Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/E57259BDCCA5458735C528F8C3045D138CE58C85.mft
File: E57259BDCCA5458735C528F8C3045D138CE58C85.mft (raw, json)
Hash identifier: p4slg3Zc+ARFJ8fLlrgZcoQrCBz1aWiPLKkx3B4qimI=
Subject key identifier: 70:B1:83:98:84:E4:3D:99:3D:4E:96:B6:D2:49:7B:AB:9C:EC:8C:18
Authority key identifier: E5:72:59:BD:CC:A5:45:87:35:C5:28:F8:C3:04:5D:13:8C:E5:8C:85
Certificate issuer: /CN=A918C2870000/serialNumber=E57259BDCCA5458735C528F8C3045D138CE58C85
Certificate serial: 5F2371C11A7754367D7962DB16A53AEE13EAAF1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJZvcylRYc1xSj4wwRdE4zljIU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/E57259BDCCA5458735C528F8C3045D138CE58C85.mft
Manifest number: 02
Signing time: Fri 11 Aug 2023 04:24:55 +0000
Manifest this update: Fri 11 Aug 2023 04:19:55 +0000
Manifest next update: Sat 12 Aug 2023 04:32:55 +0000
Files and hashes: 1: E57259BDCCA5458735C528F8C3045D138CE58C85.crl (hash: czaxAf5MWxuNbzEYRzX6XqjDEy5twEw4V3MKZFYmV+0=)
2: 3230332e3137362e3138392e302f32342d3234203d3e203635353335.roa (hash: O6uGqeW6Kl23A1tbCDLj4ALl+AWBkOLphSTyuHsE464=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:23:71:c1:1a:77:54:36:7d:79:62:db:16:a5:3a:ee:13:ea:af:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870000/serialNumber=E57259BDCCA5458735C528F8C3045D138CE58C85
Validity
Not Before: Aug 11 04:19:55 2023 GMT
Not After : Aug 12 04:32:55 2023 GMT
Subject: CN=70B1839884E43D993D4E96B6D2497BAB9CEC8C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:f9:08:cb:cd:0d:cb:90:3c:b4:15:e0:19:
61:c1:b8:3b:22:14:c5:ea:c4:84:0c:eb:be:0e:3f:
a2:62:ce:a6:5b:a7:40:30:44:8f:5c:79:29:fd:13:
46:c8:c7:52:f0:f8:04:47:a5:13:a2:53:86:32:1b:
19:9c:b7:68:d0:84:b9:6c:0d:73:4a:b2:e0:49:54:
31:d8:e9:e6:8b:7c:17:d9:f6:8f:62:77:d2:48:c3:
ac:10:17:e7:e6:80:c9:7b:77:e3:f1:44:9b:bb:0b:
24:96:79:0d:ef:8e:cb:a5:8f:bc:74:53:9d:d0:34:
73:b0:3b:d3:db:5f:e9:4a:c7:21:dc:ad:89:b3:f1:
85:60:fc:32:a6:31:7a:39:12:cf:21:b6:11:88:65:
92:33:11:99:86:10:65:b6:7a:17:74:7f:37:8d:7b:
65:f2:e3:8b:5f:5d:27:18:88:6c:d3:2a:06:46:f7:
b9:ef:41:94:14:28:f9:8c:2f:fd:00:51:4c:18:9d:
23:27:bc:f4:41:2f:ef:86:6a:cd:60:59:f4:3e:67:
41:fe:14:56:d9:a6:8d:eb:25:0c:1b:ba:65:09:db:
64:23:4d:fc:36:61:ae:f4:ef:f5:bc:1f:3e:c0:95:
fb:b5:bb:50:e9:02:7e:93:54:f5:74:1f:2c:4d:a7:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:83:98:84:E4:3D:99:3D:4E:96:B6:D2:49:7B:AB:9C:EC:8C:18
X509v3 Authority Key Identifier:
keyid:E5:72:59:BD:CC:A5:45:87:35:C5:28:F8:C3:04:5D:13:8C:E5:8C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/E57259BDCCA5458735C528F8C3045D138CE58C85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJZvcylRYc1xSj4wwRdE4zljIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/E57259BDCCA5458735C528F8C3045D138CE58C85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:69:2a:8c:d8:f6:21:d3:4c:e3:cb:25:09:c1:26:a4:0a:90:
4c:44:2e:91:c3:9d:5e:ba:98:df:75:69:93:c2:01:da:6c:0d:
d5:c9:d2:2c:82:bd:b9:92:5e:4c:20:e3:f8:85:54:05:e8:a9:
1b:96:ed:8d:d2:a7:62:3f:cf:9b:bc:2f:31:25:f0:15:46:a1:
19:62:3d:8b:a4:42:cc:61:90:b4:b2:58:d1:c0:b5:c5:99:a1:
80:df:27:34:53:75:a3:55:cb:44:31:22:88:3c:74:7e:5f:3b:
2a:7c:c5:d0:d3:96:3f:87:18:a6:ec:79:fc:75:84:17:3e:ed:
90:08:d7:43:e7:19:66:e1:35:51:e5:72:58:e3:d8:e9:fb:3d:
0f:5b:45:53:66:b4:f7:cd:c9:1f:b3:82:b6:8f:c7:e3:a5:df:
20:dc:5e:a8:29:0c:7a:35:a9:2b:94:bc:86:7d:c2:ef:40:5d:
fb:9f:0d:cf:64:a9:56:78:8c:c9:fe:d6:9d:73:8a:c3:c1:df:
06:87:73:8b:1e:2a:dc:22:d1:eb:9e:10:1d:db:e3:f6:3d:73:
b7:0f:01:b5:c2:df:5c:6e:2f:9c:26:e2:73:12:c2:ee:d3:27:
47:41:dc:a2:9b:1b:cc:87:4a:30:83:8f:b0:53:e4:b7:05:02:
f7:5c:44:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org