Manifest
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.mft
File: BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.mft (raw, json)
Hash identifier: cU2y2bEwFZw1hfy14VvQ9P+zHkvXkxrYsV+jHlBpI6g=
Subject key identifier: 8F:2C:86:87:92:C1:F6:1C:3B:B5:81:F6:58:CD:06:A4:A7:F2:68:60
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 0FBA7BA6CA53EF26AA61656D666BA4D9630F2022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.mft
Manifest number: 10
Signing time: Mon 10 Jun 2024 10:40:30 +0000
Manifest this update: Mon 10 Jun 2024 10:35:30 +0000
Manifest next update: Tue 11 Jun 2024 12:53:30 +0000
Files and hashes: 1: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: Z70CPEektgfmX8eIKoMccTZ21BHVIK93uxwBxGRQ0XA=)
2: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: iophDwDgs9y+WYPAPaxOT+D0RgjlxHssciwTI2lGWd8=)
3: E41BCEA352405B7C6BE2D2B77E3632961599906B.cer (hash: 0IEDZ6pcYpAnSWRrXBMIoWkU5znA9TVnMiZKIWhzwq8=)
4: 326130343a623930323a3a2f33322d3332203d3e203136353039.roa (hash: Ip9qABlaQRRcahNUgQ/S9hKzk3FSwCe3Pxs6QYKBqgY=)
5: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: AlwPBd2C9Yu5vG0rOjPT7xDEEtT3Ii+2VZQH9UIkNA8=)
6: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: ETkYm7XBanKB9uFcZ1Ai9QZqd6f4qrL1Tym4Nlm01Uk=)
7: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: y/QRFgvgQfHgkmzfM5jlDGeU+sMShq9Ep/iXYCi4F7U=)
8: 326130343a623930323a3a2f33322d3332203d3e203134363138.roa (hash: uB+AlpnwKNM3c/KfEaqYQkFzR0QW5crgxFiup5Rvqvk=)
9: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: TSd9HO9dq+dko6+xrgx3dRMjvv8mgD0SQRJo3c3FGKU=)
10: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: DeisEUsahtJQlYV8kMyKAgce4buKaBDFvpBTI3M7aX4=)
11: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: sGm1Uy5Kg7UjwIwoGM6aQ6I36A7RyK74tNzmyFMDAHI=)
12: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: /pb0PYp6O1CVxS6SLgEQq8RB/bx/07fB/VMiQwxZHK0=)
13: 326130343a623930353a3a2f34382d3438203d3e203134363138.roa (hash: QVouV/Y6E4B6LpG60NAIOswIMVu3jQoivlzC4oL37bc=)
14: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: Or0D39uTICQMGVW7AoiHxJZQwiyoZ2NdLV1Dzi/0pCs=)
15: BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl (hash: aJQ2V45Zf3lQ19g2F3dukSd0ux4QSXEXDnlPeDr705s=)
16: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: NFu1M8jrUmC2CVFR9DfPzBrBPHJkYSipVLf4gO4io10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ba:7b:a6:ca:53:ef:26:aa:61:65:6d:66:6b:a4:d9:63:0f:20:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:35:30 2024 GMT
Not After : Jun 11 12:53:30 2024 GMT
Subject: CN=8F2C868792C1F61C3BB581F658CD06A4A7F26860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:1e:d2:29:50:0b:c7:ef:95:9a:bf:cf:ef:
5f:ca:7f:cd:0b:0d:a6:d2:ce:cb:20:ec:bc:5d:80:
51:25:2f:6c:1d:e0:b9:a0:8f:45:9e:23:09:8a:02:
10:8d:e6:dd:f6:59:de:e5:b1:4b:41:8b:02:f3:29:
46:49:3b:a7:7d:b2:08:58:1e:dc:b9:5b:ad:be:68:
2e:c6:42:7d:d4:b6:a5:e8:ca:12:51:98:49:ae:8f:
c1:58:0a:b9:39:96:68:a2:fa:87:76:00:92:12:8c:
92:be:f7:34:61:7f:ef:c3:0e:93:87:06:68:85:b2:
a0:62:d0:71:dc:0b:ec:26:21:67:09:e4:2c:3f:0a:
68:88:4b:91:77:b8:e6:9f:49:1e:c5:e8:c9:32:97:
52:3f:3c:cd:48:45:af:18:a9:bf:94:36:cf:2e:21:
bd:09:0b:55:b4:0d:0f:24:b9:6a:c0:12:28:a0:a8:
d5:9d:13:6c:6d:02:31:9e:1e:de:60:42:52:0d:57:
b5:5f:a2:91:60:fa:68:e9:97:7b:1b:67:1f:5b:e4:
44:a3:28:34:fc:8f:b1:df:50:72:4f:73:65:b7:20:
2c:58:07:ca:0a:9e:d8:3a:43:99:46:61:ed:f2:72:
81:7e:85:f9:3e:b8:95:f3:ed:41:6f:06:60:2f:aa:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:86:87:92:C1:F6:1C:3B:B5:81:F6:58:CD:06:A4:A7:F2:68:60
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:75:cf:70:82:41:df:3e:14:5d:96:cf:d0:1b:cd:e1:a8:84:
4d:f3:05:71:a7:96:57:b5:28:d6:b7:9e:94:40:50:07:59:f3:
98:c9:5b:c0:cc:96:38:7d:cd:2e:df:b8:c3:e6:91:d9:e9:6c:
1f:0b:1f:ac:91:d6:0a:6f:b5:90:f6:0c:a1:b3:27:9a:ce:13:
8a:83:c9:33:c8:63:df:5b:45:74:b6:eb:6e:84:ab:d6:d2:52:
8c:25:49:18:94:bb:eb:89:1f:92:fd:cc:d3:e5:30:51:72:67:
24:10:9a:38:a2:65:bf:6c:96:84:af:d1:06:2a:9d:a9:a6:47:
e2:f6:f0:2d:82:ea:79:c1:57:d5:fe:c1:e1:fb:64:0e:10:4f:
50:c2:9d:69:04:08:59:d9:fc:69:19:2a:16:1e:36:cb:9c:6e:
03:46:1d:16:ef:34:27:62:ec:28:59:58:d1:79:c7:f9:65:09:
2a:dc:5e:1d:0a:49:a3:96:3d:bc:94:25:d5:f4:52:1a:19:8e:
42:ac:34:0a:47:b7:af:1a:3f:92:ea:bc:01:22:20:ca:c5:62:
5c:80:4d:1c:8c:d1:02:73:78:e7:3c:8c:44:e6:3d:e9:08:21:
bc:de:66:bc:85:1a:cb:6e:ee:a6:f4:48:08:d1:34:38:28:39:
19:34:46:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:53:31 2025 by rpki-client