Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: kD+xLeW9Ofis/dDRQytgqnQiKznYY9V3d7ZkUOOKw3w=
Subject key identifier: E3:D5:C9:1A:3F:46:0C:D9:97:28:98:3A:A3:7B:15:B2:68:35:75:F8
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 4F
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: BC
Signing time: Mon 28 Oct 2024 11:11:14 +0000
Manifest this update: Mon 28 Oct 2024 11:11:13 +0000
Manifest next update: Wed 04 Dec 2024 11:11:13 +0000
Files and hashes: 1: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
4: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: r3Pb+l6FX80Z+bnYTuSxed3CMhNzK9R4ZFyF7A7W7Sc=)
5: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
6: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Dec 2024 11:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Oct 28 11:11:13 2024 GMT
Not After : Dec 4 11:11:13 2024 GMT
Subject: CN=671f7151-adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:f4:ba:2a:a0:ef:57:4b:34:b1:9e:f0:a1:
de:1b:f2:1a:56:d3:dc:b1:53:a0:2f:46:30:4c:53:
21:f0:9b:ef:73:cd:bf:ab:18:4e:26:f4:06:ff:78:
70:0a:a8:2b:b3:11:a8:dd:4a:70:4e:c9:1a:7f:1a:
46:d0:6f:a5:d3:4e:8f:3b:25:d0:2f:20:4d:69:03:
74:d3:87:26:6f:19:47:aa:83:2f:14:f5:8a:a0:6e:
22:e0:ad:81:0d:36:7e:87:9e:f6:ae:0d:95:db:8b:
61:61:d1:e0:7f:a5:98:2d:6f:2c:bd:ed:bb:6e:61:
de:e6:a1:2d:15:02:9c:9c:03:ff:1b:90:b7:9c:75:
bc:3c:eb:85:d4:47:f5:9e:13:77:b1:03:e0:d1:1b:
3d:73:10:8f:b7:5b:a4:19:6f:a5:00:63:6b:c0:80:
e9:96:cc:00:07:67:9a:a2:6d:79:32:a4:fe:d8:47:
4d:a5:4c:39:26:15:82:81:b8:7f:7b:04:be:a5:ab:
f3:83:10:7d:ca:79:7c:c6:61:35:40:15:dd:25:53:
cc:08:5b:28:49:00:67:1e:e9:3c:75:68:4c:a6:e3:
62:6d:f9:85:5e:09:70:e4:db:dd:a8:a0:36:94:0e:
6e:61:22:63:bc:b2:82:52:ab:92:17:4f:36:07:ed:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D5:C9:1A:3F:46:0C:D9:97:28:98:3A:A3:7B:15:B2:68:35:75:F8
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f0:46:01:ab:99:5b:7d:cf:24:81:6c:4d:8c:b5:12:4a:d8:
ea:95:0b:ea:2d:fe:39:1c:5d:c7:93:f3:44:50:01:6c:ac:61:
4c:9b:c4:0e:8d:b5:05:e4:d4:60:c8:5d:10:b8:a8:ec:7f:0f:
91:f2:8b:2d:19:93:c5:9f:23:cc:78:19:c5:20:6a:06:0b:f9:
22:28:3e:9c:cf:85:f3:af:2c:60:8e:a9:32:de:31:60:c9:9b:
94:f6:e7:92:a0:6a:af:44:33:40:8a:77:58:9b:72:22:08:46:
39:d4:ed:52:cc:a8:13:28:a5:4a:0f:e7:15:38:8d:15:2c:31:
74:ba:2a:1e:93:11:41:e4:4b:6c:15:e6:05:c4:64:84:ef:e9:
6c:5d:58:8e:00:57:6b:96:3d:51:f2:d5:b0:b1:e3:5a:71:68:
2c:23:13:3f:d2:77:29:47:d1:8b:ac:38:51:ee:36:63:8a:98:
ca:26:84:18:0d:b6:d5:f5:d4:c9:d2:d9:21:fc:01:5b:14:ea:
94:4f:af:25:0a:fb:88:d0:9c:ff:96:5f:9a:af:0d:32:18:51:
f7:b9:2a:ea:ea:48:74:a9:85:e2:5e:5c:b5:65:a0:52:54:8c:
84:d1:d7:bb:01:5a:4e:2e:84:0f:ed:7f:b5:f3:3f:56:24:ea:
4e:57:87:8e
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp
TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjQxMDI4MTExMTEzWhcNMjQxMjA0MTEx
MTEzWjAYMRYwFAYDVQQDEw02NzFmNzE1MS1hZGIzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAuY/0uiqg71dLNLGe8KHeG/IaVtPcsVOgL0YwTFMh8Jvv
c82/qxhOJvQG/3hwCqgrsxGo3UpwTskafxpG0G+l006POyXQLyBNaQN004cmbxlH
qoMvFPWKoG4i4K2BDTZ+h572rg2V24thYdHgf6WYLW8sve27bmHe5qEtFQKcnAP/
G5C3nHW8POuF1Ef1nhN3sQPg0Rs9cxCPt1ukGW+lAGNrwIDplswAB2eaom15MqT+
2EdNpUw5JhWCgbh/ewS+pavzgxB9ynl8xmE1QBXdJVPMCFsoSQBnHuk8dWhMpuNi
bfmFXglw5NvdqKA2lA5uYSJjvLKCUquSF082B+2PRQIDAQABo4ICXzCCAlswHQYD
VR0OBBYEFOPVyRo/RgzZlyiYOqN7FbJoNXX4MB8GA1UdIwQYMBaAFOtoDzj11scb
tLEGuL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIHgDB1BgNVHR8EbjBsMGqgaKBmhmRy
c3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBGNEQx
MUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFNYlku
Y3JsMEsGCCsGAQUFBwEBBD8wPTA7BggrBgEFBQcwAoYvcnN5bmM6Ly9ycGtpLmFm
cmluaWMubmV0L3JlcG9zaXRvcnkvQWZyaU5JQy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgbkGCCsGAQUFBwELBIGsMIGpMHAGCCsGAQUFBzAL
hmRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFN
YlkubWZ0MDUGCCsGAQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90
aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAKDwRgGr
mVt9zySBbE2MtRJK2OqVC+ot/jkcXceT80RQAWysYUybxA6NtQXk1GDIXRC4qOx/
D5Hyiy0Zk8WfI8x4GcUgagYL+SIoPpzPhfOvLGCOqTLeMWDJm5T255Kgaq9EM0CK
d1ibciIIRjnU7VLMqBMopUoP5xU4jRUsMXS6Kh6TEUHkS2wV5gXEZITv6WxdWI4A
V2uWPVHy1bCx41pxaCwjEz/SdylH0YusOFHuNmOKmMomhBgNttX11MnS2SH8AVsU
6pRPryUK+4jQnP+WX5qvDTIYUfe5KurqSHSpheJeXLVloFJUjITR17sBWk4uhA/t
f7XzP1Yk6k5Xh44=
-----END CERTIFICATE-----
Generated at Mon Oct 28 13:47:04 2024 by rpki-client on console-ams.rpki-client.org