Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.mft
File: CxmNO40c0q9b_OS8NtCGjWdAtJE.mft (raw, json)
Hash identifier: AF72S8XAy0pf+/Ru+UjXzpn7muhBD8viwDZmRA5hkRk=
Subject key identifier: 27:A0:A9:C9:18:33:D5:1E:F1:02:B4:5F:FB:90:05:20:45:FA:5E:D0
Authority key identifier: 0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
Certificate issuer: /CN=A91946AB/serialNumber=0B198D3B8D1CD2AF5BFCE4BC36D0868D6740B491
Certificate serial: 02B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxmNO40c0q9b_OS8NtCGjWdAtJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.mft
Manifest number: 02B1
Signing time: Mon 07 Aug 2023 05:43:02 +0000
Manifest this update: Mon 07 Aug 2023 05:43:02 +0000
Manifest next update: Mon 14 Aug 2023 05:43:02 +0000
Files and hashes: 1: CxmNO40c0q9b_OS8NtCGjWdAtJE.crl (hash: uCBWYZqPV9l7pfKBKFMIxboVz0GDCB9+Harht60wJ/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91946AB/serialNumber=0B198D3B8D1CD2AF5BFCE4BC36D0868D6740B491
Validity
Not Before: Aug 7 05:43:02 2023 GMT
Not After : Aug 14 05:43:02 2023 GMT
Subject: CN=64d08466-d645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:0d:83:f1:51:77:c8:a8:fb:8e:7c:d4:c6:
b1:b6:38:3d:3b:82:3d:22:d9:89:34:f8:76:7f:86:
6a:02:67:e5:ab:24:09:f1:6c:8c:41:cf:06:64:86:
6c:21:bb:a3:2a:8a:e1:a7:14:ff:25:47:44:fa:14:
ee:4c:19:67:1c:51:f9:76:e3:29:d9:da:44:9e:4b:
b9:6d:97:ce:b1:54:ee:ac:38:13:5b:44:7c:ba:1b:
38:0f:89:9e:3d:29:c3:82:0f:6e:02:53:1f:6e:7a:
7f:68:86:0b:ba:bd:48:d2:02:91:05:4a:64:a4:d6:
44:cf:28:45:c5:33:26:91:38:f2:66:26:3a:f9:8a:
8e:79:63:4c:7f:41:1b:97:dc:90:b6:a9:48:42:24:
1d:b0:42:de:96:c7:04:2f:d8:2c:48:03:22:59:56:
bf:a4:f4:e0:59:3d:11:8a:a3:9f:c5:f0:4a:fb:ae:
87:b4:29:8e:81:e2:e4:26:ce:b4:0d:e7:4b:a5:3a:
fd:18:fa:57:3f:09:24:1a:75:f6:5c:a0:11:73:99:
df:e3:b1:a1:05:d4:74:6f:b7:8c:bc:85:7c:35:cf:
77:b4:94:1f:a9:da:21:e2:a0:9c:97:f9:3b:ce:95:
1c:e1:49:27:0e:fe:1a:02:51:13:6c:a8:d8:eb:af:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:A9:C9:18:33:D5:1E:F1:02:B4:5F:FB:90:05:20:45:FA:5E:D0
X509v3 Authority Key Identifier:
keyid:0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxmNO40c0q9b_OS8NtCGjWdAtJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:69:5d:a0:87:47:57:62:b3:75:e1:0f:73:d2:5b:eb:e6:f1:
8a:08:07:ee:74:99:16:c5:d8:be:95:19:c8:27:d1:de:a4:87:
95:3f:da:8f:e7:54:42:ae:a4:c2:34:ca:10:cd:ec:87:05:8b:
3a:23:47:09:1f:24:7f:10:f6:78:2b:69:c0:28:79:63:1d:47:
f5:a8:47:35:d6:a9:1c:8b:c0:2f:85:21:da:c7:84:02:7e:62:
81:e0:48:80:11:93:c7:1e:0b:d8:d3:33:c5:d1:a6:75:b6:56:
d0:d9:f2:a2:cc:6f:7a:09:cd:57:0d:66:84:06:5d:e8:c2:bd:
5e:7c:72:d3:94:63:13:89:38:81:aa:66:3f:f0:4b:7c:b0:5b:
66:8e:94:1e:82:cc:95:e7:59:1f:e6:66:ef:3c:99:80:35:b0:
39:93:91:96:d4:74:09:36:03:2e:54:86:1b:b4:cc:42:b9:8c:
ab:38:c2:87:c8:d0:b2:ba:c9:68:c1:32:d6:f1:02:5e:70:f0:
35:31:f4:c4:0d:0e:5f:83:6b:af:87:fa:ab:39:5d:b2:16:59:
b6:4a:01:cb:35:27:b1:e1:95:88:ad:2e:8f:4b:c6:b7:b2:9a:
fe:d5:65:89:00:08:5d:89:38:17:e6:6a:3c:27:23:60:d7:e9:
c0:00:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org