Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141105/5FE7DE56261511E28D36FC9708B02CD2/pBzE8oKMZMMblsQWnmpP_YLiT8I.mft
File: pBzE8oKMZMMblsQWnmpP_YLiT8I.mft (raw, json)
Hash identifier: o+LO0/w3dGBbCfw9SyP3mvXoumCaVv5F+sDiCEWvP88=
Subject key identifier: DC:FF:97:A1:8E:D7:DC:59:44:28:DE:5E:2D:8B:A8:99:4F:E5:AD:2F
Authority key identifier: A4:1C:C4:F2:82:8C:64:C3:1B:96:C4:16:9E:6A:4F:FD:82:E2:4F:C2
Certificate issuer: /CN=A9141105/serialNumber=A41CC4F2828C64C31B96C4169E6A4FFD82E24FC2
Certificate serial: 26D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBzE8oKMZMMblsQWnmpP_YLiT8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141105/5FE7DE56261511E28D36FC9708B02CD2/pBzE8oKMZMMblsQWnmpP_YLiT8I.mft
Manifest number: A319
Signing time: Mon 19 Feb 2024 03:05:37 +0000
Manifest this update: Mon 19 Feb 2024 03:05:36 +0000
Manifest next update: Mon 26 Feb 2024 03:05:36 +0000
Files and hashes: 1: pBzE8oKMZMMblsQWnmpP_YLiT8I.crl (hash: h/GjBsLEgntAR/gh+nsRiRSNXPrOaH0ntJ8MN7BMP/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9936 (0x26d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141105/serialNumber=A41CC4F2828C64C31B96C4169E6A4FFD82E24FC2
Validity
Not Before: Feb 19 03:05:36 2024 GMT
Not After : Feb 26 03:05:36 2024 GMT
Subject: CN=65d2c580-eb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:e7:f4:f8:bf:e5:5a:95:40:b0:60:8a:24:
23:cb:6d:0b:cb:fa:58:ce:7b:4d:30:1c:d7:51:a9:
2b:e5:e5:db:59:bb:72:4c:b2:18:d6:1e:eb:cd:3a:
a5:c3:39:d7:0b:3c:62:b5:68:53:ea:55:a0:3e:dd:
d0:6c:e5:00:4b:bf:e5:40:bc:8f:9e:c9:b0:e9:a0:
27:48:69:20:c4:e1:85:59:65:dc:c1:54:81:38:37:
7a:c7:f2:0a:ef:e2:2a:b6:b9:ff:f6:7d:18:46:52:
af:2b:be:5d:e2:66:34:5a:a4:d1:61:c9:c9:60:61:
3c:a8:b1:bb:70:07:1f:5e:aa:5d:f1:2c:08:69:a7:
0c:0e:28:43:43:eb:e3:4a:d9:56:c3:05:44:68:9d:
e4:42:1e:f4:54:11:53:22:c4:59:af:9d:bc:f5:7c:
cd:55:9f:df:7a:b4:8b:92:6d:6a:88:98:ac:0e:79:
72:10:58:b6:a2:41:12:c3:bb:d7:ea:af:66:9d:58:
ed:b1:be:7e:1c:e5:dc:97:e3:9a:12:19:6e:0f:a9:
84:ae:1a:be:b4:c6:66:b5:78:43:1b:56:da:fa:29:
a4:a2:db:eb:c7:51:8e:05:48:b1:e1:6f:b3:22:21:
bd:01:ea:0f:b1:e3:19:26:ac:98:97:61:85:00:b0:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FF:97:A1:8E:D7:DC:59:44:28:DE:5E:2D:8B:A8:99:4F:E5:AD:2F
X509v3 Authority Key Identifier:
keyid:A4:1C:C4:F2:82:8C:64:C3:1B:96:C4:16:9E:6A:4F:FD:82:E2:4F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141105/5FE7DE56261511E28D36FC9708B02CD2/pBzE8oKMZMMblsQWnmpP_YLiT8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBzE8oKMZMMblsQWnmpP_YLiT8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141105/5FE7DE56261511E28D36FC9708B02CD2/pBzE8oKMZMMblsQWnmpP_YLiT8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:4f:dc:f3:24:5e:6c:63:a4:9d:35:75:e7:4f:a4:d8:f3:fb:
0e:1f:13:f4:f1:3d:56:cd:9a:63:2d:71:ec:5b:4b:76:76:a8:
d7:ad:1b:20:b9:92:7f:ed:62:27:42:1f:b0:06:b8:69:a0:ca:
6a:ef:9f:43:f5:95:f9:e6:0d:a2:ee:fd:ba:72:da:66:cd:e2:
67:02:59:50:c9:c3:f3:49:e5:0f:0c:39:a9:4c:20:1c:96:82:
bf:03:c4:0c:0b:94:08:9b:65:9b:13:92:96:af:38:c2:58:06:
f9:f2:8e:d8:5d:f2:5c:d4:ce:46:6b:77:2a:6d:5e:c9:58:7e:
b3:be:fc:3f:a6:f2:b9:3c:ff:05:7e:d0:c1:3a:0e:16:9f:bd:
80:42:b1:fa:40:db:a3:53:70:a6:92:7b:98:99:17:ab:5c:cc:
83:b5:53:54:b6:25:e4:19:6b:4d:6f:2a:bc:85:8a:5e:08:30:
01:29:2e:ce:07:71:06:92:e3:53:a4:7b:ad:54:41:8e:b6:a7:
97:a1:e4:e2:28:f4:a5:f2:b6:27:72:f0:9f:5b:fb:79:98:e0:
27:53:19:e6:51:9c:01:db:83:97:50:39:8f:03:f2:88:c2:10:
3b:c5:1b:c5:51:93:6f:23:55:f1:ab:4d:4b:56:44:fa:62:02:
4e:70:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:16:53 2024 by rpki-client on console-fra.rpki-client.org