Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC6D/5D9F12ECFD9611EB9E7FBD3BC4F9AE02/CcwByZn-FtLrWugwN0PrIjIFGqQ.mft
File: CcwByZn-FtLrWugwN0PrIjIFGqQ.mft (raw, json)
Hash identifier: huDmrjdtcKtNSmAkQhpZfnXdJar7ALTi21gbXn0tKbo=
Subject key identifier: F6:F8:AA:B0:28:99:51:36:0B:AF:68:53:40:2D:2C:00:72:74:83:9D
Authority key identifier: 09:CC:01:C9:99:FE:16:D2:EB:5A:E8:30:37:43:EB:22:32:05:1A:A4
Certificate issuer: /CN=A91EAC6D/serialNumber=09CC01C999FE16D2EB5AE8303743EB2232051AA4
Certificate serial: 0428
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcwByZn-FtLrWugwN0PrIjIFGqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC6D/5D9F12ECFD9611EB9E7FBD3BC4F9AE02/CcwByZn-FtLrWugwN0PrIjIFGqQ.mft
Manifest number: 0428
Signing time: Tue 23 Jan 2024 01:25:45 +0000
Manifest this update: Tue 23 Jan 2024 01:25:45 +0000
Manifest next update: Tue 30 Jan 2024 01:25:45 +0000
Files and hashes: 1: CcwByZn-FtLrWugwN0PrIjIFGqQ.crl (hash: BOcTmz8djapyIVycupwa7E2CRVXICcQWpqaKtspqPDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAC6D/serialNumber=09CC01C999FE16D2EB5AE8303743EB2232051AA4
Validity
Not Before: Jan 23 01:25:45 2024 GMT
Not After : Jan 30 01:25:45 2024 GMT
Subject: CN=65af1599-46dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:b4:57:e7:89:c5:f8:f7:3c:47:6d:cb:e6:
90:d1:c3:a0:69:85:92:89:9b:70:db:3b:46:00:cc:
d6:79:b2:fb:13:a2:1b:b9:6a:3a:7e:f1:aa:8e:33:
8e:a8:f1:e0:57:c5:63:de:d0:64:5a:10:c8:72:fb:
d6:fc:37:26:db:41:4a:6d:42:05:27:75:06:1e:f2:
95:a0:c6:13:83:4c:e8:8c:4c:25:ff:20:5f:4f:f4:
a0:76:70:3e:ca:69:c2:fc:3f:68:6e:18:98:be:3e:
c9:bd:c6:98:3e:0b:c8:b2:ed:06:08:2d:b5:ed:71:
67:ba:18:b2:86:91:a6:96:f1:1a:e9:83:16:1e:cb:
d5:b7:80:cb:85:a4:23:ce:56:90:1d:95:7a:0d:2d:
d5:ac:4a:08:89:e4:49:c9:82:9c:c9:a7:be:da:b5:
2c:28:0a:c9:ce:8a:1d:ee:92:a2:c7:1e:9e:63:a5:
cc:3b:8e:8f:16:16:39:38:78:41:f2:ee:27:a9:89:
39:35:72:d4:6f:5c:24:b6:1d:5f:9e:ff:4a:dd:42:
42:4b:b5:5c:c8:0b:2a:c5:56:46:30:d2:27:a7:dd:
77:4d:16:46:8d:16:9b:ab:ba:da:94:d2:ec:54:85:
62:42:f2:5f:32:fb:61:d5:3f:fc:20:a0:66:0c:5d:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F8:AA:B0:28:99:51:36:0B:AF:68:53:40:2D:2C:00:72:74:83:9D
X509v3 Authority Key Identifier:
keyid:09:CC:01:C9:99:FE:16:D2:EB:5A:E8:30:37:43:EB:22:32:05:1A:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAC6D/5D9F12ECFD9611EB9E7FBD3BC4F9AE02/CcwByZn-FtLrWugwN0PrIjIFGqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcwByZn-FtLrWugwN0PrIjIFGqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC6D/5D9F12ECFD9611EB9E7FBD3BC4F9AE02/CcwByZn-FtLrWugwN0PrIjIFGqQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:39:95:97:bd:b7:b1:ee:dd:d6:a8:87:9b:4c:62:c6:a1:1e:
38:1d:89:c7:2c:87:8b:cf:6e:29:88:ed:44:53:ce:34:db:14:
66:83:0d:ab:80:9c:c2:fa:82:74:51:1a:ef:9d:de:45:2a:7d:
76:40:5c:62:45:68:d5:61:b4:53:33:d9:de:db:e5:09:db:5f:
e4:3d:68:e8:1b:9d:4d:a4:d6:2e:0a:f5:6d:d8:42:0c:02:46:
66:0b:3d:aa:fb:ca:65:1d:6c:54:11:89:c2:b7:23:24:06:27:
e4:cb:78:bd:a7:55:4a:e1:a3:61:8e:0e:bd:9a:38:91:3a:dd:
63:77:e1:0d:da:e3:ab:ab:be:75:9b:46:bb:20:a6:e6:ef:02:
be:8a:8d:26:04:c6:13:80:6d:d7:f3:1b:60:ef:6a:a3:42:5e:
51:e7:da:bc:e1:6f:02:a6:a8:90:3d:c8:a8:a0:79:50:40:0e:
9a:3c:fc:70:79:37:51:18:e4:16:6c:fc:c6:5d:dc:f9:7f:69:
38:71:a9:41:ce:a1:e8:a7:db:68:14:88:a0:a9:d3:cb:8d:36:
77:20:29:2f:f2:95:c8:42:b5:40:e0:09:ff:de:14:df:f1:71:
aa:9c:cd:73:df:ff:44:96:77:60:9e:1a:f8:74:b3:5a:2a:00:
25:51:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 00:12:46 2024 by rpki-client on console-fra.rpki-client.org