Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BB2B/93960D465D5A11ECB2D87452C4F9AE02/ezRg56wfsNYK8V-ERcosre0fP2A.mft
File: ezRg56wfsNYK8V-ERcosre0fP2A.mft (raw, json)
Hash identifier: C6pUhHZ/aCz7oJ80NxlEaE5cgoqb5Y8+a4zbpUxjaIg=
Subject key identifier: D3:C1:86:1A:04:E3:8C:CE:6C:AF:FD:4D:03:19:AD:41:AC:A5:52:45
Authority key identifier: 7B:34:60:E7:AC:1F:B0:D6:0A:F1:5F:84:45:CA:2C:AD:ED:1F:3F:60
Certificate issuer: /CN=A919BB2B/serialNumber=7B3460E7AC1FB0D60AF15F8445CA2CADED1F3F60
Certificate serial: 033E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezRg56wfsNYK8V-ERcosre0fP2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BB2B/93960D465D5A11ECB2D87452C4F9AE02/ezRg56wfsNYK8V-ERcosre0fP2A.mft
Manifest number: 033B
Signing time: Mon 15 Jan 2024 05:33:26 +0000
Manifest this update: Mon 15 Jan 2024 05:33:24 +0000
Manifest next update: Mon 22 Jan 2024 05:33:24 +0000
Files and hashes: 1: ezRg56wfsNYK8V-ERcosre0fP2A.crl (hash: iuGuowC/l/89HGHG4LCX2xfy7zP/aDdKTXJ129tEv24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BB2B/serialNumber=7B3460E7AC1FB0D60AF15F8445CA2CADED1F3F60
Validity
Not Before: Jan 15 05:33:24 2024 GMT
Not After : Jan 22 05:33:24 2024 GMT
Subject: CN=65a4c3a5-289a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:76:c7:a7:ed:2e:06:5b:8f:26:c5:5d:87:
f6:2d:19:4b:2b:a5:a4:f6:a7:e5:ee:23:8f:a6:4b:
6d:23:f6:ad:10:a7:4b:ac:7a:37:0c:bc:b4:32:6f:
c3:b8:20:05:f7:01:c6:93:24:5b:89:96:41:76:87:
00:c2:f8:a4:26:45:28:f2:26:b7:bd:67:29:ed:fb:
e2:99:b6:08:9c:aa:9d:51:42:40:aa:63:f2:a7:1e:
65:a3:aa:e4:fb:39:5f:86:f3:ee:da:7a:9d:3e:29:
87:b3:6e:01:e4:98:eb:54:0e:5d:9a:25:50:e7:bb:
85:86:f7:cd:f1:09:f2:d7:05:44:3e:6b:6e:4c:eb:
ce:71:dd:d0:80:f5:be:44:d6:b8:e6:b9:b3:e5:dd:
7b:6f:ff:b3:10:30:6f:b8:e3:23:db:ca:42:71:9d:
1d:a6:60:98:f8:9e:e6:0e:7d:8b:3e:0c:40:fa:17:
30:2e:f3:54:02:64:37:1b:68:f7:f9:a4:9f:97:40:
d7:12:a0:7a:a9:c4:13:7f:76:76:c3:f8:81:70:61:
6d:0c:2d:c7:4a:68:41:6d:42:11:c6:49:c6:22:25:
ed:4b:da:9b:64:bb:6e:39:34:21:3b:35:93:df:aa:
0c:60:b8:18:f7:57:cf:16:00:f7:41:c9:3e:b5:a8:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C1:86:1A:04:E3:8C:CE:6C:AF:FD:4D:03:19:AD:41:AC:A5:52:45
X509v3 Authority Key Identifier:
keyid:7B:34:60:E7:AC:1F:B0:D6:0A:F1:5F:84:45:CA:2C:AD:ED:1F:3F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BB2B/93960D465D5A11ECB2D87452C4F9AE02/ezRg56wfsNYK8V-ERcosre0fP2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezRg56wfsNYK8V-ERcosre0fP2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BB2B/93960D465D5A11ECB2D87452C4F9AE02/ezRg56wfsNYK8V-ERcosre0fP2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d9:72:72:f3:f7:e0:43:9e:5e:46:ee:62:e0:d0:33:b4:8f:
7f:34:0b:b5:2b:1a:48:f6:2d:97:32:62:1e:49:96:1e:62:04:
99:8d:20:4a:83:52:50:ea:1e:6e:19:03:01:b5:e5:e4:b8:1c:
03:f5:1e:a5:cc:35:27:c3:fe:5e:4a:45:c7:d9:44:ce:16:c8:
76:00:f7:ee:90:3b:ab:3d:00:20:de:f2:1c:ca:3f:9a:73:3d:
b8:04:86:9e:1b:5f:5c:2f:df:63:d9:e6:16:55:83:47:77:6d:
bc:ab:4b:0b:3e:27:08:ab:d9:87:c1:fd:fb:50:97:5c:63:61:
3d:22:d8:ed:aa:44:4b:b8:9c:23:8e:20:f9:81:ac:19:0d:0a:
f0:e8:84:78:cc:aa:32:48:f6:33:1e:55:ff:a4:b4:39:97:6d:
3d:f6:08:0d:b3:23:85:c2:7e:72:50:fe:fa:95:46:ce:03:7b:
e8:ce:ba:1c:a2:2a:67:81:ca:e0:c1:c5:1a:a4:a6:f6:a4:13:
4a:bd:49:2c:4e:2a:09:13:89:50:82:26:8c:10:f8:11:58:5c:
df:8d:e7:81:07:5b:d1:07:3a:db:0f:cc:4c:62:b8:ae:b0:77:
20:99:bd:cd:5b:9c:b8:97:d6:5d:22:0c:6a:50:10:ba:e2:15:
44:e5:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org