Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft
File: RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft (raw, json)
Hash identifier: E9MUpg+u3Rqmbz10J2yCD/dKZU0EYTGnQYXXbzc8M38=
Subject key identifier: 63:ED:24:3E:E1:76:5B:04:11:6A:E0:BC:A9:F0:05:89:D9:B8:7B:CB
Authority key identifier: 44:8A:58:36:37:55:F1:8B:EA:15:89:39:83:B5:E6:93:6D:D2:A2:1F
Certificate issuer: /CN=A9171D3B/serialNumber=448A58363755F18BEA15893983B5E6936DD2A21F
Certificate serial: 1008
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIpYNjdV8YvqFYk5g7Xmk23Soh8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft
Manifest number: 13EC
Signing time: Mon 14 Oct 2024 01:31:57 +0000
Manifest this update: Mon 14 Oct 2024 01:31:56 +0000
Manifest next update: Mon 21 Oct 2024 01:31:56 +0000
Files and hashes: 1: RIpYNjdV8YvqFYk5g7Xmk23Soh8.crl (hash: OOfpuJVwj7kAyS/n3QZfDSZlnL38/zBaSmTCgC4TCvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4104 (0x1008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3B/serialNumber=448A58363755F18BEA15893983B5E6936DD2A21F
Validity
Not Before: Oct 14 01:31:56 2024 GMT
Not After : Oct 21 01:31:56 2024 GMT
Subject: CN=670c748d-27f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:dc:09:5e:22:d8:3d:15:38:00:e1:4e:c6:
e2:5f:51:c4:b4:e2:1c:ad:55:ae:af:dc:56:0c:03:
60:4f:88:a4:60:39:99:b6:30:0a:4a:c8:f9:83:07:
77:c1:83:d9:9c:23:08:9b:ab:14:2a:52:7f:50:6f:
24:36:3e:17:a7:33:22:45:4f:bf:ee:27:a6:3e:41:
79:d8:34:24:de:37:c3:9f:7c:d8:93:45:72:e9:d3:
4b:ff:b6:4b:a1:f4:db:4a:bd:8b:07:c5:d2:a5:e3:
c0:da:cd:3f:5b:90:46:75:21:ff:38:64:cb:a4:ea:
ed:c9:63:e0:8d:b7:ac:4e:af:96:81:d9:20:8b:db:
90:ed:50:77:e8:3b:62:a7:11:3f:34:26:f3:83:7b:
a6:53:16:6b:0a:74:1b:86:5d:35:25:f8:08:33:cd:
b4:ac:85:ce:79:fc:6c:18:5a:73:ff:e1:d5:de:a4:
32:57:de:5e:30:2e:f2:0a:75:cd:a8:6f:da:12:3e:
34:a9:a0:f6:6a:00:15:8c:d2:20:56:c8:f4:27:4e:
81:bc:53:e7:65:69:23:97:fb:85:f4:dc:f7:ad:5d:
87:da:6e:46:f1:ce:bd:b1:e1:65:ed:a9:fd:8d:09:
60:0f:08:23:50:76:3e:c7:7f:9a:93:a5:79:78:b7:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:24:3E:E1:76:5B:04:11:6A:E0:BC:A9:F0:05:89:D9:B8:7B:CB
X509v3 Authority Key Identifier:
keyid:44:8A:58:36:37:55:F1:8B:EA:15:89:39:83:B5:E6:93:6D:D2:A2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIpYNjdV8YvqFYk5g7Xmk23Soh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:6b:dd:b4:df:51:11:db:84:aa:41:4b:20:fa:0c:cf:c0:11:
cc:42:05:c8:05:7b:77:c9:5b:49:9a:5e:22:ea:ab:03:89:b5:
e9:68:da:48:2e:ef:72:45:8c:b5:95:d3:f2:7d:bd:10:37:33:
8e:b5:d7:49:e7:de:de:2c:14:5b:5e:03:5d:5f:19:4f:2e:f4:
bf:b5:aa:ee:86:7b:ac:6c:b3:53:a3:0c:dd:d5:92:f5:3d:bf:
d3:2a:59:c3:7c:45:bb:57:eb:37:50:18:47:33:4c:48:1d:1b:
6f:1d:90:59:64:c4:50:8c:4e:8c:bc:68:38:da:5d:38:e8:05:
a6:50:f8:c0:88:8b:13:20:e9:38:2e:bd:84:08:57:64:45:8a:
9b:a7:ff:94:44:1b:70:c8:73:13:9c:fc:c6:1a:08:91:e2:ba:
4e:92:2c:5b:c9:1c:a7:3b:d4:14:01:0d:ac:0f:30:15:a1:0c:
14:c7:75:17:d8:b7:74:10:ab:2f:d5:7a:b2:3c:ee:bd:07:22:
4f:f5:5e:ec:49:f5:f9:ff:d0:a9:d7:11:c6:2b:8e:c8:ab:bb:
c7:5a:3b:f5:41:7e:bb:12:f0:12:e4:a8:ad:a7:cd:4d:89:51:
38:57:27:dc:cd:5c:bb:1c:51:31:60:39:c8:86:c3:ea:bd:7f:
42:70:d7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 17:39:50 2024 by rpki-client on console-fra.rpki-client.org