Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA0BF/5272F720B97A11ED8E542047C4F9AE02/rejE_gsnzFxSGjBJtmSeJkyyWlo.mft
File: rejE_gsnzFxSGjBJtmSeJkyyWlo.mft (raw, json)
Hash identifier: Gcu7Fc3cjBkkkVMyBqUgxCLe/pJi0Yrv8uh7TfEN470=
Subject key identifier: 12:BB:2E:17:DA:C5:A5:F8:99:DC:16:30:85:7A:54:49:A4:8D:E2:EF
Authority key identifier: AD:E8:C4:FE:0B:27:CC:5C:52:1A:30:49:B6:64:9E:26:4C:B2:5A:5A
Certificate issuer: /CN=A91FA0BF/serialNumber=ADE8C4FE0B27CC5C521A3049B6649E264CB25A5A
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rejE_gsnzFxSGjBJtmSeJkyyWlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA0BF/5272F720B97A11ED8E542047C4F9AE02/rejE_gsnzFxSGjBJtmSeJkyyWlo.mft
Manifest number: B2
Signing time: Thu 15 Feb 2024 05:22:13 +0000
Manifest this update: Thu 15 Feb 2024 05:22:13 +0000
Manifest next update: Thu 22 Feb 2024 05:22:13 +0000
Files and hashes: 1: rejE_gsnzFxSGjBJtmSeJkyyWlo.crl (hash: 24a2rwascYlc3Xvei0ZBCSIACSCYBAMqs93cdIVUACA=)
2: 89D1BB90B98211EDA271347EC4F9AE02.roa (hash: 47TYJlKZIcNE2Ogg1UQK2Y8G1chgasVrBKbQgME8jKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA0BF/serialNumber=ADE8C4FE0B27CC5C521A3049B6649E264CB25A5A
Validity
Not Before: Feb 15 05:22:13 2024 GMT
Not After : Feb 22 05:22:13 2024 GMT
Subject: CN=65cd9f85-8160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:d6:ef:6f:a8:62:b0:b5:36:c1:16:7f:69:
66:8a:67:db:29:75:a5:82:d5:fc:0c:6f:8c:7d:97:
ba:9f:e5:21:cd:d1:8d:90:6b:4d:db:bf:bb:16:94:
6b:c4:e5:dc:4f:52:7e:d8:15:69:80:43:4e:61:73:
ec:67:cd:17:dc:3f:94:68:9a:54:38:f2:af:b7:d7:
76:6c:b2:4b:75:36:c2:50:bb:a5:83:f1:60:8a:ba:
db:7f:6b:28:03:90:41:54:88:d6:52:d8:48:27:ba:
76:77:42:d5:64:16:5e:0d:b2:84:b3:96:92:7a:1e:
fb:fa:c5:ca:0e:e3:23:b3:3b:6f:62:65:c8:d1:ba:
0a:aa:b2:95:0a:87:ec:b0:fe:8c:57:73:e2:df:63:
76:92:91:a9:8b:c1:02:82:05:97:fa:e1:16:36:2b:
fb:82:36:0b:d1:38:0b:f3:25:ec:ac:61:43:db:7c:
ab:36:c1:d0:63:f7:5a:fc:8b:2e:dc:3b:72:db:fc:
dc:dc:35:9b:56:08:58:ca:bf:cc:48:6b:c2:fe:da:
6c:b4:e7:52:eb:5f:83:ef:6c:85:73:bf:3c:a4:20:
ea:7e:c8:4c:90:74:1a:b7:52:a3:a5:1d:9d:a5:be:
f4:51:41:f9:aa:8c:37:be:12:24:f1:14:eb:9c:c8:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:2E:17:DA:C5:A5:F8:99:DC:16:30:85:7A:54:49:A4:8D:E2:EF
X509v3 Authority Key Identifier:
keyid:AD:E8:C4:FE:0B:27:CC:5C:52:1A:30:49:B6:64:9E:26:4C:B2:5A:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA0BF/5272F720B97A11ED8E542047C4F9AE02/rejE_gsnzFxSGjBJtmSeJkyyWlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rejE_gsnzFxSGjBJtmSeJkyyWlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA0BF/5272F720B97A11ED8E542047C4F9AE02/rejE_gsnzFxSGjBJtmSeJkyyWlo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:dc:d0:d2:97:15:b5:bb:01:81:91:6d:f7:a8:0a:31:96:42:
60:fd:a0:ca:b3:15:5b:1f:e5:75:e2:77:93:2b:2e:37:5c:1d:
a6:c5:5a:b8:16:fc:d6:55:05:f9:a6:33:ae:f5:91:92:bb:4c:
0e:be:f7:6e:07:3b:40:c2:65:8e:d4:2c:96:4b:2e:f8:87:ed:
e4:0e:27:c3:9a:d0:82:2d:93:7f:14:93:4e:9c:e6:71:66:2d:
3b:77:88:48:6c:92:42:d3:7b:1d:5f:0e:01:29:65:8e:a2:4e:
4c:3f:c4:ec:69:19:11:ce:0e:49:29:16:c9:95:e2:55:15:42:
fa:ed:37:b2:59:0f:eb:3a:41:72:59:c2:b5:ac:89:db:b8:0d:
7d:70:7d:47:0a:35:6d:46:71:59:53:19:49:af:49:88:18:05:
37:a9:20:2e:7e:27:70:77:cf:3d:b2:a1:d4:34:45:f8:71:f4:
9c:80:97:ac:c2:29:02:9f:ac:8d:71:36:4b:ba:9b:12:a6:b1:
e1:18:f5:99:b5:60:ba:97:f0:73:f1:f1:a8:49:06:c9:74:01:
f3:d7:0e:09:c9:23:32:67:92:54:12:34:0d:6d:61:82:00:12:
85:69:fd:5a:ad:d9:7e:74:23:04:85:72:c5:e6:5f:ea:fb:96:
a8:7a:a4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 17 00:17:19 2024 by rpki-client on console-fra.rpki-client.org