Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.mft
File: LHutYvqxCWb89CjdNre6j1Kqpc8.mft (raw, json)
Hash identifier: KrwWGmbrJt9lSBQPdkRdiW4Iq+ZYPhOQ1oISBtHei+U=
Subject key identifier: FD:21:D8:EC:F7:13:C8:36:B2:8F:07:75:4F:0A:40:2C:DD:17:38:24
Authority key identifier: 2C:7B:AD:62:FA:B1:09:66:FC:F4:28:DD:36:B7:BA:8F:52:AA:A5:CF
Certificate issuer: /CN=A9161B5D/serialNumber=2C7BAD62FAB10966FCF428DD36B7BA8F52AAA5CF
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHutYvqxCWb89CjdNre6j1Kqpc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.mft
Manifest number: DA
Signing time: Tue 09 Jan 2024 04:50:35 +0000
Manifest this update: Tue 09 Jan 2024 04:50:34 +0000
Manifest next update: Tue 16 Jan 2024 04:50:34 +0000
Files and hashes: 1: LHutYvqxCWb89CjdNre6j1Kqpc8.crl (hash: 9rn5e6b7GNFZSDkKVwWboJB3z6oSR7kCYPns9Jbx3AY=)
2: C7A060E4672911EDAB094B29C4F9AE02.roa (hash: qiiKt2mlQFM+/mwG/HAX2bopUNbpsN/CGmelTuQWvxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B5D/serialNumber=2C7BAD62FAB10966FCF428DD36B7BA8F52AAA5CF
Validity
Not Before: Jan 9 04:50:34 2024 GMT
Not After : Jan 16 04:50:34 2024 GMT
Subject: CN=659cd09b-5ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:26:77:a0:94:47:09:b8:ae:65:bd:c0:1c:
5b:29:ec:7a:f3:c5:c9:6f:48:19:76:83:da:94:cb:
73:7b:83:7f:2c:37:ec:ef:88:5d:6c:0e:ed:8e:8b:
fc:5d:87:c7:f4:74:7c:d8:1b:e0:1d:f4:9f:22:99:
2d:dd:42:c9:e2:be:7a:d5:51:fc:07:86:3f:e8:72:
70:bc:d2:10:28:6f:d3:03:e2:aa:4a:de:8c:79:9e:
f7:c5:fe:2e:1d:65:9e:da:98:77:12:cb:59:6f:2b:
00:1b:76:64:b9:5d:d0:ca:c2:65:79:60:79:0e:70:
8f:01:b5:bc:2b:e0:b4:00:89:70:a1:2d:73:42:7b:
26:22:af:8d:87:15:51:fd:41:db:7b:a0:4a:59:93:
23:ad:1b:10:15:de:87:b3:b4:a7:0c:86:ed:b1:4d:
72:8e:7e:f1:37:83:b3:58:76:ea:91:ba:d3:31:11:
59:4e:59:9f:0d:1b:f1:84:d5:1e:17:a6:23:46:c1:
f9:70:07:c6:a7:93:c1:fd:b0:78:65:3e:9b:76:96:
e2:26:ed:cc:60:9d:36:e8:a1:62:78:53:86:14:cc:
67:5e:e4:99:57:3a:ff:00:81:5e:a8:63:e6:da:81:
8c:cb:9f:54:f9:91:a7:62:61:c5:b6:f9:dc:15:c0:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:21:D8:EC:F7:13:C8:36:B2:8F:07:75:4F:0A:40:2C:DD:17:38:24
X509v3 Authority Key Identifier:
keyid:2C:7B:AD:62:FA:B1:09:66:FC:F4:28:DD:36:B7:BA:8F:52:AA:A5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHutYvqxCWb89CjdNre6j1Kqpc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9f:38:dd:79:bc:b7:7f:1d:b0:72:b2:59:4f:3b:f8:52:4e:
f5:0a:2a:af:3b:2c:e1:cb:a2:e0:87:3a:be:9b:ce:69:ab:5d:
df:af:c8:76:f2:66:42:b3:e2:de:df:1e:6c:49:f6:24:78:5d:
b3:65:2e:02:de:03:13:24:d7:bb:f9:2a:b5:4b:e3:a1:96:d1:
2e:34:0f:f8:bd:d0:0b:6b:3c:86:82:65:ec:2f:47:1f:b7:33:
c5:b4:fb:f6:fb:05:ab:49:62:38:2e:fa:33:ff:2b:20:ce:72:
09:a7:72:2d:f3:72:03:d3:fc:64:d8:25:dd:30:2b:fc:a7:cb:
7b:cc:42:a6:5b:59:12:af:5b:8b:08:c8:5c:a2:94:9f:02:0b:
9b:f0:02:93:55:93:f8:da:60:35:7f:19:5a:bc:ea:7c:8e:61:
5d:4b:70:d2:1d:9c:27:5d:b7:8d:bf:c8:4e:c0:96:27:04:26:
ed:c0:f8:69:31:44:6a:b8:57:ec:b0:ff:d4:74:51:16:4b:ae:
47:6c:65:64:b8:9d:a7:3f:8e:c3:d8:e6:7a:f3:2a:dd:53:b9:
c8:fa:28:3c:64:8c:0e:e2:48:80:4c:19:aa:6e:f1:cf:0f:7d:
b3:37:0a:e7:c2:1f:b4:9a:7a:d3:18:80:ef:0d:d5:dd:89:a6:
a8:69:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:01 2024 by rpki-client on console.sobornost.net