Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/day-HU5KrLa_cxt1l9Q4OeJNo-c.mft
File: day-HU5KrLa_cxt1l9Q4OeJNo-c.mft (raw, json)
Hash identifier: Y51dYrLNVnPdngNFESIS9w6JozEwotu32V/JrtncTec=
Subject key identifier: F3:A9:FA:EF:22:F9:27:72:C8:7E:2A:7C:CE:37:24:6D:81:7F:CE:A9
Authority key identifier: 75:AC:BE:1D:4E:4A:AC:B6:BF:73:1B:75:97:D4:38:39:E2:4D:A3:E7
Certificate issuer: /CN=A913BDEF/serialNumber=75ACBE1D4E4AACB6BF731B7597D43839E24DA3E7
Certificate serial: 12B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/day-HU5KrLa_cxt1l9Q4OeJNo-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/day-HU5KrLa_cxt1l9Q4OeJNo-c.mft
Manifest number: 12A5
Signing time: Tue 17 Oct 2023 05:05:01 +0000
Manifest this update: Tue 17 Oct 2023 05:05:01 +0000
Manifest next update: Tue 24 Oct 2023 05:05:01 +0000
Files and hashes: 1: day-HU5KrLa_cxt1l9Q4OeJNo-c.crl (hash: Qh/aEAUp1oPcL7DU9D/iNkTuKco0pDyGIef+ZYnzMUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4785 (0x12b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BDEF/serialNumber=75ACBE1D4E4AACB6BF731B7597D43839E24DA3E7
Validity
Not Before: Oct 17 05:05:01 2023 GMT
Not After : Oct 24 05:05:01 2023 GMT
Subject: CN=652e15fd-0852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:f1:32:75:5c:cb:e7:4d:1a:58:d5:f1:b6:
d9:56:d9:c1:b1:b0:33:c4:81:e1:63:5a:b0:91:c2:
4d:e8:0f:0e:3b:fb:0c:c0:c3:f1:e3:e3:54:40:68:
1c:f7:4a:b5:eb:76:e4:6f:19:d3:d8:8e:7d:25:5e:
40:cf:a3:de:d9:2f:db:2b:13:ef:80:7b:8d:cf:73:
99:2d:db:4d:5d:cd:e8:8f:bf:a1:bb:76:6c:15:64:
07:0e:97:5d:3c:8d:05:3c:75:18:90:f1:a7:51:da:
3d:06:c2:a2:66:1e:fe:98:70:aa:02:81:9b:4f:f7:
2e:65:24:c1:aa:01:fa:3a:5b:00:df:a4:f9:4e:30:
b8:b9:f1:a0:94:2e:86:0f:ca:be:e6:3d:84:a3:7b:
7e:b6:f8:4a:aa:9e:ed:aa:bb:47:dd:d0:ec:e4:df:
d0:f6:cf:9b:64:32:6a:ed:e3:b7:24:ba:eb:8a:61:
dc:d2:03:3f:42:9e:a2:03:96:38:d9:64:c2:8c:86:
a0:43:5c:44:0e:f4:89:cb:b8:f1:cd:37:1d:b8:48:
bd:d0:10:fc:58:7c:56:1e:57:68:22:fa:0d:2c:be:
ed:b4:1e:c6:47:16:c6:4c:3f:7a:c5:47:44:bd:b9:
c0:0f:6f:d5:22:14:b7:ef:5d:ba:43:bf:17:bd:58:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:FA:EF:22:F9:27:72:C8:7E:2A:7C:CE:37:24:6D:81:7F:CE:A9
X509v3 Authority Key Identifier:
keyid:75:AC:BE:1D:4E:4A:AC:B6:BF:73:1B:75:97:D4:38:39:E2:4D:A3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/day-HU5KrLa_cxt1l9Q4OeJNo-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/day-HU5KrLa_cxt1l9Q4OeJNo-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/day-HU5KrLa_cxt1l9Q4OeJNo-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:38:d6:41:c0:05:04:d7:a7:21:89:a3:47:7b:76:e7:ee:bd:
1f:33:d2:5d:af:f7:82:53:6d:da:c3:e0:eb:f5:35:fd:cb:0a:
7d:a1:40:30:fe:68:ab:60:02:97:9f:1b:03:7b:41:7c:ee:4d:
1e:af:f4:43:d8:56:89:68:ce:d6:c5:ac:ee:42:62:5d:b9:2b:
4a:24:4f:82:1c:9e:f5:dd:d2:2b:ef:0b:ad:61:c4:25:fa:98:
2f:a9:7a:34:81:d6:2b:10:ad:72:cf:ad:fc:a9:35:6a:50:4b:
ab:3a:15:11:fd:14:31:6d:c3:7b:a0:fc:6f:5f:0b:3e:c9:6a:
67:88:06:0b:a7:3e:69:6b:df:cc:ab:38:b6:10:7c:b7:fe:88:
ae:97:e7:25:f3:79:fb:52:e4:f0:e8:b4:54:d4:64:b9:10:85:
7a:ee:a8:5d:c3:6d:1a:1b:ed:f4:42:ae:c3:c7:df:59:55:6b:
f6:ce:6b:91:da:46:a6:2a:67:2d:86:f6:57:df:3a:13:11:3d:
be:7a:02:a3:7d:77:02:6b:86:0a:5f:e1:0f:04:41:36:ab:4e:
b6:11:24:25:d4:e3:2c:ef:32:d4:a1:f4:b5:21:28:62:23:bd:
c4:1c:df:b7:63:d9:fc:57:50:8a:97:db:9c:5d:4b:bd:5e:19:
7f:3f:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org