Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/mzSYD6PKLk1w8uL4fnbWaTFPByo.mft
File: mzSYD6PKLk1w8uL4fnbWaTFPByo.mft (raw, json)
Hash identifier: kxtqINssXQUpEVILfFNismbidF3DYyB8bU2Zgw8LsFU=
Subject key identifier: 49:C8:37:F7:9F:47:8D:65:F2:9E:CC:11:0B:1E:32:0F:C3:91:4A:14
Authority key identifier: 9B:34:98:0F:A3:CA:2E:4D:70:F2:E2:F8:7E:76:D6:69:31:4F:07:2A
Certificate issuer: /CN=A91B79AB/serialNumber=9B34980FA3CA2E4D70F2E2F87E76D669314F072A
Certificate serial: 053D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzSYD6PKLk1w8uL4fnbWaTFPByo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/mzSYD6PKLk1w8uL4fnbWaTFPByo.mft
Manifest number: 0539
Signing time: Thu 09 Nov 2023 00:48:43 +0000
Manifest this update: Thu 09 Nov 2023 00:48:43 +0000
Manifest next update: Thu 16 Nov 2023 00:48:43 +0000
Files and hashes: 1: mzSYD6PKLk1w8uL4fnbWaTFPByo.crl (hash: +enCh5uKi8aSfX2CKEs5k4LtmFkawiP7CZ+M8T/lag0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341 (0x53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B79AB/serialNumber=9B34980FA3CA2E4D70F2E2F87E76D669314F072A
Validity
Not Before: Nov 9 00:48:43 2023 GMT
Not After : Nov 16 00:48:43 2023 GMT
Subject: CN=654c2c6b-2ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:c9:c6:55:04:bb:cc:3f:d8:c0:7c:7a:0a:
e3:fb:a6:b5:fe:e3:fc:09:2a:2d:0e:36:14:b3:98:
41:02:f2:b2:93:70:4e:78:8e:84:d6:9b:e0:f1:14:
e0:83:bf:26:3f:c0:92:03:3c:0b:7a:ae:17:a3:b3:
fe:f2:34:d8:59:d1:b7:ad:44:25:e7:2f:5a:44:d7:
8f:af:11:23:a7:2c:9e:45:ab:65:57:0b:87:9d:f1:
d5:00:a2:d2:cc:41:4b:a4:4c:0f:c1:23:1b:d6:82:
32:d5:06:25:fd:09:3d:27:b8:80:2a:77:b8:dd:f9:
14:b5:53:02:a3:43:4f:c3:d3:48:9c:de:20:d6:14:
65:d4:94:0b:9e:d3:7f:b8:12:84:ce:0b:89:5d:14:
ee:57:db:84:d7:3f:4d:5c:a1:ec:39:91:7a:6b:87:
59:be:ff:70:63:64:f5:1c:c9:2e:b3:d4:c2:0b:0f:
6e:c4:eb:80:a2:7f:9a:98:cb:7f:72:88:2c:37:57:
8b:32:1a:b1:80:05:6d:f9:da:cd:82:fe:e7:89:69:
4d:63:0e:30:c4:20:e8:99:af:b9:18:54:9b:06:a7:
63:35:b1:f5:56:54:59:3d:66:43:3c:f7:d2:cc:63:
f5:77:fd:24:d3:64:65:0e:1c:f9:0f:6c:20:43:ab:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C8:37:F7:9F:47:8D:65:F2:9E:CC:11:0B:1E:32:0F:C3:91:4A:14
X509v3 Authority Key Identifier:
keyid:9B:34:98:0F:A3:CA:2E:4D:70:F2:E2:F8:7E:76:D6:69:31:4F:07:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/mzSYD6PKLk1w8uL4fnbWaTFPByo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzSYD6PKLk1w8uL4fnbWaTFPByo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/mzSYD6PKLk1w8uL4fnbWaTFPByo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:61:86:62:e1:b2:c6:c2:fd:ea:c3:4f:fa:8f:fc:4d:d6:5d:
e8:be:3e:51:41:d3:02:bf:b4:40:22:51:b8:e0:b4:05:fb:b0:
27:05:8b:2b:d9:42:9d:c4:5c:bb:2b:55:b5:55:32:cc:b0:44:
c0:7c:b0:e3:be:f7:2d:cc:8d:23:e2:55:43:85:c1:eb:8b:8e:
b2:ae:6e:b7:f2:13:3d:b9:df:f2:4d:36:b8:dd:dd:0c:ca:5b:
00:58:ab:1b:72:a8:25:ea:33:15:36:c1:9f:2d:9d:6a:9a:2f:
94:27:56:11:9a:51:e1:62:06:2c:56:57:5b:dd:7e:bb:4b:19:
88:ec:6d:90:3e:1d:00:47:4b:c3:39:46:82:17:6b:21:35:66:
84:7c:44:a7:8e:50:71:16:d3:dc:8a:eb:4d:5a:68:3c:01:2b:
71:1c:66:a0:84:20:aa:92:d8:0e:ba:75:5f:d3:af:75:4a:83:
7e:e9:6e:37:23:e1:66:44:c8:1b:37:1e:cb:0b:1a:d5:7b:92:
28:7b:9c:e9:a2:a9:9c:fd:a6:6a:a7:94:45:72:c9:d4:08:73:
cf:18:6c:e5:33:4b:7d:3e:9c:22:4d:8d:64:68:0a:f9:6d:27:
de:9c:0f:69:c4:13:9a:db:a2:6c:a5:51:33:5a:0e:7e:7e:fb:
59:9d:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org