Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
File: 16R0hb-cpGerJ5HbX06JVar0dkA.mft (raw, json)
Hash identifier: QPInLQo7eQD+gEP7A33SW+tJP7Ahtzleqy5W2NhhorM=
Subject key identifier: 91:C0:2A:F4:E2:56:13:CC:63:63:66:82:7B:C3:24:45:67:76:53:DF
Authority key identifier: D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Certificate issuer: /CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Certificate serial: 0590
Authority info access: rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
Manifest number: 058F
Signing time: Mon 21 Apr 2025 02:25:00 +0000
Manifest this update: Mon 21 Apr 2025 02:24:59 +0000
Manifest next update: Wed 23 Apr 2025 02:24:59 +0000
Files and hashes: 1: 16R0hb-cpGerJ5HbX06JVar0dkA.crl (hash: hn+OlTWzWj8Zif/V4Rl4sfigp4PZ5R5eRqKNGbAZ9k0=)
2: 115C93BAE16111EB96804153F8AEA228.roa (hash: vVJYRPavoXyCLCs90IUxYtns4SSgNRSaXSbPs6FZN1c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AR, serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Validity
Not Before: Apr 21 02:24:59 2025 GMT
Not After : Apr 23 02:24:59 2025 GMT
Subject: CN=6805ac7c-4bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f5:c9:d7:fa:31:61:c9:49:0e:2f:ba:3c:ea:
06:f2:82:f8:52:dd:0d:df:a7:55:c1:59:85:be:84:
69:69:67:e6:aa:24:04:fd:75:c1:81:b8:18:f1:44:
8c:9f:64:1e:c0:46:5d:a9:9e:5b:cf:f9:bc:f9:07:
e2:2e:c3:a4:37:90:a0:b0:46:11:a9:ef:54:e6:3e:
d5:17:62:dd:35:bb:cb:c2:7a:7f:f4:b5:18:8f:7b:
9e:a9:26:eb:15:6c:30:c5:5d:11:9b:be:89:0e:3d:
82:8f:8e:2c:50:8a:a3:21:e0:17:be:1c:70:88:7b:
c6:b4:f9:75:29:54:e6:16:9d:e3:ad:28:0b:60:f8:
f6:94:90:c3:2c:35:9a:a6:66:07:8e:2e:7a:c7:ca:
d0:9c:8a:82:4e:22:9b:8f:10:64:91:ab:b0:77:f4:
8f:4d:07:30:3e:03:10:f3:89:26:0f:85:26:d4:08:
34:a2:96:8c:29:d8:c8:d7:07:a2:e3:f4:5e:ea:3d:
07:4d:93:b1:79:ab:da:27:ad:41:4b:9e:90:7d:73:
96:a6:d4:e9:63:00:ed:14:55:65:6a:ea:06:2a:83:
49:25:72:e5:5d:4c:3a:18:12:b7:e5:b2:c1:32:35:
47:71:bb:38:b0:17:b5:84:83:a6:72:5a:a7:0f:a7:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:2A:F4:E2:56:13:CC:63:63:66:82:7B:C3:24:45:67:76:53:DF
X509v3 Authority Key Identifier:
keyid:D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:5e:4e:23:7a:85:d3:db:1f:39:51:0b:b3:d1:71:19:e2:1e:
b2:4c:6f:50:6a:9d:e0:2c:4a:90:37:54:4c:30:18:43:de:c7:
a0:af:f8:51:fa:ee:3f:de:38:2a:cd:9e:be:53:fc:c8:51:73:
38:f8:da:b9:e5:95:78:f1:8e:e5:5c:01:fd:c5:68:37:3f:98:
bc:1b:08:04:76:f1:9e:1a:4f:b1:d0:d4:b1:b4:3f:e8:13:dc:
73:82:da:c4:c1:c3:82:6b:ba:88:f7:cb:a0:db:cd:45:83:b1:
b1:23:81:d7:1e:1d:45:8c:3b:75:87:a4:b6:a9:0b:14:ab:99:
53:19:cd:77:97:99:bf:a6:0c:23:9e:9c:37:de:2e:d8:65:5f:
a0:92:10:ec:c0:bf:e9:f6:d0:e1:d4:7c:e2:6a:52:3c:5a:7e:
85:0b:b4:55:c7:01:2e:28:98:32:09:4a:a3:e6:d0:20:bb:c1:
3d:12:66:21:ee:98:ce:9b:a4:53:2f:e9:70:f6:71:70:c3:62:
89:72:c7:4e:76:38:76:67:e0:2a:37:a8:ea:da:b8:55:9e:cd:
d5:7b:a7:39:03:52:6b:91:6f:32:db:fe:8b:7b:6a:0b:7d:37:
a9:85:43:99:bf:dd:70:93:49:52:5f:c0:3c:74:27:de:37:4c:
be:4d:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:12:02 2025 by rpki-client