF:E0:64:B1:6C:7B:DE
Authority key identifier: B6:05:61:DF:FB:FD:E2:55:FE:C1:4D:4D:9F:0E:13:F4:37:53:52:E4
Certificate issuer: /CN=b60561dffbfde255fec14d4d9f0e13f4375352e4
Certificate serial: 56D0460AA25E2E7F4C660E108654653A7B4A52DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 14:47:32 +0000
Manifest this update: Fri 31 Jan 2025 14:42:32 +0000
Manifest next update: Sat 01 Feb 2025 14:52:32 +0000
Files and hashes: 1: 323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa (hash: mqadfIJnOHBwBW3bzOjsszkG4yNmowPDrD6AKDG5B1Q=)
2: B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.crl (hash: 8vkuc/Qix/Dgj9Z1eHZORZADAOG4ul2rnI60cpq2qfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d0:46:0a:a2:5e:2e:7f:4c:66:0e:10:86:54:65:3a:7b:4a:52:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60561dffbfde255fec14d4d9f0e13f4375352e4
Validity
Not Before: Jan 31 14:42:32 2025 GMT
Not After : Feb 1 14:52:32 2025 GMT
Subject: CN=5152BE87B2DEF9957833251DF0FFE064B16C7BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:2b:50:8f:98:8b:af:0c:48:a6:0b:34:4e:
94:cc:d6:95:95:1c:84:de:e3:e1:66:94:b0:fb:4a:
38:a0:33:08:f1:d2:70:16:11:73:03:ef:df:ac:86:
c5:cc:f6:9f:d3:14:3c:51:a6:50:c2:90:ed:c0:be:
60:e2:f4:92:bf:fd:a9:3b:69:07:16:ba:e7:87:90:
97:95:18:1d:9f:8d:ba:9b:10:11:08:fa:84:a9:3c:
1c:75:99:52:10:a6:76:ca:09:4a:9d:b3:5f:f5:31:
45:26:0d:ed:0e:8f:b4:50:6d:5a:9d:08:71:53:8c:
68:e0:05:4a:6b:ec:d7:a0:eb:62:b0:e5:e3:73:0f:
18:74:4f:f2:3b:12:4e:1b:94:18:bd:a3:71:28:77:
47:25:ec:72:0a:b6:ad:8c:e1:36:bc:17:cc:b3:b2:
4a:a9:95:54:5b:34:80:bf:64:e4:62:65:02:f1:43:
66:ef:45:77:33:37:06:3e:88:e6:91:18:15:14:a4:
f0:56:ea:b8:10:af:d7:55:eb:59:f0:c7:fc:4f:d6:
88:6f:e8:a0:47:56:31:3a:ac:e8:53:17:9f:5f:5a:
be:67:60:31:76:24:5d:67:55:f0:24:b3:21:91:b1:
29:47:16:b5:21:17:26:7f:d5:68:be:84:68:e6:10:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:BE:87:B2:DE:F9:95:78:33:25:1D:F0:FF:E0:64:B1:6C:7B:DE
X509v3 Authority Key Identifier:
keyid:B6:05:61:DF:FB:FD:E2:55:FE:C1:4D:4D:9F:0E:13:F4:37:53:52:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:1a:16:81:23:cb:ae:6f:dd:fa:df:56:87:0c:0b:28:0b:
69:ea:ed:da:25:fb:ec:65:2c:f2:ee:17:c2:bb:f9:ca:12:3f:
0a:23:8a:7a:65:61:24:25:1e:5a:67:83:2d:79:07:32:4e:0a:
ee:71:63:7b:0d:dc:45:d6:4f:47:a1:6a:e2:47:f5:9f:ed:37:
40:3a:52:df:6a:0d:ab:5a:f1:75:10:9b:47:c2:50:e0:b1:d0:
36:25:c7:1f:d1:67:1a:cc:e3:56:30:98:ff:03:e0:5e:7b:f7:
4c:64:8c:23:1f:51:2a:76:17:68:d0:f6:8e:e6:0d:2a:fe:0d:
7f:c1:41:66:6a:90:08:c0:cb:70:39:c5:a8:bc:0d:9a:75:a7:
da:3d:56:b2:3c:2e:98:5e:3a:ae:68:0e:f5:ac:8f:f0:6a:bd:
ee:d4:80:b1:9e:a3:45:57:60:ec:31:da:04:50:d8:f8:41:8c:
ef:61:13:39:73:80:1c:f7:a3:92:18:65:69:f5:89:0a:b6:e9:
d1:5f:d7:bb:c8:1c:59:62:ab:2b:58:85:80:63:53:96:1b:22:
4e:30:f1:64:b0:4f:59:55:0a:94:6a:28:7e:84:95:b8:c1:0b:
e8:1a:ab:f5:c5:c8:2b:5c:b7:af:18:89:45:c8:ab:c2:84:eb:
76:62:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:52:26 2025 by rpki-client