Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft
File: iSLa1s2vuw1ZctFjcXErJPkxe-U.mft (raw, json)
Hash identifier: bwxzWHVh/4TLx8ByjB6rs3tExe8w5fLeUOCEytJxOxU=
Subject key identifier: 0F:AB:19:7F:0A:0E:FC:44:71:73:D2:2E:45:9B:B6:62:02:15:83:1F
Authority key identifier: 89:22:DA:D6:CD:AF:BB:0D:59:72:D1:63:71:71:2B:24:F9:31:7B:E5
Certificate issuer: /CN=A91475BA/serialNumber=8922DAD6CDAFBB0D5972D16371712B24F9317BE5
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iSLa1s2vuw1ZctFjcXErJPkxe-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft
Manifest number: 23
Signing time: Sun 10 Nov 2024 20:35:20 +0000
Manifest this update: Sun 10 Nov 2024 20:35:20 +0000
Manifest next update: Sun 17 Nov 2024 20:35:20 +0000
Files and hashes: 1: iSLa1s2vuw1ZctFjcXErJPkxe-U.crl (hash: uzp0+GfCo2Mx2kmk9wqzBSk4M6Uq804pZ63P+ehxieU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91475BA/serialNumber=8922DAD6CDAFBB0D5972D16371712B24F9317BE5
Validity
Not Before: Nov 10 20:35:20 2024 GMT
Not After : Nov 17 20:35:20 2024 GMT
Subject: CN=67311908-05a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d4:1f:1e:c6:28:4b:78:bf:cc:d8:51:da:d2:
a7:bd:ee:89:61:0e:09:98:07:e5:e2:37:a1:d1:be:
b6:95:15:53:1e:3b:26:4a:73:e6:50:fb:08:c5:f2:
68:0b:27:35:fc:48:01:c1:b6:ad:bf:b7:0a:84:8d:
f3:22:60:8c:15:ce:37:ff:92:ce:3f:f8:e2:2d:77:
2a:96:24:9f:e9:3a:b6:47:db:04:ce:9f:57:fd:7c:
5a:a4:18:c9:4a:84:8a:0f:9d:35:67:8f:e9:8e:c9:
de:64:d0:8f:e0:37:d8:e2:5b:31:e3:81:bb:4c:48:
b8:b9:24:d6:a5:22:f6:04:f5:a9:9a:6e:f9:73:a7:
a8:31:4b:15:0f:5f:24:50:57:19:35:22:9e:b1:e9:
69:67:fb:0e:09:11:13:1d:36:73:26:53:b4:de:e2:
f7:87:26:b8:02:31:76:37:9d:d8:dd:07:4c:61:64:
ea:41:e2:f4:4a:f0:00:fe:ac:fc:b0:73:a5:4d:78:
f9:55:c8:27:33:8e:a9:83:eb:93:0f:f4:99:59:46:
48:32:b6:36:e0:84:ec:22:55:b1:05:ea:e5:ea:42:
8e:b9:11:2e:eb:26:29:25:a4:6c:df:bb:49:9a:6e:
d6:22:2e:d8:e6:a5:0c:08:c0:e2:b7:ff:d6:8a:cd:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:19:7F:0A:0E:FC:44:71:73:D2:2E:45:9B:B6:62:02:15:83:1F
X509v3 Authority Key Identifier:
keyid:89:22:DA:D6:CD:AF:BB:0D:59:72:D1:63:71:71:2B:24:F9:31:7B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iSLa1s2vuw1ZctFjcXErJPkxe-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/2A6294426C9911EFB8039F52C4F9AE02/iSLa1s2vuw1ZctFjcXErJPkxe-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c6:da:3b:b8:45:db:2b:79:69:73:da:2b:28:1d:d0:0c:99:
1e:d2:dc:48:e2:21:ed:06:7d:f4:48:1b:b5:fa:53:c9:b3:fb:
1f:75:9f:90:f3:31:27:4d:ed:52:24:77:5f:9f:38:08:5f:82:
51:48:a6:4f:00:4d:11:cf:04:43:16:74:2f:cd:31:e2:21:02:
69:42:64:17:f0:70:1a:a6:60:22:7c:7c:a6:53:8a:49:04:9e:
ab:f4:10:ef:ac:2a:c1:81:8a:67:82:51:3f:b5:c7:2e:19:1c:
4b:e2:39:33:56:39:85:6d:7c:ab:a7:3c:49:c7:38:ba:39:52:
69:a7:e6:fa:ef:5b:e4:2a:6b:6a:54:50:a6:21:41:3a:fc:19:
98:36:b4:75:45:77:33:85:7c:ea:8b:1d:b1:b2:a0:68:79:42:
fe:32:0b:6c:9f:cc:b1:3b:f0:aa:e8:bc:71:42:eb:1d:3f:5d:
61:d8:ed:2c:9f:e2:c9:ed:54:5a:fe:78:78:e9:9b:59:2d:12:
86:c7:93:a7:b5:6b:eb:25:4b:01:c8:01:e0:d9:e6:31:a6:eb:
0b:aa:86:39:0d:f1:b9:c8:27:2b:28:8f:db:6b:ad:a9:23:37:
cb:e5:6a:3c:24:5e:63:97:8d:fc:94:ef:3b:6d:7c:5c:32:b8:
f4:c1:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:11 2024 by rpki-client on console-ams.rpki-client.org