Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/3/A662FEBC86BD39C9EAC4ABA4733A01C0EB1C0F1A.mft
File: A662FEBC86BD39C9EAC4ABA4733A01C0EB1C0F1A.mft (raw, json)
Hash identifier: FepZhci94j8vh81/NG8M7ecOGAZbYGINgsEky+xdxfM=
Subject key identifier: FC:5C:64:76:5F:4F:BF:15:1B:57:E2:29:2A:50:60:DE:A1:F4:EC:D1
Authority key identifier: A6:62:FE:BC:86:BD:39:C9:EA:C4:AB:A4:73:3A:01:C0:EB:1C:0F:1A
Certificate issuer: /CN=a662febc86bd39c9eac4aba4733a01c0eb1c0f1a
Certificate serial: 32636354EA90973CAA19EC26E9D098D18905A2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmL-vIa9OcnqxKukczoBwOscDxo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916C75D0000/3/A662FEBC86BD39C9EAC4ABA4733A01C0EB1C0F1A.mft
Manifest number: 2A
Signing time: Wed 14 Aug 2024 02:53:54 +0000
Manifest this update: Wed 14 Aug 2024 02:48:54 +0000
Manifest next update: Thu 15 Aug 2024 04:43:54 +0000
Files and hashes: 1: A662FEBC86BD39C9EAC4ABA4733A01C0EB1C0F1A.crl (hash: k9Y+VGN+j+n18Ykl97+nRokdLnB7+4N8y08eac9ZMvI=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: cztt2XyDPAVyG8RFlS93sSAeKXm5MIvVN0rsxESCxj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:63:63:54:ea:90:97:3c:aa:19:ec:26:e9:d0:98:d1:89:05:a2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a662febc86bd39c9eac4aba4733a01c0eb1c0f1a
Validity
Not Before: Aug 14 02:48:54 2024 GMT
Not After : Aug 15 04:43:54 2024 GMT
Subject: CN=FC5C64765F4FBF151B57E2292A5060DEA1F4ECD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:a5:a3:60:61:4e:46:24:07:23:48:a1:1f:
88:13:8c:77:e6:85:3d:13:6a:07:f2:4d:ef:0e:31:
0c:0a:d5:24:8e:3b:a1:3e:51:f8:5b:f7:4b:8d:37:
bb:7e:0e:c8:e1:c2:af:cb:4d:c1:c5:6f:5e:2e:e8:
0d:51:59:53:e8:14:a8:fe:fb:20:a6:bd:3e:7d:ce:
3a:da:5d:a4:08:33:23:61:71:b5:d5:e3:bd:ed:10:
5b:67:e6:df:4f:98:16:50:86:d9:80:f4:97:46:03:
6a:61:5f:bd:c9:01:08:a3:ca:24:46:85:d1:61:a9:
2c:ad:38:fd:8e:e5:03:d5:9d:24:d8:4c:3b:75:80:
ed:15:ec:82:63:f1:ea:fb:10:ee:99:5e:12:75:f2:
60:db:6c:35:d3:a2:9c:3d:aa:4f:4c:83:21:84:85:
71:d0:80:43:b1:e0:b8:da:99:a8:66:96:55:aa:15:
45:71:4b:50:98:87:d6:e5:df:be:27:00:af:41:b8:
bf:7e:ba:53:d9:a0:e1:84:37:69:a1:9c:f4:fb:88:
01:ed:c6:e1:ce:8a:28:b4:e3:ef:2d:53:20:ed:a0:
55:3c:c2:49:57:ef:91:8c:3b:52:14:58:6c:54:ac:
7d:44:cb:e4:7b:92:52:5c:56:63:e1:73:58:5d:ad:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5C:64:76:5F:4F:BF:15:1B:57:E2:29:2A:50:60:DE:A1:F4:EC:D1
X509v3 Authority Key Identifier:
keyid:A6:62:FE:BC:86:BD:39:C9:EA:C4:AB:A4:73:3A:01:C0:EB:1C:0F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/3/A662FEBC86BD39C9EAC4ABA4733A01C0EB1C0F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmL-vIa9OcnqxKukczoBwOscDxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/3/A662FEBC86BD39C9EAC4ABA4733A01C0EB1C0F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b4:13:0d:1f:b5:a2:7d:01:2f:f9:2e:1b:ec:3b:9e:78:ce:
90:75:e3:ad:da:e2:9a:e6:61:64:02:b7:60:c1:32:5f:ac:9e:
56:3c:e6:e5:c5:e1:32:7b:19:bb:14:8a:32:d3:e2:07:54:b2:
23:d6:37:5e:c6:fc:e0:1f:fe:a3:7c:88:30:5d:ed:43:a5:c1:
3e:1f:b9:14:f6:e9:71:75:67:35:db:18:20:e8:93:fa:6e:d9:
90:71:6c:83:c1:2b:35:24:8d:ca:99:fd:cb:9f:0d:85:94:0b:
f1:92:29:fa:ec:be:11:7d:5f:84:a7:7f:1b:5a:39:ba:4a:56:
d8:2a:fc:20:27:a2:ba:ce:f1:5b:92:e6:6d:28:cb:4c:f3:26:
75:91:6f:78:b9:90:29:a8:f5:f2:a6:3e:de:ea:c0:8f:38:d8:
4f:fa:5d:83:4e:96:13:d2:6c:d3:5b:16:4b:75:83:13:41:eb:
89:98:0c:e3:80:4a:fe:96:50:ab:39:89:31:11:5a:ef:d8:ac:
47:54:a5:37:d8:14:56:fd:89:5a:b6:28:77:54:6a:9a:86:37:
6a:0b:af:42:46:b4:f9:32:e3:77:88:28:eb:56:87:7d:a6:8a:
30:a4:a3:ed:1f:97:a8:6d:d3:13:31:89:cf:6c:a1:07:61:46:
15:ab:4b:9e
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 16 09:53:36 2024 by rpki-client on console-ams.rpki-client.org