Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft
File: NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft (raw, json)
Hash identifier: VMO7OUr9AbsS0K5KapoMatqs8fh1g4U9nCtBJdU1lyU=
Subject key identifier: A5:04:63:14:54:E0:9A:D4:19:23:F0:63:E4:AE:D5:B7:B9:46:6F:50
Authority key identifier: 34:0C:BE:BA:F3:30:7B:44:A0:B7:01:97:6E:3C:23:B7:9A:4C:D1:D7
Certificate issuer: /CN=A9111C04/serialNumber=340CBEBAF3307B44A0B701976E3C23B79A4CD1D7
Certificate serial: 0477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAy-uvMwe0SgtwGXbjwjt5pM0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft
Manifest number: 0474
Signing time: Tue 12 Dec 2023 08:00:38 +0000
Manifest this update: Tue 12 Dec 2023 08:00:38 +0000
Manifest next update: Tue 19 Dec 2023 08:00:38 +0000
Files and hashes: 1: NAy-uvMwe0SgtwGXbjwjt5pM0dc.crl (hash: 79GAV87VHB5e4iUP+fFUq4nuyrGtZwWjb6hKmcIOxFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1143 (0x477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111C04/serialNumber=340CBEBAF3307B44A0B701976E3C23B79A4CD1D7
Validity
Not Before: Dec 12 08:00:38 2023 GMT
Not After : Dec 19 08:00:38 2023 GMT
Subject: CN=65781326-217c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:9b:ba:ad:b8:96:9e:27:7f:06:92:0d:f7:
48:3b:b3:f9:38:4b:f7:42:f5:65:48:5a:c9:71:0e:
a3:e4:75:48:e7:5a:4f:b7:d2:fd:81:60:3d:b2:5b:
10:e7:61:17:95:3d:7c:c0:93:c7:7c:e6:51:99:15:
cc:eb:39:62:6b:a3:69:29:81:a3:c7:50:91:99:12:
1a:bb:4f:4b:21:86:8e:7f:b2:1b:04:28:63:36:25:
d8:6c:ff:f9:f9:65:5d:ba:34:0f:d6:8a:a7:2b:26:
ab:d0:38:9f:43:17:d8:2e:87:64:2e:1e:65:26:9b:
6c:fd:ff:02:07:71:34:0c:76:1f:01:a1:b9:a5:da:
12:c7:76:51:0c:1e:ce:6d:1c:d2:46:b4:f6:71:41:
b9:c6:9d:8c:0c:c6:b3:5f:74:e9:7e:d3:3f:4f:97:
29:3c:d4:a5:f0:6b:26:b4:ea:83:f1:38:e7:96:a9:
34:14:92:69:de:c1:ee:80:be:bb:e9:f6:19:a4:91:
84:85:77:7c:ec:b3:e6:27:14:ac:13:35:b6:54:72:
af:6c:aa:f9:b1:a1:f9:b9:e2:27:e1:46:e5:ae:2e:
c3:50:2e:90:aa:2b:b9:ab:6d:cd:28:11:66:dc:5e:
5c:f8:11:e7:0f:6a:67:a4:21:82:7e:ae:d2:99:cf:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:63:14:54:E0:9A:D4:19:23:F0:63:E4:AE:D5:B7:B9:46:6F:50
X509v3 Authority Key Identifier:
keyid:34:0C:BE:BA:F3:30:7B:44:A0:B7:01:97:6E:3C:23:B7:9A:4C:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAy-uvMwe0SgtwGXbjwjt5pM0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1e:21:9a:41:14:f0:9b:e8:a8:b1:89:80:c4:8b:9b:c9:11:
22:9f:8c:71:0f:9c:db:6b:3b:d2:d6:94:62:55:a2:df:49:93:
4a:5b:e7:b6:cd:99:8a:63:98:a1:fa:86:a2:a2:f2:2a:00:18:
8b:71:86:aa:bf:90:fe:2f:f0:92:7b:f3:f1:7a:7b:8b:28:0e:
b0:fb:1f:3e:0a:44:ab:34:cb:59:44:04:4b:dd:d0:02:af:7e:
91:d5:70:67:2f:b5:46:9d:3e:86:6a:16:f2:0d:1c:b5:61:18:
91:95:11:e8:50:56:2f:9f:55:4a:4f:66:df:bd:3f:c0:cb:7b:
7c:d2:07:ee:32:52:9b:7a:2e:cd:37:49:6a:9c:1e:24:cc:57:
66:23:0d:f1:92:e8:8c:83:b8:eb:fe:84:66:19:23:c8:ae:45:
4e:ef:dc:ca:0a:01:bc:01:2b:ca:2a:0a:75:7c:f9:b2:cf:2b:
09:09:4a:ca:61:08:b5:cc:8c:c2:a3:10:1a:2b:6a:83:8f:24:
9e:7b:2a:b2:62:b9:b4:6e:69:18:12:0f:23:02:93:ef:d4:b4:
11:c6:0d:85:92:de:2c:d0:3f:79:93:e4:13:74:d3:fe:81:73:
93:35:9f:c9:cc:56:81:dd:9d:0a:b1:b3:ee:b3:bf:95:79:0b:
73:42:10:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org