Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/loFTyIK-WzS-0cjxPTshxcNoxCs.mft
File: loFTyIK-WzS-0cjxPTshxcNoxCs.mft (raw, json)
Hash identifier: eDR1IMHA0G5HF6zsHLZzc3g2TcmjSLE4oPMH0fpkecg=
Subject key identifier: 84:7F:3E:05:2B:D5:E0:75:F5:2E:DC:0C:80:25:F6:6E:EB:BF:F3:C4
Authority key identifier: 96:81:53:C8:82:BE:5B:34:BE:D1:C8:F1:3D:3B:21:C5:C3:68:C4:2B
Certificate issuer: /CN=A91DED22/serialNumber=968153C882BE5B34BED1C8F13D3B21C5C368C42B
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loFTyIK-WzS-0cjxPTshxcNoxCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/loFTyIK-WzS-0cjxPTshxcNoxCs.mft
Manifest number: CA
Signing time: Wed 13 Sep 2023 03:45:00 +0000
Manifest this update: Wed 13 Sep 2023 03:44:59 +0000
Manifest next update: Wed 20 Sep 2023 03:44:59 +0000
Files and hashes: 1: loFTyIK-WzS-0cjxPTshxcNoxCs.crl (hash: qOGmn9MP2G9PbL1NM+EE5j/j+DFVQJVuUH9TsqYcofM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DED22/serialNumber=968153C882BE5B34BED1C8F13D3B21C5C368C42B
Validity
Not Before: Sep 13 03:44:59 2023 GMT
Not After : Sep 20 03:44:59 2023 GMT
Subject: CN=6501303c-ee0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:74:2e:90:af:2f:6b:69:5b:77:5a:ae:6d:
dd:56:78:29:c9:b4:e9:4b:05:18:04:ec:97:7a:88:
39:49:a3:0d:87:8c:91:89:be:8a:71:72:79:35:82:
8f:ed:25:3f:81:49:43:94:20:97:1f:e1:f2:53:54:
e9:f3:84:74:64:d9:d9:88:13:45:3e:8e:6d:3f:38:
70:ac:50:fc:7b:38:75:25:92:3b:b3:a4:21:39:3d:
32:7b:4f:f9:99:02:c9:63:15:7f:eb:af:90:f3:d2:
c7:a9:ed:80:d4:58:b0:87:8d:a4:64:51:f2:09:27:
df:ef:09:16:cb:b8:b9:20:c0:73:d0:7c:b9:2b:bf:
e1:f8:c9:45:25:d3:b9:e7:a3:1c:9f:eb:5e:90:c2:
aa:74:23:45:6a:5f:b4:f1:84:a2:47:16:40:43:55:
33:83:ec:f3:82:cb:9a:e6:9d:f7:08:ab:7d:b2:93:
37:26:e1:1e:65:96:34:ad:0f:29:c9:ae:a5:e9:65:
b3:f5:ed:0d:0d:ad:5e:0a:94:3c:92:d1:4f:02:f3:
3c:71:07:63:58:26:a3:87:8d:f8:5e:13:86:64:aa:
fc:48:13:01:1c:ce:22:95:64:69:a9:32:0d:27:12:
5a:80:5b:c1:0c:9e:22:e0:18:4b:c6:1b:63:8f:99:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:3E:05:2B:D5:E0:75:F5:2E:DC:0C:80:25:F6:6E:EB:BF:F3:C4
X509v3 Authority Key Identifier:
keyid:96:81:53:C8:82:BE:5B:34:BE:D1:C8:F1:3D:3B:21:C5:C3:68:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/loFTyIK-WzS-0cjxPTshxcNoxCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loFTyIK-WzS-0cjxPTshxcNoxCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/loFTyIK-WzS-0cjxPTshxcNoxCs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:6f:50:1f:22:21:b0:79:c7:34:c9:c6:9f:08:e2:fd:fa:d4:
50:c3:e1:e5:2d:cc:50:1d:36:9a:d1:d6:7a:35:4f:1e:b6:39:
89:cf:3d:ea:56:9b:a8:fd:7f:a3:0f:b9:7b:3b:7c:79:68:79:
ed:d6:18:ab:bd:aa:bd:7d:1c:64:9f:fe:ae:f0:0c:c6:e4:81:
3f:d5:51:17:31:57:12:20:0b:f4:ed:dc:50:b5:d1:f9:5f:bd:
9e:e2:9e:6b:7e:82:02:0f:41:80:ff:be:8d:c5:83:de:7e:79:
01:9d:42:08:e9:08:18:d8:b0:51:33:57:96:bb:bf:a5:3f:c1:
3b:16:62:7a:a4:8a:bd:90:8d:10:8e:fb:ab:b3:77:53:5f:53:
f8:31:95:8f:f9:d2:88:9b:e1:ab:58:9e:ce:b6:94:c3:0f:14:
96:28:29:da:52:52:72:4f:0b:2b:b9:5f:ea:f9:d4:c3:dc:c8:
5d:90:1c:50:ca:7b:a3:eb:8d:41:45:f4:27:f8:7d:97:18:dd:
8c:fa:d3:dd:eb:34:ef:86:47:9a:45:2d:38:c6:cf:07:64:76:
86:55:c4:e3:28:3e:60:09:73:08:d9:55:ee:e8:35:6c:48:57:
c1:d6:cb:4e:f4:f8:4e:c3:cb:6c:0a:8d:96:07:b4:08:6e:3b:
6b:00:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org