Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File: XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier: uHoSy9UOBX7/NHj9ByDWivHwR2lffjSdsjzd0ggZGns=
Subject key identifier: B0:F9:9B:3C:18:83:D1:E0:D0:F6:64:16:1C:50:13:07:0D:7C:5E:A5
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer: /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial: 0401
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number: 03FF
Signing time: Thu 03 Apr 2025 02:07:39 +0000
Manifest this update: Thu 03 Apr 2025 02:07:39 +0000
Manifest next update: Sat 05 Apr 2025 02:07:39 +0000
Files and hashes: 1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: zwrgZXupeMqi1U8bhjmOXFbp4EFYojYQXov1ST4d24s=)
2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361174DAF
Validity
Not Before: Apr 3 02:07:39 2025 GMT
Not After : Apr 5 02:07:39 2025 GMT
Subject: CN=67eded6b-b868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:09:2d:85:17:bd:dc:1e:ec:a5:b8:04:91:
86:20:88:7f:c1:b6:4e:b1:5c:50:38:1a:b0:3a:9d:
2c:f5:7a:85:13:82:47:e3:10:11:ab:21:ed:17:e6:
89:db:05:9a:30:ec:5c:3b:86:d3:cf:aa:47:85:b3:
fb:d4:09:d0:93:1d:7e:9d:1b:90:19:4d:ba:99:a4:
ec:59:4c:fb:77:5a:c1:62:1f:4c:72:17:90:ca:b7:
5d:16:4e:01:39:02:d4:08:ef:cf:84:08:0c:9a:9a:
6e:2c:d8:c0:27:75:19:96:e5:83:aa:d6:69:a3:76:
2e:94:39:11:b4:f6:e9:57:69:ea:16:ae:11:52:a4:
96:23:64:95:d4:c3:c3:d8:82:29:8c:e6:80:2e:ad:
14:61:0d:1d:e2:c2:a3:10:fe:6b:22:5d:03:81:4a:
75:81:d0:46:d9:4c:c3:a3:4e:a1:ee:c0:69:7c:aa:
1e:c0:84:99:1e:12:20:2b:c9:9e:70:f2:8f:3d:38:
31:af:91:65:76:d6:a1:6d:52:5b:8d:a7:63:2a:42:
82:60:35:8f:02:8d:c5:7b:1f:a0:2a:08:21:70:cf:
b7:70:6b:86:30:07:ca:d9:f6:09:0e:2e:f4:72:b0:
46:7a:73:e9:4b:bf:41:15:a6:1b:34:b0:29:0b:c6:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:9B:3C:18:83:D1:E0:D0:F6:64:16:1C:50:13:07:0D:7C:5E:A5
X509v3 Authority Key Identifier:
keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:9d:e4:99:87:a1:98:5c:8f:fb:a9:c2:cc:f9:9f:6f:20:26:
32:4e:d1:21:72:dc:5a:83:78:21:ea:77:94:5f:8f:74:fe:ae:
99:ae:98:be:e4:15:be:b6:cf:b3:1f:0b:fa:1c:28:9f:51:ba:
bb:0b:f4:ff:0d:59:7f:b2:e7:a6:54:10:27:d0:19:55:2e:d4:
0e:0c:47:be:40:70:79:25:e5:33:2d:fa:13:0c:48:0f:6a:91:
28:1b:ee:1a:1a:fe:60:c5:03:16:d4:88:33:03:20:f6:53:da:
70:12:a1:ed:b9:e6:dd:fa:bf:6b:13:f9:65:52:bc:ff:d0:7b:
87:bc:1a:98:be:15:6f:ff:58:f3:6c:0f:de:f3:23:61:17:92:
66:e1:71:d7:c7:17:f0:1c:1b:85:6c:2e:ac:27:b2:18:11:56:
e7:01:78:d9:e6:04:17:a5:57:7d:91:59:00:14:25:7b:75:71:
3b:f6:3f:66:70:9c:ac:86:89:1b:4f:f5:a9:01:51:66:2f:6f:
3f:d5:ea:76:04:0e:30:91:88:14:1f:be:fa:a3:8a:7f:bd:22:
43:22:f7:1e:b4:af:1e:60:51:07:9e:50:43:c1:17:69:bd:3c:
db:26:37:7c:12:4e:8e:e8:eb:ed:f9:f4:6e:35:2a:6a:b2:23:
cc:78:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:17:19 2025 by rpki-client