Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft
File: 5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft (raw, json)
Hash identifier: M4poecWoiLmdt+eFT4shiK+g2ewkchh4+1nstuBhSdY=
Subject key identifier: 52:09:87:A1:BA:2A:FB:3E:6F:23:83:84:00:B5:7C:27:DB:6C:FA:38
Authority key identifier: E6:30:C2:13:FB:3F:B1:60:60:7C:BB:E5:C0:69:07:C0:BE:C4:C5:F8
Certificate issuer: /CN=A91395A9/serialNumber=E630C213FB3FB160607CBBE5C06907C0BEC4C5F8
Certificate serial: 141E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jDCE_s_sWBgfLvlwGkHwL7Exfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft
Manifest number: 1B5E
Signing time: Fri 09 Aug 2024 08:34:08 +0000
Manifest this update: Fri 09 Aug 2024 08:34:07 +0000
Manifest next update: Fri 16 Aug 2024 08:34:07 +0000
Files and hashes: 1: 5jDCE_s_sWBgfLvlwGkHwL7Exfg.crl (hash: TA6HUKLPI2fZOvjc2+2ugfD/8Bi+U0P1Dm/mmNOe7zs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5150 (0x141e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91395A9/serialNumber=E630C213FB3FB160607CBBE5C06907C0BEC4C5F8
Validity
Not Before: Aug 9 08:34:07 2024 GMT
Not After : Aug 16 08:34:07 2024 GMT
Subject: CN=66b5d47f-499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:49:fe:0b:c8:d9:57:f1:98:aa:86:38:ea:
86:9d:3b:4e:8a:b2:87:ea:9d:cd:7a:1f:bc:6d:bf:
af:3f:f7:50:b5:b1:9a:06:2d:64:98:f9:44:74:db:
86:a7:c1:11:df:3c:39:6d:c9:4d:df:cf:16:12:e1:
a6:92:e5:c3:bf:47:69:e0:90:f3:1e:a3:81:7c:6f:
1d:19:84:3f:09:c6:2d:c3:7c:34:a1:57:ea:b9:fe:
7c:bc:f7:a9:f2:1f:c2:29:08:16:e1:14:c0:00:ba:
df:91:6d:7b:e6:8e:67:ff:cf:7b:25:72:fd:0c:90:
ab:d6:56:8f:e9:86:df:79:16:36:5d:e7:ed:29:c9:
d9:1d:42:1a:e7:a7:f3:99:62:45:ad:30:dc:0e:cf:
4f:47:60:0e:61:a9:08:9c:51:95:e8:cc:c3:4d:5e:
86:34:66:91:4f:7c:2c:c8:46:1b:f3:9d:c8:ae:50:
a1:e8:a6:ec:45:8b:56:dc:d4:93:d5:98:bf:86:9e:
08:c0:df:ce:2c:13:37:0f:ca:29:b5:56:2a:f6:d1:
cf:64:98:1c:97:4b:43:9c:f1:2b:c2:b4:87:d6:2e:
11:01:87:1a:87:58:2c:41:e1:27:98:7f:30:25:a8:
dc:61:fe:94:33:01:66:33:41:73:12:48:ee:85:a1:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:87:A1:BA:2A:FB:3E:6F:23:83:84:00:B5:7C:27:DB:6C:FA:38
X509v3 Authority Key Identifier:
keyid:E6:30:C2:13:FB:3F:B1:60:60:7C:BB:E5:C0:69:07:C0:BE:C4:C5:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jDCE_s_sWBgfLvlwGkHwL7Exfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bd:8c:a8:b2:7b:82:cf:66:57:3a:10:63:6d:80:b7:b9:dd:
1a:76:ba:03:8a:2d:a3:6f:47:3b:6a:35:de:be:2c:d1:a4:7a:
79:7f:2a:27:78:9c:01:fd:2c:8f:65:f4:34:43:cf:74:d1:2f:
a9:ea:54:5a:d5:e7:48:82:07:58:b6:b0:a5:28:19:94:3b:4c:
3b:85:31:83:c6:68:3b:08:bd:58:ac:67:4b:fd:fa:a3:d0:ac:
31:fe:bf:01:61:a2:a0:1b:15:6d:4c:56:64:88:ee:d4:d5:e2:
c6:85:27:66:af:28:8a:a3:1f:5a:17:e7:b9:ea:5d:6f:b5:d4:
26:78:ba:37:37:df:8c:17:f3:1b:8e:4d:04:c7:2b:47:21:7d:
d8:68:5f:55:91:7c:c1:98:b4:9c:98:46:7c:2b:49:85:08:91:
71:c5:a0:6e:eb:27:ad:68:be:69:22:37:55:87:31:13:b9:ef:
b6:6a:72:e2:21:66:4c:c9:d8:2b:1f:b6:3a:85:d1:a8:1a:08:
91:17:d2:cc:26:c0:d0:25:d3:4a:a7:f9:1f:c0:0a:d7:f1:4a:
4f:04:80:8a:b9:c8:8b:aa:48:fe:74:26:24:df:b5:a9:f1:33:
18:ce:1d:94:0a:76:70:23:e1:05:3b:83:1a:23:68:de:c8:18:
53:82:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 16:17:44 2024 by rpki-client on console-fra.rpki-client.org