Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft
File: CeskiT_4OKrchy_8N1hCf2rsIXI.mft (raw, json)
Hash identifier: XqsdnHCnXSe85jxP7bVavBbqYm698QoLxsvU8g+HELE=
Subject key identifier: 9D:50:DC:26:52:02:59:F0:29:34:1E:12:2B:FA:A9:DB:73:05:D6:E4
Authority key identifier: 09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72
Certificate issuer: /CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172
Certificate serial: 0504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft
Manifest number: 067D
Signing time: Thu 30 Jan 2025 23:40:14 +0000
Manifest this update: Thu 30 Jan 2025 23:40:14 +0000
Manifest next update: Thu 06 Feb 2025 23:40:14 +0000
Files and hashes: 1: CeskiT_4OKrchy_8N1hCf2rsIXI.crl (hash: NEUTpB5peG44dr9L6Q/8lByGDK/Szps85IReSrpqzco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F7A1/serialNumber=09EB24893FF838AADC872FFC3758427F6AEC2172
Validity
Not Before: Jan 30 23:40:14 2025 GMT
Not After : Feb 6 23:40:14 2025 GMT
Subject: CN=679c0dde-cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:b3:60:55:e3:b6:1f:d4:4b:3d:c0:cf:7e:
d9:45:0b:dd:a4:9d:cb:71:3c:0a:93:c3:51:7a:39:
a3:44:3d:e8:24:4a:5d:87:5c:37:db:ca:ab:bd:a2:
b9:c7:96:52:60:c9:30:cb:ac:14:11:8a:43:45:1a:
2b:0a:d1:02:a9:31:3b:29:94:78:22:a7:af:7e:ba:
dc:e4:4f:f8:4d:36:38:0b:97:44:74:86:dc:09:bf:
9d:25:82:28:da:a2:5d:20:b7:a2:90:04:81:94:28:
f9:0e:87:91:c7:86:88:b9:98:0c:27:47:ab:b2:54:
74:b6:81:87:2d:b8:37:bc:01:a7:9c:6c:dd:d7:ac:
a6:ef:3b:bf:81:3e:7b:85:7a:1c:e2:6d:62:e8:48:
5c:b2:26:be:78:96:17:36:da:dc:a6:ef:37:d3:9b:
17:56:fa:11:ef:64:52:68:50:4b:6e:f6:8a:84:82:
4f:7e:6a:cf:a6:08:57:6e:20:8a:6e:2c:c7:7b:f9:
e1:31:e1:7a:19:3e:58:66:ff:86:8e:05:3a:84:c5:
d7:8a:81:b4:72:1d:3f:46:22:70:fb:8c:fb:c0:ba:
b0:26:a0:49:80:dd:b4:73:96:d6:23:0a:e5:ac:0d:
bb:23:4e:b7:42:0b:29:f5:3c:f5:9a:6c:63:ae:03:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:50:DC:26:52:02:59:F0:29:34:1E:12:2B:FA:A9:DB:73:05:D6:E4
X509v3 Authority Key Identifier:
keyid:09:EB:24:89:3F:F8:38:AA:DC:87:2F:FC:37:58:42:7F:6A:EC:21:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeskiT_4OKrchy_8N1hCf2rsIXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/CeskiT_4OKrchy_8N1hCf2rsIXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:81:58:a7:52:64:40:21:09:b1:65:d2:10:6e:e4:7a:7f:
d7:59:0d:09:dc:c6:1b:f7:94:aa:0e:77:b6:3a:34:be:8e:3b:
06:89:4f:f5:b2:9c:9a:35:8a:6a:47:49:58:72:86:54:59:7a:
eb:1d:6e:b1:70:4f:e6:c1:c6:80:ad:ce:56:08:e7:21:18:2e:
f6:05:d3:01:ce:96:a2:ec:b3:85:93:d1:67:d6:48:a0:5a:40:
47:1a:61:9c:ea:57:35:26:51:51:29:a2:dc:cf:1e:3a:1b:0b:
ba:18:8b:6e:fe:6d:ec:6c:0a:29:e3:0b:5c:28:ed:0e:fe:b8:
83:2e:f9:d8:b2:4f:26:f7:bf:74:7b:45:98:c5:83:8f:c4:2f:
26:7e:8e:eb:37:6c:da:9c:57:51:40:53:08:39:81:4b:c1:0a:
89:0b:26:1e:0f:9b:74:a5:03:37:f0:79:25:4b:2b:9b:50:ad:
4f:6e:57:f8:22:90:34:d8:f0:7f:cc:a7:d8:52:c6:23:ed:a3:
5e:3b:58:5e:de:17:4d:29:28:11:92:3a:b5:53:f7:d1:13:cc:
e4:96:6d:e8:03:92:76:70:8a:05:a5:a7:d0:2e:d1:28:b0:cf:
51:22:2e:ef:d2:0e:6e:d9:11:fc:76:68:22:b5:da:69:5a:3a:
36:e7:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:11 2025 by rpki-client