Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/1/6B154E1DE7185CF18264814F64D7DDD9986615C1.mft
File: 6B154E1DE7185CF18264814F64D7DDD9986615C1.mft (raw, json)
Hash identifier: Wc5ysxMddJAwcIdsBvMSq1yBJxZykaw1iUEXOcSU0fI=
Subject key identifier: EC:FD:97:05:86:59:B2:37:67:00:7A:8E:ED:D2:9E:30:8A:B7:CA:44
Authority key identifier: 6B:15:4E:1D:E7:18:5C:F1:82:64:81:4F:64:D7:DD:D9:98:66:15:C1
Certificate issuer: /CN=A91857810000/serialNumber=6B154E1DE7185CF18264814F64D7DDD9986615C1
Certificate serial: 2C3EF69B3CE520A1B4484C9D4F37F64028EA00CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axVOHecYXPGCZIFPZNfd2ZhmFcE.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/1/6B154E1DE7185CF18264814F64D7DDD9986615C1.mft
Manifest number: A2
Signing time: Tue 28 Mar 2023 07:10:32 +0000
Manifest this update: Tue 28 Mar 2023 07:05:32 +0000
Manifest next update: Wed 29 Mar 2023 10:05:32 +0000
Files and hashes: 1: 323430353a393234303a3a2f33322d3332203d3e203631333137.roa (hash: vm/DJaczqgXAGJi0I6mBXOkw0YPP+v1Ut/77m91g7QY=)
2: 6B154E1DE7185CF18264814F64D7DDD9986615C1.crl (hash: NFcRhxirLMtlNjShjgi49joNoPC+DZhW1sUW4N/fMvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3e:f6:9b:3c:e5:20:a1:b4:48:4c:9d:4f:37:f6:40:28:ea:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91857810000/serialNumber=6B154E1DE7185CF18264814F64D7DDD9986615C1
Validity
Not Before: Mar 28 07:05:32 2023 GMT
Not After : Mar 29 10:05:32 2023 GMT
Subject: CN=ECFD97058659B23767007A8EEDD29E308AB7CA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:c5:11:d8:49:b0:ea:12:99:d4:a9:c1:fb:
7e:d9:b9:93:96:a0:4f:d3:19:56:7b:13:99:b4:40:
07:d2:e4:89:be:b8:35:e3:bc:ad:4f:a9:58:f8:ff:
e1:b4:7b:a3:8c:7a:02:1c:88:01:28:b7:b1:90:4f:
f8:14:32:18:7f:f0:7f:be:3a:05:79:18:c7:f5:ea:
85:20:8f:89:63:23:6a:6b:06:ad:d5:c9:26:42:57:
01:f3:10:bb:b0:ea:94:7d:cd:d3:aa:c4:54:d9:09:
6f:2f:85:1c:52:43:12:78:e8:8f:55:e0:5a:48:42:
2f:18:d0:80:e3:0b:28:e9:30:c1:5d:04:95:28:68:
17:5b:80:63:c6:2f:d9:08:40:be:0f:4f:85:b5:31:
a2:b9:28:d4:09:c3:ab:2b:f7:fb:2f:b2:be:dc:d8:
8e:f0:2d:ad:22:9f:f3:13:ff:87:f6:f9:e3:2d:33:
c5:0e:6f:b0:61:57:82:4e:98:bc:d3:2b:36:72:79:
db:8d:09:2a:c6:4f:4d:fd:ac:f9:19:4a:34:6f:2d:
ca:6a:f1:f6:91:5e:96:a1:2f:49:0d:0b:7c:c4:76:
ce:01:50:bb:ca:6f:e4:53:6e:ce:1b:06:c5:56:ed:
57:c3:3c:11:ad:4c:c7:be:62:00:ae:ad:75:48:c4:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:97:05:86:59:B2:37:67:00:7A:8E:ED:D2:9E:30:8A:B7:CA:44
X509v3 Authority Key Identifier:
keyid:6B:15:4E:1D:E7:18:5C:F1:82:64:81:4F:64:D7:DD:D9:98:66:15:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91857810000/1/6B154E1DE7185CF18264814F64D7DDD9986615C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axVOHecYXPGCZIFPZNfd2ZhmFcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/1/6B154E1DE7185CF18264814F64D7DDD9986615C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5c:90:c0:b7:ab:b4:c6:51:36:9b:f9:63:c3:62:8f:b2:a7:
4d:e8:55:7a:6f:7b:60:d9:19:73:93:8f:5b:99:10:eb:7c:5c:
c9:5a:30:f5:ec:42:b9:22:96:da:19:a9:45:6c:ec:cf:e3:1f:
03:62:d7:ce:6d:b6:60:7c:d2:5e:2e:df:94:85:80:c4:2a:c2:
71:c3:c9:f3:de:54:a7:92:41:b9:a8:28:57:ab:4a:f8:31:47:
de:f7:a6:4e:79:bf:5e:a1:e1:ed:7f:5e:db:8d:3d:5e:99:34:
2e:1c:4f:ff:39:18:31:24:a0:80:95:2c:09:a3:b8:3a:26:82:
b5:89:4a:98:47:03:f2:98:36:74:05:22:f1:c3:cf:0d:24:75:
5b:50:94:01:8d:32:db:fa:38:b2:50:e8:01:1f:81:1f:ad:d4:
43:d5:a8:b4:d2:98:7f:5e:fd:09:c2:a7:9e:73:cd:95:04:d4:
44:70:07:5a:ed:61:16:a2:bd:14:2f:0d:ad:e2:41:b8:c4:0a:
39:34:e1:76:2e:40:2e:4b:2e:c8:23:c9:f2:66:ef:bc:f4:cf:
9f:f5:53:d1:68:e8:78:56:2b:30:68:f1:38:17:65:57:00:02:
b4:b9:48:ad:ec:1d:af:94:57:d8:8d:33:55:69:be:7a:22:f4:
3d:b4:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org