Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.mft
File: IuAdQ344bTh5KdcsUSIo01ARz4w.mft (raw, json)
Hash identifier: NBGXBqaU5iZ0SkTGELfgukDHW/sxhrooDS9BH3LdL7Q=
Subject key identifier: 77:96:1F:6A:E6:AA:1B:AD:D2:22:03:F0:6F:1C:8B:89:86:F2:E5:13
Authority key identifier: 22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
Certificate issuer: /CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Certificate serial: 04E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.mft
Manifest number: 04D9
Signing time: Mon 25 Mar 2024 01:03:17 +0000
Manifest this update: Mon 25 Mar 2024 01:03:17 +0000
Manifest next update: Mon 01 Apr 2024 01:03:17 +0000
Files and hashes: 1: IuAdQ344bTh5KdcsUSIo01ARz4w.crl (hash: G4HPSiO41lpbqdLjd0j54pXEQc1kun/1BS2iDNWOoVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Validity
Not Before: Mar 25 01:03:17 2024 GMT
Not After : Apr 1 01:03:17 2024 GMT
Subject: CN=6600cd55-940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:b2:c3:07:4e:cf:69:34:93:d0:1c:5e:45:
f8:56:d4:03:46:fa:b8:e0:41:8c:01:9b:67:4d:38:
d0:4d:04:2b:d6:ac:51:c2:25:87:12:a8:6d:29:32:
bd:d1:49:fe:b2:72:50:e0:0c:41:7f:68:f2:3b:a5:
56:fa:a8:27:18:89:28:0d:67:d4:aa:31:12:8a:60:
ee:52:9f:1d:48:be:d7:b8:db:b8:90:ba:5a:67:c3:
6d:c1:41:ed:66:ad:a6:45:dc:45:34:ed:2f:80:b2:
ca:17:d8:d9:43:ae:19:4d:6b:e3:f6:31:72:7d:8f:
27:50:8b:a7:b5:e9:b8:b9:9d:dc:0e:e5:e7:b5:21:
b1:52:bc:78:75:9e:3c:2b:d4:c1:de:05:cc:60:c8:
39:42:74:88:41:fc:02:7f:1f:c7:7b:b9:9a:0d:96:
8a:67:3d:e3:cd:ec:6c:ef:d8:ec:ea:88:e5:b6:48:
f5:4d:3e:5c:42:01:45:69:14:e9:f2:98:2d:bc:5d:
9f:03:17:70:fe:bc:c1:bd:d6:61:89:0b:3d:10:d0:
ef:c1:b9:e6:5d:e1:38:4c:ee:4a:b1:89:03:bc:b4:
9a:59:24:35:ae:07:74:61:dd:b1:c3:60:e4:6d:df:
24:77:73:a6:89:d3:0f:c4:da:16:df:cb:9b:e4:fe:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:1F:6A:E6:AA:1B:AD:D2:22:03:F0:6F:1C:8B:89:86:F2:E5:13
X509v3 Authority Key Identifier:
keyid:22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:9e:0e:8c:ee:2c:1a:69:0d:f4:2d:f3:4d:98:4a:cc:09:5f:
f1:74:de:7f:df:3b:17:5a:67:ab:8f:6e:ec:59:e1:53:3c:30:
0f:3e:0d:36:80:ce:87:fe:c6:ca:84:a4:93:d5:c0:01:6a:5a:
b2:6b:78:33:61:b4:de:08:14:25:e4:c6:3f:ba:f2:f0:85:c3:
7d:07:4b:30:64:28:e5:a1:77:20:de:1a:97:17:dd:20:0c:c6:
f0:77:b5:9f:31:28:88:ce:4f:df:f6:e4:4f:74:1f:fb:8b:91:
be:e4:b6:e6:71:3e:3f:45:25:f4:45:5e:ac:74:8b:ec:ef:96:
2e:8c:7e:dd:56:6c:76:c5:55:9c:0d:1b:a0:ee:66:2e:6d:42:
d4:40:ab:25:7a:58:f0:0a:7a:6f:a3:53:36:53:bb:fa:3a:59:
1b:b1:f6:d2:07:80:33:f4:d6:2b:cf:29:78:e9:ef:65:38:3b:
41:bd:96:98:05:ca:2d:59:3e:f7:35:39:4d:76:d8:ab:4d:ff:
ed:f4:e5:28:6b:b5:e8:aa:0a:d9:b2:f9:12:a3:e5:87:4d:53:
ca:97:4c:24:6e:26:55:14:62:1c:8a:8f:73:64:1c:3b:02:22:
cf:b8:14:23:4e:a9:af:39:d5:82:d2:49:44:24:6a:1e:6b:bc:
ba:bd:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org