Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/KaSsa0cxezvlDDmbqunLvF3w7oI.mft
File: KaSsa0cxezvlDDmbqunLvF3w7oI.mft (raw, json)
Hash identifier: 9tbwlsI5KpBweq8VH+Jjf7AgL+0TM1zE3gV9+6tClOA=
Subject key identifier: C5:36:11:9E:B9:FA:4C:30:B3:24:02:05:27:AF:C4:92:17:55:C6:78
Authority key identifier: 29:A4:AC:6B:47:31:7B:3B:E5:0C:39:9B:AA:E9:CB:BC:5D:F0:EE:82
Certificate issuer: /CN=A9148979/serialNumber=29A4AC6B47317B3BE50C399BAAE9CBBC5DF0EE82
Certificate serial: 02FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaSsa0cxezvlDDmbqunLvF3w7oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/KaSsa0cxezvlDDmbqunLvF3w7oI.mft
Manifest number: 02F8
Signing time: Tue 13 Sep 2022 02:38:43 +0000
Manifest this update: Tue 13 Sep 2022 02:38:42 +0000
Manifest next update: Thu 15 Sep 2022 02:38:42 +0000
Files and hashes: 1: KaSsa0cxezvlDDmbqunLvF3w7oI.crl (hash: aIaDHv0kDlO/GPfac3dJScjxO9HxjOZalqlRPzVe09M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764 (0x2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148979/serialNumber=29A4AC6B47317B3BE50C399BAAE9CBBC5DF0EE82
Validity
Not Before: Sep 13 02:38:42 2022 GMT
Not After : Sep 15 02:38:42 2022 GMT
Subject: CN=631fed33-3a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:27:4a:aa:0e:b4:99:53:96:f9:f0:1e:bf:
4b:e3:42:90:f2:3d:eb:0f:b1:c7:1f:f3:4c:bf:2a:
d4:8d:55:7c:c5:85:64:89:94:8e:d8:ce:ba:32:44:
14:86:a3:62:8d:f2:50:9a:d9:b0:91:00:7e:3a:bd:
cf:90:31:ab:99:59:20:7f:a4:06:78:6b:3c:0c:c1:
de:7d:8e:bb:b1:2b:5f:a1:7a:e2:de:44:47:13:74:
f2:0b:ab:33:a1:a4:3d:1e:11:c2:8a:c6:3d:23:b5:
e8:25:73:49:5a:e7:3f:72:47:a2:3d:dd:b0:d1:af:
54:cb:e0:10:45:ca:9a:c6:29:ec:c9:02:f4:72:bc:
b3:7a:28:d7:5c:9e:be:6f:12:2d:76:28:1b:4f:0b:
33:63:56:69:24:45:87:d6:b1:59:cf:fb:9e:2c:45:
43:6e:1a:85:06:42:f2:ad:34:78:e7:9b:85:ff:4f:
99:73:d5:76:e8:c7:6b:b4:08:97:41:db:fd:4c:6b:
1f:64:4e:46:0c:2f:04:75:aa:82:64:e9:07:20:8a:
32:ae:3f:d7:38:2e:22:83:34:2c:c7:db:f9:b9:95:
05:94:3e:e8:12:ef:5c:50:ab:54:03:7a:7b:24:d8:
a4:e4:a2:79:a6:63:54:5e:93:99:2f:47:4b:75:6d:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:36:11:9E:B9:FA:4C:30:B3:24:02:05:27:AF:C4:92:17:55:C6:78
X509v3 Authority Key Identifier:
keyid:29:A4:AC:6B:47:31:7B:3B:E5:0C:39:9B:AA:E9:CB:BC:5D:F0:EE:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/KaSsa0cxezvlDDmbqunLvF3w7oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaSsa0cxezvlDDmbqunLvF3w7oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/KaSsa0cxezvlDDmbqunLvF3w7oI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:22:df:eb:4e:fd:5c:96:67:6c:d2:01:f8:18:8b:51:04:92:
3e:77:64:2c:0e:b7:1b:db:98:e6:bd:8e:a9:42:89:da:4e:79:
05:80:14:6b:10:c1:a4:bb:48:82:70:fb:04:2f:16:26:f7:15:
3c:8f:23:32:1e:c9:3b:38:fa:80:15:b8:36:42:37:9a:20:1d:
8b:21:89:66:b7:20:4f:35:a4:b4:06:6d:d7:cc:26:2d:c9:cd:
b0:29:aa:ac:b2:5d:99:f4:75:85:d9:2f:17:1b:46:7d:9a:bc:
69:05:7f:46:b8:19:ad:75:9d:c7:64:1e:6b:40:33:2f:57:63:
39:50:81:ef:64:98:33:a8:06:f6:22:1c:c6:04:97:af:c9:f1:
23:b7:9f:3b:27:53:af:95:74:a8:15:a5:3d:22:8e:da:26:11:
a7:0d:70:93:fa:b8:e6:75:5d:eb:0e:31:cf:84:37:ae:5d:4c:
96:ac:ac:e4:53:41:12:05:16:89:65:e2:b9:b5:b3:4e:1e:7b:
e2:31:9d:1d:d3:fe:1b:ab:ab:a5:73:c9:75:f8:1b:2d:c2:9e:
a7:9a:7b:1c:d2:0f:ae:80:14:da:87:c3:1a:ff:88:8d:10:ad:
9b:11:00:c7:a4:be:08:c6:92:b2:48:3e:b8:0f:15:79:7c:f3:
8b:77:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org