Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.mft
File: DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.mft (raw, json)
Hash identifier: pHld2D0Ib3TZe4GbwjR2wq12NpT+qnbGjUFT6UQguwM=
Subject key identifier: 25:5D:53:C4:BB:D6:72:A2:38:97:8E:50:10:79:D4:AC:28:1E:14:39
Authority key identifier: DC:23:5B:4B:C2:B9:28:35:12:BE:26:CA:E5:19:B5:C2:4C:6A:5D:74
Certificate issuer: /CN=A9140C620000/serialNumber=DC235B4BC2B9283512BE26CAE519B5C24C6A5D74
Certificate serial: 6717A73DCBA6E41052000CDF560F68C820930CE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CNbS8K5KDUSvibK5Rm1wkxqXXQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.mft
Manifest number: 28
Signing time: Sun 02 Apr 2023 13:29:33 +0000
Manifest this update: Sun 02 Apr 2023 13:24:33 +0000
Manifest next update: Mon 03 Apr 2023 15:42:33 +0000
Files and hashes: 1: DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.crl (hash: 2W3n+f49U7CBALJPfFCME+si/TbinMWxr/zY03X/5PE=)
2: 3130332e3230392e3132382e302f32332d3234203d3e20313339353934.roa (hash: kOOiEF4U9R1G15MJHkhn5Vl8xglOAbmbxGJplV3n2MM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:17:a7:3d:cb:a6:e4:10:52:00:0c:df:56:0f:68:c8:20:93:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C620000/serialNumber=DC235B4BC2B9283512BE26CAE519B5C24C6A5D74
Validity
Not Before: Apr 2 13:24:33 2023 GMT
Not After : Apr 3 15:42:33 2023 GMT
Subject: CN=255D53C4BBD672A238978E501079D4AC281E1439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:9d:09:a3:83:b6:13:53:46:be:17:90:3c:
a1:a9:ec:25:02:9a:f3:ed:b5:83:7f:50:df:30:08:
0c:d4:23:2a:3e:bf:1a:d1:76:67:e9:5b:83:34:0f:
08:32:c9:15:d2:4d:16:61:ff:ca:a6:e3:8c:da:79:
7a:ce:42:02:16:a9:04:0d:ad:6e:25:1e:cf:b3:38:
d0:98:96:49:51:1f:54:bf:8f:61:c5:14:78:32:c8:
45:76:8c:92:65:de:ec:1f:9d:c2:05:44:a3:52:20:
16:99:35:84:38:5d:26:4b:16:a1:5f:3c:d0:c9:f2:
d6:3a:57:ff:f1:27:9c:1d:fb:58:5f:d1:8f:0e:01:
2e:4a:96:4b:4b:82:59:fd:27:10:ea:05:5d:25:32:
ad:6b:92:cf:62:56:29:70:da:ec:d2:d1:73:88:27:
4f:7d:f9:61:14:a8:3a:10:79:db:48:bc:8c:07:eb:
67:82:c8:c1:61:47:20:68:1c:3f:6d:65:d5:96:f0:
86:88:da:1c:59:26:fc:1f:b6:8f:cb:9d:c6:aa:85:
75:57:4e:d6:26:86:a1:ca:ad:24:93:e5:f1:d1:00:
e3:2f:28:7f:39:32:74:35:ae:3b:3e:5c:31:90:f9:
ce:d0:1e:95:4e:72:fd:70:a9:73:95:72:49:66:32:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5D:53:C4:BB:D6:72:A2:38:97:8E:50:10:79:D4:AC:28:1E:14:39
X509v3 Authority Key Identifier:
keyid:DC:23:5B:4B:C2:B9:28:35:12:BE:26:CA:E5:19:B5:C2:4C:6A:5D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CNbS8K5KDUSvibK5Rm1wkxqXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:90:93:80:03:b5:1e:c0:47:ae:ac:06:5d:f0:bf:70:52:67:
18:d4:81:89:fd:66:ff:ae:f2:68:af:5a:9b:f4:fa:86:57:c5:
0b:d4:2a:d7:18:81:d7:0f:c1:97:c9:84:a6:5b:7e:7e:7b:91:
f1:33:d2:6b:bb:6b:e2:b9:71:eb:41:b9:87:61:2e:a4:fc:3c:
ce:7c:eb:bf:38:16:1b:20:a0:24:77:34:53:93:29:d0:be:5e:
87:a8:f5:b0:bd:56:9c:9d:93:d3:7d:b6:88:97:57:6d:8f:d4:
7b:50:73:60:0b:27:68:06:2e:2a:77:a6:dc:50:71:08:bc:53:
82:84:4e:07:81:4d:7c:dd:eb:e1:86:ef:23:8c:9c:a9:c3:bc:
b3:87:2d:af:cc:bd:23:63:ca:30:59:4f:32:2f:51:c7:2e:5e:
88:0c:48:43:7a:2e:a0:23:3b:93:3b:dc:5d:91:5d:ca:56:40:
2f:67:16:4d:e7:3f:aa:74:9f:76:ab:d8:de:5e:11:65:35:71:
fd:06:7b:d1:33:1a:17:c7:c8:14:ff:dc:9a:48:d4:ec:ca:01:
27:58:aa:d5:d3:c7:37:74:2f:ab:5f:cf:52:f0:66:22:2a:60:
30:48:f2:93:91:67:dd:55:35:a7:c2:a4:ad:d6:51:62:40:dc:
37:a2:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org