Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft
File: BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft (raw, json)
Hash identifier: AHg1/K36WwQF9NqYoOHW2eC50SbQWex0snYp5tE+q+g=
Subject key identifier: 2A:E9:61:BB:08:63:E8:89:47:D5:53:61:35:B6:6B:EA:D7:C8:68:6F
Authority key identifier: 04:3A:7D:14:B6:16:8F:93:64:8F:4C:5A:57:33:BF:CF:51:9A:71:A2
Certificate issuer: /CN=A91B4778/serialNumber=043A7D14B6168F93648F4C5A5733BFCF519A71A2
Certificate serial: 09FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDp9FLYWj5Nkj0xaVzO_z1GacaI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft
Manifest number: 09ED
Signing time: Wed 14 Sep 2022 08:18:30 +0000
Manifest this update: Wed 14 Sep 2022 08:18:29 +0000
Manifest next update: Fri 16 Sep 2022 08:18:29 +0000
Files and hashes: 1: BDp9FLYWj5Nkj0xaVzO_z1GacaI.crl (hash: nyHm98VKLdm4LCyVzStxAbOM6iVwYws8EPm+q3foGic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4778/serialNumber=043A7D14B6168F93648F4C5A5733BFCF519A71A2
Validity
Not Before: Sep 14 08:18:29 2022 GMT
Not After : Sep 16 08:18:29 2022 GMT
Subject: CN=63218e56-534a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:a9:73:5e:53:0a:06:fc:cd:bd:4d:bd:08:
5c:dc:7b:0b:97:c6:38:2e:f4:77:46:c3:28:8c:81:
4c:03:b5:06:4e:61:d8:5b:c7:58:a8:b5:6d:4b:fd:
11:77:d7:9f:79:e7:60:5c:75:8c:3d:a6:cb:22:56:
ec:c4:58:5e:01:60:f6:cd:f5:5c:67:78:24:1e:30:
85:76:73:ff:bc:3e:23:6d:03:ee:82:af:37:0d:6c:
0c:5d:7d:86:eb:11:81:cb:36:e2:42:f8:4d:52:dc:
0c:24:87:ff:5b:0c:2c:28:18:6b:2b:27:42:4b:a4:
16:8b:bd:48:ed:49:4f:a9:39:17:d4:3d:b3:0c:ea:
d5:56:35:8e:fa:3f:5c:10:2f:2b:e7:53:f5:83:ae:
ba:33:ff:44:64:0c:97:b1:5c:46:96:8d:32:0e:a7:
bb:d6:76:89:a3:1b:cd:66:00:cd:25:ff:ef:c8:b4:
01:2e:65:49:0c:b7:a2:46:b9:4a:aa:b5:77:24:a4:
72:68:83:9c:85:2c:89:95:1a:68:47:27:07:a1:96:
6b:df:49:e8:b1:a4:21:bf:51:04:e9:27:de:6f:01:
cb:ed:46:f3:d0:de:26:41:10:72:fa:68:fc:4b:0d:
ce:e4:59:e9:53:79:8a:02:02:13:d3:9e:b4:cf:c3:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:61:BB:08:63:E8:89:47:D5:53:61:35:B6:6B:EA:D7:C8:68:6F
X509v3 Authority Key Identifier:
keyid:04:3A:7D:14:B6:16:8F:93:64:8F:4C:5A:57:33:BF:CF:51:9A:71:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDp9FLYWj5Nkj0xaVzO_z1GacaI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:90:2e:88:d0:79:5e:3f:ff:65:64:2b:23:51:5e:76:79:ba:
75:a1:1a:1b:c2:7a:ea:3d:94:c6:19:fb:fb:40:ce:0b:57:d7:
db:5b:6d:58:f0:52:8c:e0:8c:be:54:aa:52:26:03:8c:11:e0:
2a:30:16:fe:ae:b3:e6:55:d5:93:b7:72:a5:3b:98:09:70:a6:
fd:71:ee:31:e2:05:23:4b:91:e2:4e:7d:68:d1:58:14:9d:f0:
4b:73:c1:1f:b8:20:67:74:22:07:0a:b4:08:26:f0:5e:66:48:
b5:21:59:1f:d4:34:98:9b:8f:3a:eb:c5:9e:64:3e:08:b1:7d:
ca:17:bf:7f:73:81:33:d3:7d:c6:bf:1c:fa:89:4f:50:c9:ef:
fd:f2:9a:3a:03:cc:5f:b9:81:16:0e:37:74:fa:43:03:98:88:
47:78:13:10:2d:4a:a0:d1:23:a8:73:29:3d:e2:a2:e0:2f:75:
e9:7e:60:67:9e:58:69:d3:86:40:7f:8d:27:ac:f7:62:ef:78:
36:5b:c6:5d:ae:ba:8c:ec:0a:93:39:1c:46:d1:67:f9:fe:69:
74:9a:b9:e4:1d:34:f7:72:f2:c5:b4:0f:b1:ed:3d:bf:20:31:
be:94:bb:da:f5:63:17:c2:c4:26:bb:dc:a2:65:7e:d9:30:a9:
10:3c:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org