Manifest
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier: s9FjMOamcdqMHlfb0MguKN+XhIwTzbfZr8S1uEaLLSQ=
Subject key identifier: B8:4F:99:47:BC:9E:71:EC:C3:E4:6E:2C:32:E9:1C:6E:A7:39:D4:97
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 20A48491CE07801C74219A2725DA781317E3A8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number: 30
Signing time: Fri 31 Jan 2025 07:02:31 +0000
Manifest this update: Fri 31 Jan 2025 06:57:31 +0000
Manifest next update: Sat 01 Feb 2025 10:38:31 +0000
Files and hashes: 1: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=)
2: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=)
3: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=)
4: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: T6YuZwC1HcfCO/MPHw8JGur5mcym5kDu4ibXjNeAEB0=)
5: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a4:84:91:ce:07:80:1c:74:21:9a:27:25:da:78:13:17:e3:a8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Jan 31 06:57:31 2025 GMT
Not After : Feb 1 10:38:31 2025 GMT
Subject: CN=B84F9947BC9E71ECC3E46E2C32E91C6EA739D497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:3f:4c:12:9e:5e:cb:cc:2a:81:c6:4a:74:
33:09:71:27:39:19:3c:f6:68:4e:3f:ba:2a:0a:5f:
5b:19:83:ad:91:ac:5c:8c:ac:f7:e0:9f:bf:b3:da:
86:d6:cb:1d:c8:6a:8f:23:fb:4b:0a:7d:18:b9:6d:
31:4f:3f:b5:1d:24:4b:6b:19:58:9a:27:f5:8c:5d:
64:5c:da:dd:4b:8e:2b:db:e2:e8:58:35:f7:c4:a7:
7d:44:0b:d0:47:89:da:04:d9:48:61:bf:59:6e:18:
91:61:3e:b6:41:da:c7:4d:0e:f1:d0:08:2a:48:48:
2d:2f:62:9b:56:8d:94:2f:d5:b0:f2:6b:8d:72:29:
16:5d:60:43:6e:51:6c:09:65:65:39:f0:48:85:08:
7c:fb:ff:82:b6:f1:0d:8e:46:70:b8:5a:76:b5:8a:
47:31:95:63:f5:71:01:99:06:e9:e7:38:2e:ec:58:
75:d1:9f:b3:fe:fe:cc:24:9b:b0:e0:89:44:bf:cc:
ad:fc:b5:b7:d8:03:60:f6:e3:ca:6a:26:4f:d8:e0:
1a:74:8a:31:56:5c:cb:06:fc:46:75:5e:eb:8d:8d:
e6:05:c1:6c:21:b5:78:89:6d:c7:ed:c6:69:0c:67:
5b:10:ad:c6:54:79:f4:00:55:f5:f5:42:23:83:c1:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:99:47:BC:9E:71:EC:C3:E4:6E:2C:32:E9:1C:6E:A7:39:D4:97
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9e:bf:7c:48:35:48:f8:b0:46:4c:15:dc:9a:6d:12:4a:02:
71:3b:79:3f:2a:28:d4:37:a3:e8:e7:10:06:78:35:a6:37:6e:
8b:15:51:7a:7b:23:1c:11:60:cc:a0:4a:9f:50:74:01:92:ae:
f6:09:c9:37:0e:8b:dc:b3:c0:52:84:fd:48:fc:e9:02:bb:5a:
c9:15:f0:14:fd:c5:83:e3:8f:51:9b:94:a5:e6:07:b2:95:44:
94:a9:11:af:3c:51:49:0d:99:be:32:c9:61:82:d5:08:08:cc:
d3:14:eb:07:7c:73:66:b4:c5:1c:bd:77:d5:67:9b:85:c2:b4:
90:0c:9c:3e:43:d9:b8:b3:54:21:69:3c:b0:b8:75:cf:4f:2d:
0c:69:f1:26:d2:33:f4:1d:c7:9d:cc:91:0c:4f:be:4f:7c:12:
a5:69:9d:84:b7:59:5d:6b:6b:02:a1:ff:b8:8d:e4:22:eb:8d:
50:46:17:63:cd:87:a8:78:a7:60:97:8b:a2:f5:69:30:24:0e:
d0:8d:30:2c:71:5e:44:7d:1d:86:e5:63:15:df:87:4a:ea:a1:
ad:ff:ee:d1:1b:de:f8:7e:16:27:2f:c3:23:50:6b:ac:63:2d:
9c:94:3e:ed:ed:6c:d2:3e:56:56:99:10:88:9f:6d:c4:c3:ea:
e9:b3:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:20:38 2025 by rpki-client