Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.mft
File: nAvVP5xLfI48HAx_K9P9F84sL-I.mft (raw, json)
Hash identifier: msOamGn4UxECU4sJxyQK8NM0SPAIhSz8QkSkxL5MYwQ=
Subject key identifier: 77:B4:8E:57:76:6C:09:48:D1:23:91:06:50:2E:C2:EB:C6:43:A9:5E
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Certificate issuer: /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial: 3433
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.mft
Manifest number: 3393
Signing time: Fri 14 Jul 2023 14:30:34 +0000
Manifest this update: Fri 14 Jul 2023 14:30:33 +0000
Manifest next update: Fri 21 Jul 2023 14:30:33 +0000
Files and hashes: 1: nAvVP5xLfI48HAx_K9P9F84sL-I.crl (hash: NL9A/PQ5rE7yQ78g8cIq+TOxf8rRy5dYiYux6xx+twc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13363 (0x3433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Validity
Not Before: Jul 14 14:30:33 2023 GMT
Not After : Jul 21 14:30:33 2023 GMT
Subject: CN=64b15c0a-782b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:fb:51:08:86:fe:18:86:bd:79:fc:bd:d0:
1a:1e:43:48:e8:46:6a:7d:32:51:28:ce:5e:fa:74:
b6:99:b0:04:07:a8:f6:ef:f9:7e:ff:7b:fc:4c:ff:
78:d1:63:7d:f5:21:86:c3:dd:eb:5e:c0:95:85:4b:
a4:16:4e:e7:98:a2:8f:3d:c1:05:be:54:da:9a:c9:
0f:66:f6:6b:bf:a5:78:36:45:a8:3d:90:7b:1c:d6:
9e:82:e4:39:bd:2e:81:6a:6a:70:df:94:dd:cc:3c:
8f:56:9b:28:14:c0:a4:9d:db:5f:c9:8a:b3:49:90:
4b:c0:1d:77:a8:2b:a4:06:5c:2a:1f:ff:cc:d7:d6:
1e:ad:e6:e9:75:58:8b:f6:e2:04:ae:d7:b4:85:30:
3c:75:f0:47:8e:24:0f:fc:6e:25:99:25:1f:d6:47:
7a:5c:18:b9:b3:e3:7d:b6:ea:1c:b0:c8:0a:78:15:
cf:64:5b:a6:d3:a8:1f:09:14:f3:8f:fa:8d:5b:c9:
f5:f4:78:fb:da:bc:d8:1b:7f:30:4d:99:49:12:ab:
29:4f:ab:89:cb:0d:66:df:bb:21:6f:2f:b7:85:f0:
ba:2a:36:71:f1:ca:4f:21:03:ef:9a:a7:0c:26:14:
80:2a:3a:36:aa:e8:25:23:ad:29:9a:b3:e0:fe:a2:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B4:8E:57:76:6C:09:48:D1:23:91:06:50:2E:C2:EB:C6:43:A9:5E
X509v3 Authority Key Identifier:
keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:73:ab:b0:ab:8c:ec:b0:db:21:60:aa:d9:7c:a9:15:41:cf:
e2:14:97:e2:22:c6:c5:6d:a7:8e:a2:17:d1:ac:fb:a7:a5:b1:
cc:c3:57:31:cf:cf:5c:55:de:b3:02:20:a5:ff:46:6b:4d:aa:
76:92:f8:cb:44:a3:0f:0a:83:ec:d6:7a:fb:41:78:ca:0e:96:
e3:42:63:a1:b5:d4:36:b5:fd:27:88:50:75:a1:5e:79:4b:3e:
cd:6f:bd:46:18:a0:06:a5:29:1b:3c:11:db:7e:df:a3:a6:e4:
ea:9d:21:13:80:c2:c6:66:69:be:37:d6:db:d7:38:a4:ea:da:
da:b9:3b:e7:b2:40:52:09:dc:5f:3d:06:89:b3:77:37:a8:62:
d3:a1:22:83:c4:f6:85:a6:02:a0:30:09:ca:7c:6e:14:aa:8e:
be:b7:46:1b:99:26:9f:2e:39:21:e1:ad:55:b2:d2:57:92:63:
16:e6:40:cc:d5:5d:b6:90:78:17:30:54:c4:21:e1:0b:2f:61:
53:75:a4:f8:aa:a6:27:cf:99:fb:d1:19:fc:1d:69:e4:68:2c:
21:84:14:a5:27:0f:b6:d6:51:bf:da:f4:45:f8:7a:ae:d9:c7:
d2:9d:94:59:d9:c7:a6:80:e3:97:19:53:76:7c:21:a8:ce:96:
85:e5:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org