Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/1/494FE6790825E3EFD5C87D5C61110B9D47FDFC70.mft
File: 494FE6790825E3EFD5C87D5C61110B9D47FDFC70.mft (raw, json)
Hash identifier: JpJaS/9ZKwaYn6btwTKk2QwZGp5r8EK4vOSBNccapb8=
Subject key identifier: BE:5F:48:54:18:0F:C6:01:24:F0:9E:8F:DC:1F:31:58:F2:98:5A:F5
Authority key identifier: 49:4F:E6:79:08:25:E3:EF:D5:C8:7D:5C:61:11:0B:9D:47:FD:FC:70
Certificate issuer: /CN=494fe6790825e3efd5c87d5c61110b9d47fdfc70
Certificate serial: 470F873EEB9D66AAF51B3C7D2925400D8A5F95DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU_meQgl4-_VyH1cYRELnUf9_HA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/1/494FE6790825E3EFD5C87D5C61110B9D47FDFC70.mft
Manifest number: 21
Signing time: Fri 22 Sep 2023 08:26:28 +0000
Manifest this update: Fri 22 Sep 2023 08:21:28 +0000
Manifest next update: Sat 23 Sep 2023 10:27:28 +0000
Files and hashes: 1: 3139342e3134352e3233372e302f32342d3234203d3e20383334.roa (hash: mFeraN7/qLQSXa1Klw5XhJQn65umZqoLlTaDC81MbMU=)
2: 3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa (hash: 0+AQSdaxnRyFsS5ntAN0lzU/U1MrwzznmSsUkfkKfrA=)
3: 494FE6790825E3EFD5C87D5C61110B9D47FDFC70.crl (hash: rTTSBThbwJ+rXvVFBUUOjr4bc/jtN1CX/nH9nlpnubk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:0f:87:3e:eb:9d:66:aa:f5:1b:3c:7d:29:25:40:0d:8a:5f:95:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494fe6790825e3efd5c87d5c61110b9d47fdfc70
Validity
Not Before: Sep 22 08:21:28 2023 GMT
Not After : Sep 23 10:27:28 2023 GMT
Subject: CN=BE5F4854180FC60124F09E8FDC1F3158F2985AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:48:eb:6a:a3:f5:1d:40:76:a6:94:5a:24:61:
64:bc:9d:5a:2a:eb:9f:08:9b:11:93:4c:9b:aa:88:
d2:94:3a:26:35:c0:c7:71:28:a7:f9:ab:4d:9c:5b:
50:fc:38:ec:92:a0:86:e0:af:7a:e4:84:9a:48:de:
de:ce:b1:09:46:df:18:32:25:e7:64:0d:4c:42:20:
71:6a:c8:52:cd:6a:6c:24:7c:c1:75:26:dd:b3:83:
4c:11:f0:9c:fb:90:d0:9e:64:47:0e:70:57:39:54:
b7:03:5f:57:0c:18:59:33:43:56:c1:9c:94:78:bd:
77:e9:91:22:b1:62:84:e6:b1:c7:03:40:f7:a1:10:
8e:8f:58:da:34:d2:d7:8d:02:56:8b:50:c5:e6:f9:
f4:9d:f9:67:19:2f:11:4d:8c:21:82:44:a9:b2:7e:
74:49:db:53:f5:e7:a2:ee:30:91:ca:c7:56:bc:f3:
f3:e8:6f:a9:3e:e7:67:53:5f:fa:49:ce:47:ed:a5:
ae:d1:a0:9c:91:ae:be:f7:5c:51:e1:3d:75:bc:cb:
67:51:8d:a5:2b:bd:d6:fb:72:cb:f8:b4:b0:f4:ac:
23:59:5a:80:c5:b2:06:cf:f1:6a:fe:f7:43:ba:41:
aa:2a:e8:44:28:f9:14:03:1c:24:32:9e:f5:03:20:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:48:54:18:0F:C6:01:24:F0:9E:8F:DC:1F:31:58:F2:98:5A:F5
X509v3 Authority Key Identifier:
keyid:49:4F:E6:79:08:25:E3:EF:D5:C8:7D:5C:61:11:0B:9D:47:FD:FC:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/1/494FE6790825E3EFD5C87D5C61110B9D47FDFC70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU_meQgl4-_VyH1cYRELnUf9_HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/1/494FE6790825E3EFD5C87D5C61110B9D47FDFC70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:da:23:57:fa:ef:0c:6f:96:b5:ae:4a:8a:cc:14:23:9a:2d:
1e:c3:da:2e:7e:e9:b8:8e:b4:94:89:3c:a4:35:ab:d6:61:37:
62:db:1e:8b:0e:c0:c1:29:ae:a3:1a:2e:10:ec:ec:2d:8c:fa:
77:82:21:65:7f:b6:46:a9:db:ef:50:78:30:23:c6:49:a6:b0:
74:8a:7d:d0:b9:48:07:fc:42:84:c9:53:4b:7e:6d:78:03:d6:
fc:70:e8:c2:62:71:19:cc:b7:27:d1:e5:9a:32:4b:0c:ad:7e:
85:2e:dd:99:52:08:8b:f4:7e:cc:d4:f6:2a:a9:2b:4b:d4:60:
5c:d2:95:2a:4b:d3:51:5d:d3:cf:de:3f:42:d9:c8:b4:7c:ec:
47:e0:e5:8d:1b:14:e7:f9:bd:a3:31:f0:75:cb:3f:45:8a:71:
99:db:36:af:b6:b7:e5:eb:f2:2a:99:15:84:c6:80:67:2f:09:
3d:87:83:19:8c:ce:ec:63:59:3d:57:a8:dc:9b:22:e4:c5:c0:
1b:1a:a0:22:68:b7:ce:25:7c:de:bb:5f:d9:f1:7e:43:ea:9f:
17:15:dd:74:07:b6:0d:9b:e4:4f:ec:2f:5c:18:01:8b:b3:3e:
26:56:0e:73:8f:2d:b1:0d:88:1f:91:a7:51:44:86:65:eb:43:
7c:92:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org