Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
File: BzRbRCXqohbQO3DogD88w6vhdRw.mft (raw, json)
Hash identifier: TdEi2eH0x0YTuE0Gft5/JBAkSQVW9PxvwjriTu1Lo2E=
Subject key identifier: 20:36:74:51:57:0A:2D:EE:36:EF:25:1D:62:DB:E6:C6:B1:DC:A9:19
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Certificate issuer: /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial: 0303
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
Manifest number: 0301
Signing time: Thu 03 Apr 2025 02:25:38 +0000
Manifest this update: Thu 03 Apr 2025 02:25:37 +0000
Manifest next update: Sat 05 Apr 2025 02:25:37 +0000
Files and hashes: 1: BzRbRCXqohbQO3DogD88w6vhdRw.crl (hash: Qz9gS7T6vtaoi1qcs7hodm9uo92AnQrhKZ78jRNgULg=)
2: 90E875C0904C11EF9772C688762E951A.roa (hash: 09CupRDhj95mgucZxQrzaYLjNHjfWPA23pLSx9OJe5M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36145DBAF
Validity
Not Before: Apr 3 02:25:37 2025 GMT
Not After : Apr 5 02:25:37 2025 GMT
Subject: CN=67edf1a2-4275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:e3:23:65:ba:01:f6:1c:b2:85:7e:1e:9f:
2e:bf:61:c0:85:1e:82:e0:f3:47:9f:74:56:a9:02:
ea:0b:61:45:90:5d:d9:b2:ae:2d:0f:21:3e:50:00:
db:80:fe:5e:fd:7d:09:b5:e7:f8:af:c6:e5:8d:7d:
fb:f4:d5:2a:bc:c7:27:a9:0c:6b:ad:e4:df:02:29:
9e:e5:85:1d:b4:27:71:d2:5b:49:4c:50:52:d7:5e:
21:ba:dd:a5:46:84:95:b4:a4:56:a8:28:e2:22:bc:
a5:d9:75:ba:89:a6:b8:3f:3c:96:20:29:14:77:0e:
39:d1:54:0c:1b:dc:16:55:e4:a2:5c:0b:a6:51:58:
6d:d5:83:f6:22:17:63:e8:69:c2:25:ff:9a:c8:5a:
4c:de:0b:e9:25:4f:63:9f:af:cd:fa:3b:85:07:dc:
ce:cd:c3:95:52:5a:01:4c:e1:95:69:b2:a7:4e:39:
da:46:99:94:c1:8c:bf:59:a2:d8:d7:28:c2:a9:97:
01:18:c0:a9:d9:a5:e2:c1:ff:85:31:9d:61:cf:68:
4b:10:d4:19:bb:87:c2:57:7c:90:cc:7a:d4:0e:be:
1c:de:af:be:6b:57:7f:8a:d2:70:b2:8b:0d:90:e4:
5d:a0:b2:b9:2c:6b:75:5f:d8:f6:42:57:7a:7e:63:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:74:51:57:0A:2D:EE:36:EF:25:1D:62:DB:E6:C6:B1:DC:A9:19
X509v3 Authority Key Identifier:
keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:a2:a6:e3:72:63:80:19:21:b8:c1:5d:42:1e:b9:2b:14:9a:
90:9f:10:09:be:6c:f8:2d:6a:cf:53:f7:b7:ed:dc:47:1b:23:
52:65:02:ae:cb:f6:81:55:35:aa:c1:47:20:73:1b:10:cc:3d:
71:ef:c9:d5:0d:b9:ed:ea:73:a2:00:79:30:0b:d0:c4:da:b2:
4f:54:8a:37:fc:6a:6d:d0:0e:c6:18:15:e6:66:ae:97:9d:15:
27:36:50:06:58:9d:5f:f6:69:93:94:07:ff:f9:72:b5:ba:c9:
e2:48:fd:cf:62:1c:be:d1:30:95:b1:d9:65:e7:79:81:e6:5b:
c5:e4:b7:45:bb:6e:59:6f:c0:97:95:67:6e:dc:63:42:f4:9f:
5b:1e:fb:95:61:43:bd:87:b8:43:bc:bf:2f:de:ce:87:72:4a:
18:6e:58:fc:fd:9f:45:36:55:e6:ae:7c:02:67:ba:ed:85:d0:
0c:0d:b5:9b:d3:7e:bc:18:ce:a3:98:86:59:50:e2:d6:f4:88:
8d:29:14:3c:ff:9e:b2:20:4e:8f:1e:a1:fa:d4:a1:0e:f7:d4:
e2:96:c3:ae:4e:37:b7:af:63:36:08:1a:06:ec:9a:90:ec:85:
5d:10:53:9d:fc:59:be:83:c5:bd:1b:65:b3:07:2c:7c:c8:a5:
8c:0a:e8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:27:11 2025 by rpki-client