Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: WE8/muz4FgsPVxBg026SjLVii+jBayu1VXQSrPY1BQk=
Subject key identifier: 66:70:D9:86:AD:47:62:77:66:0B:54:DB:8C:D0:41:7E:26:62:99:B3
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 19F98A0EC5F424BFB5AD741918DDB0F4409893E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0632
Signing time: Fri 22 Nov 2024 08:12:28 +0000
Manifest this update: Fri 22 Nov 2024 08:07:28 +0000
Manifest next update: Sat 23 Nov 2024 12:11:28 +0000
Files and hashes: 1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: +h2380CDkHrgTb/3Z0E4I3FJp8RhrUZ2fkoxTEM4ylI=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: s6GpFm++Td2vziv7b8evt+nq8qsZvz/bpd1yFaiS6N4=)
3: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: XNpTfw0GR0xZwJyCQLIkDsV7NTLx+baYV6zLrseLr90=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f9:8a:0e:c5:f4:24:bf:b5:ad:74:19:18:dd:b0:f4:40:98:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Nov 22 08:07:28 2024 GMT
Not After : Nov 23 12:11:28 2024 GMT
Subject: CN=6670D986AD476277660B54DB8CD0417E266299B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:14:6d:a7:59:79:6f:49:94:43:4a:a5:8f:
e7:79:c8:c1:35:ff:10:43:c4:cc:a4:89:75:1d:69:
a9:f3:9f:8f:ff:fa:ed:38:05:eb:09:f0:19:c4:ea:
30:a0:2a:01:af:ea:c5:6e:07:59:e8:f3:79:be:07:
4d:53:39:c6:55:3a:81:48:11:62:24:84:08:b5:18:
10:23:86:35:af:11:e6:20:0c:e5:13:eb:5a:01:08:
34:74:2b:aa:09:f3:13:e7:a3:0b:18:fb:87:a8:1b:
d0:f7:af:3b:4b:db:b4:e7:3c:9f:9b:35:e8:20:b7:
32:f5:61:8e:bf:e1:23:6d:8f:37:bd:b1:22:18:ec:
00:10:4a:a4:9c:98:87:db:2c:dc:7c:e6:01:ee:8d:
40:ad:6e:3b:a8:e5:fb:ee:dc:af:2d:fe:37:53:c7:
a4:43:a1:bf:7a:11:0b:37:76:9f:22:01:7d:03:2c:
2a:35:2e:ed:6a:aa:9a:c2:2f:1b:22:51:bd:d9:bf:
4c:1e:11:ff:1d:51:23:7f:f7:a6:4e:43:be:49:c3:
7f:00:17:f6:75:b3:2d:ca:77:df:7c:e4:aa:28:3a:
4f:6b:da:8e:d4:f5:71:04:6a:60:12:70:c1:1f:22:
35:7b:9e:fb:2d:69:59:a1:43:4c:26:38:d5:a5:47:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:70:D9:86:AD:47:62:77:66:0B:54:DB:8C:D0:41:7E:26:62:99:B3
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:3c:00:1a:4e:2f:6f:20:88:55:37:3c:3b:90:40:c9:c9:
52:50:3d:d2:dd:f7:ca:35:69:29:49:81:56:a0:f0:56:a7:0f:
f5:49:fe:78:61:c5:7d:a6:83:07:cf:bf:5d:f7:86:73:be:c2:
4f:63:98:da:fb:10:69:15:fa:d8:8e:f0:58:2c:77:f3:69:6e:
c9:07:5c:db:25:cb:9a:9e:dd:5b:90:55:a7:66:55:cf:01:f7:
1f:04:cd:9b:13:44:9b:69:58:8d:47:86:f2:72:e9:46:5f:60:
d3:96:df:63:83:b0:21:3a:9f:ef:a8:e8:82:6a:62:db:2d:be:
02:39:b5:04:19:29:8f:aa:22:1a:4c:ed:5a:44:15:96:83:a4:
75:06:60:68:a7:45:86:78:63:b3:82:98:f8:d7:ea:fa:a9:00:
de:de:23:ee:e1:63:df:de:3f:20:e4:56:57:2d:73:4c:da:56:
f2:9b:da:b3:0a:de:c6:55:2f:e0:16:d5:dc:1e:03:56:1f:1e:
60:06:d3:d3:0d:ab:65:ab:1e:f1:43:2c:21:e5:b1:47:40:77:
e8:32:8c:70:83:1c:0e:1a:28:6b:14:9a:b5:f2:4d:9f:eb:a0:
a5:bc:fc:aa:eb:ee:46:cb:76:44:18:8b:df:45:88:06:8b:08:
88:2d:ca:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:48 2024 by rpki-client on console-fra.rpki-client.org