Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.mft
File: didjt9YAlykw6d56FELF0w9oxIQ.mft (raw, json)
Hash identifier: 6QFY/HBDNBbUceNr+qFuJGbR0wGacUni8KJxG9mnq1w=
Subject key identifier: 17:E9:B6:55:50:2E:18:FA:A5:58:2D:A7:6F:D0:92:F5:C5:02:F1:3E
Authority key identifier: 76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84
Certificate issuer: /CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
Certificate serial: 1173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.mft
Manifest number: 115F
Signing time: Fri 27 Oct 2023 03:23:43 +0000
Manifest this update: Fri 27 Oct 2023 03:23:42 +0000
Manifest next update: Fri 03 Nov 2023 03:23:42 +0000
Files and hashes: 1: didjt9YAlykw6d56FELF0w9oxIQ.crl (hash: NpVGO7K2COQI2PNeylapOzkb1GL23ENpOn4o4a+ztDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4467 (0x1173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
Validity
Not Before: Oct 27 03:23:42 2023 GMT
Not After : Nov 3 03:23:42 2023 GMT
Subject: CN=653b2d3f-ff83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:d2:0b:aa:a5:ee:31:36:f9:e1:6b:58:6e:
75:ec:40:84:d9:e5:09:97:c1:fc:48:ca:fe:c1:96:
fc:e3:d0:96:3f:0e:e2:29:fa:25:6e:a9:3f:16:e8:
96:6b:cb:2e:78:42:f4:97:0d:ff:b2:ed:1a:6e:12:
7e:3e:7c:ef:cf:6a:2d:ff:e7:b7:b1:1e:9f:43:13:
fc:05:5a:c5:a5:5f:d3:90:23:8e:e4:d2:b7:24:49:
38:a1:47:a8:6a:7f:88:91:f8:3c:a6:10:a4:e8:38:
26:34:f1:d3:d5:41:1a:a7:81:60:11:81:2f:f1:7c:
38:41:e1:2d:db:be:47:52:5d:ab:f6:fd:19:e0:d7:
b1:3e:85:c2:8b:1a:8b:6e:0c:18:ba:4e:1c:eb:9b:
ff:63:5c:5b:98:28:67:fc:5a:ef:6c:98:5f:04:c9:
db:35:50:e4:ea:04:f6:e7:53:50:f9:6b:04:7a:20:
1d:b7:b1:73:d6:72:3f:7a:e6:eb:de:73:40:27:3a:
9a:6c:24:23:a9:ad:e2:4d:c1:f0:54:6c:2e:e5:b2:
f0:46:7b:aa:77:d9:08:77:ce:bf:91:55:20:f7:c3:
ed:da:75:0a:00:2b:ce:a3:da:26:57:e4:15:d2:84:
63:04:c0:0e:1d:53:81:fc:1b:b0:33:0b:47:b8:b5:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:B6:55:50:2E:18:FA:A5:58:2D:A7:6F:D0:92:F5:C5:02:F1:3E
X509v3 Authority Key Identifier:
keyid:76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:0b:7c:3d:05:a4:82:7e:20:4a:3f:a1:d8:87:46:21:79:fb:
1d:de:e6:b7:fb:eb:ca:f4:ae:a7:c8:89:72:6a:0e:25:26:62:
a4:4c:55:4d:e9:8d:bf:f8:e6:d9:e2:a1:d2:37:27:ed:47:b0:
de:8b:e7:c9:92:2b:98:22:ad:1c:d8:46:85:79:bd:6f:4f:48:
80:8f:23:45:0d:64:7c:1a:2e:27:49:da:e9:91:31:8c:25:71:
74:51:e3:40:c5:d1:13:d0:dc:b1:f8:de:d8:2c:48:d2:d2:d7:
18:76:6b:da:34:52:cc:16:17:93:a8:26:1e:f9:46:22:c1:86:
e3:dd:8a:c1:37:a4:16:23:14:10:e9:77:d6:c4:d4:9a:05:4c:
fe:9a:dd:e8:44:20:02:fe:c9:7a:d1:9d:d9:b7:ac:ae:8c:71:
21:b1:b8:45:7e:02:55:5f:98:6d:5e:05:cb:07:d6:ad:3a:62:
6c:8c:4e:f2:9a:53:2a:98:ea:99:7f:0f:61:0f:57:a1:10:3e:
3e:ee:36:20:c7:52:b4:d5:2e:9d:af:73:4f:91:df:73:e7:c6:
28:30:06:5f:2b:e9:20:ee:a3:de:de:31:df:ee:78:ff:80:00:
f1:dd:a9:ba:4b:30:9a:f0:d6:6f:55:f1:37:9c:b4:a5:41:4f:
e8:0c:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org