Manifest
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json)
Hash identifier: sNhiK9ffngT0Ptyj+31/688NoKGFh/c+rO4J63nDdWo=
Subject key identifier: C8:C6:D2:A9:08:A0:28:E4:51:8B:CE:8D:CD:00:91:31:D7:B7:EA:F3
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial: 7340997788689CFFB5B6ACCE834FA2F924E1E1B4
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
Manifest number: 0130
Signing time: Thu 19 Jun 2025 10:01:09 +0000
Manifest this update: Thu 19 Jun 2025 09:56:09 +0000
Manifest next update: Fri 20 Jun 2025 12:06:09 +0000
Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=)
2: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=)
3: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=)
4: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=)
5: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: f53HglsFC29/ZkeYp7lc1WClbeX6xHEvbfZlr1bO5V0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:40:99:77:88:68:9c:ff:b5:b6:ac:ce:83:4f:a2:f9:24:e1:e1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
Validity
Not Before: Jun 19 09:56:09 2025 GMT
Not After : Jun 20 12:06:09 2025 GMT
Subject: CN=C8C6D2A908A028E4518BCE8DCD009131D7B7EAF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:ac:25:3b:72:f3:66:cc:d0:8d:1f:92:73:
be:38:f1:1c:b2:89:24:cc:08:83:2d:77:06:3d:ab:
97:b3:45:0a:55:ba:03:db:8c:a4:96:b4:c0:8e:bc:
c0:a3:d3:2b:62:9c:fc:22:35:01:59:43:fd:84:e2:
8d:99:cd:0a:8c:e6:ec:72:d9:9a:c0:f3:be:a0:4c:
bb:b9:c2:28:d3:75:dc:87:ea:e5:de:95:f3:29:b9:
f3:e5:10:65:4a:e0:55:78:ce:e3:eb:ae:c1:22:1c:
c7:f3:e1:58:80:a3:f7:f7:f6:0f:83:28:2d:d4:0c:
e6:57:f1:1e:1b:f1:3b:c9:71:fd:c1:f8:e7:2a:55:
e1:0c:20:25:0e:4d:28:09:a8:9f:dd:4d:77:9e:b0:
37:5c:83:49:b8:fa:20:5f:00:a8:81:cd:27:50:a9:
83:07:f2:9e:dd:8d:f1:84:66:53:a5:09:0d:72:36:
1d:71:5b:3f:d4:89:4b:74:09:5b:92:bd:59:53:68:
67:8c:b4:00:2b:6e:80:63:b2:45:e2:91:90:be:9f:
b7:bc:59:25:97:5f:51:84:f9:dd:7d:17:3a:71:33:
c1:4a:6d:67:51:53:be:dc:28:c0:f1:ea:38:70:9e:
f6:4f:41:bb:38:d0:81:bf:27:31:aa:ae:9c:b0:77:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C6:D2:A9:08:A0:28:E4:51:8B:CE:8D:CD:00:91:31:D7:B7:EA:F3
X509v3 Authority Key Identifier:
keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:1f:4e:bc:1c:38:92:a4:ee:34:16:6c:16:91:35:d8:5c:e5:
85:fa:2c:3c:8f:1e:1a:75:55:72:62:fc:ca:57:6d:3f:8d:fe:
92:91:a0:cb:e6:28:8d:27:6f:53:02:fc:f9:fb:92:9c:bb:ed:
3a:5a:93:1c:a3:9c:e7:85:98:d6:38:0d:1e:9a:9d:23:2b:40:
8c:dd:81:75:fe:e1:fe:24:7b:01:92:e1:98:a9:97:ab:a5:93:
80:05:7f:04:50:5e:21:42:30:e3:d2:11:fc:eb:d6:43:7c:3c:
86:9b:bb:22:70:5b:b6:57:5d:f0:04:8a:bd:4c:7c:a7:44:a8:
b1:cc:70:6c:9b:00:c7:81:28:7e:e2:e5:5c:7a:b9:cc:47:37:
6d:0a:9f:53:6f:cf:e0:4f:c0:37:25:85:f1:0b:16:37:6b:c2:
41:e5:5c:6c:fc:de:37:b4:a1:55:23:3b:0d:8f:9c:8f:ce:bd:
8d:92:8e:ca:ff:1c:70:76:1d:d5:5c:c7:b6:7b:65:b8:ab:e0:
71:ce:e3:23:ca:38:0e:47:bd:a1:88:06:90:eb:f4:e2:1a:b0:
67:45:c9:b1:cf:cf:46:3b:83:61:4a:d0:78:2d:2a:45:eb:c8:
94:7c:6f:5c:ad:fa:e1:78:36:fd:c4:0f:7d:c8:76:c8:c7:b0:
92:c0:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:52:32 2025 by rpki-client