Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
File: 3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft (raw, json)
Hash identifier: qm+7KTbBU6dbCf4ZDvQC4lSVq+VmW+oRWFcTgbtmTx4=
Subject key identifier: C8:76:DD:1A:B6:48:EE:B7:B9:8A:BA:23:C4:7D:7F:FD:91:F3:3F:2C
Authority key identifier: DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
Certificate issuer: /CN=F36167D3AF/serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
Certificate serial: 35
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
Manifest number: 34
Signing time: Thu 03 Apr 2025 03:24:45 +0000
Manifest this update: Thu 03 Apr 2025 03:24:45 +0000
Manifest next update: Sat 05 Apr 2025 03:24:45 +0000
Files and hashes: 1: 3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl (hash: Ir85sVbOiVE9MubQQWCpFGWRVHM9/JOWMad06NMh8rc=)
2: B916B790E93511EF85696B6B762E951A.roa (hash: ggevfaeeCUMvKWREnfa5ZTaHefEit81KWkRtGhD4nDA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36167D3AF
Validity
Not Before: Apr 3 03:24:45 2025 GMT
Not After : Apr 5 03:24:45 2025 GMT
Subject: CN=67edff7d-eddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e4:a4:fa:ed:45:7d:04:0a:89:f1:42:e1:b0:
a2:f8:8e:ef:de:67:56:26:38:45:2d:3b:f2:61:97:
ca:6a:32:7a:63:59:5f:38:78:0f:f5:84:7a:54:ad:
2d:e5:c7:2a:02:b7:6c:1b:25:f9:b3:1e:92:99:9a:
3a:1a:86:d9:f2:de:8e:7d:2a:88:d3:12:dd:fe:f5:
eb:51:59:ae:51:b9:86:e6:a1:f6:6e:97:9b:12:48:
7d:78:d1:cb:96:0b:68:18:65:f9:62:51:2c:39:66:
41:35:ef:05:18:15:3d:bd:77:9c:8d:ca:85:70:2a:
60:4a:4e:10:d9:83:05:87:b0:67:2a:1d:24:14:ff:
dc:0a:2d:15:82:c6:25:47:76:1f:7b:08:ef:30:74:
3c:a6:96:d4:8c:0c:5d:17:57:50:49:67:cb:48:c0:
7e:35:b1:21:f7:f5:61:0c:d6:46:c4:fb:97:c1:60:
5a:e8:41:56:db:b7:10:71:d3:d7:26:88:ca:e2:ff:
c7:de:0a:14:62:cc:c0:f4:f4:8f:06:76:23:e4:a1:
7f:f1:8f:a1:71:16:ca:6e:23:32:49:70:8d:fe:b5:
76:86:3c:3a:1f:e1:29:32:6f:32:1e:ad:f2:59:ba:
04:b5:4b:59:1e:d6:a4:a5:14:aa:55:fe:a6:61:78:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:DD:1A:B6:48:EE:B7:B9:8A:BA:23:C4:7D:7F:FD:91:F3:3F:2C
X509v3 Authority Key Identifier:
keyid:DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:87:c3:0f:10:ad:d3:cf:d7:31:1c:cb:60:e9:8b:7a:63:41:
49:76:0f:f0:1a:55:a0:d5:24:82:04:7e:60:f8:28:b4:e1:9a:
75:15:6c:eb:f1:dd:3c:ab:4a:c4:d5:16:c7:68:f7:db:ee:a7:
51:e6:89:03:54:3c:69:b9:4a:fd:12:95:a8:88:34:6f:38:75:
0b:a3:32:10:36:2b:2d:04:c9:1b:5d:81:bf:6d:e8:ae:c6:52:
0c:70:d9:b0:28:6a:ce:34:e4:e2:e3:77:1a:6c:25:1f:0e:f8:
fe:db:32:36:cb:9d:8d:26:a2:4b:d8:5c:82:fb:e0:22:b2:42:
91:64:92:08:59:2e:2f:63:b2:05:58:17:58:66:80:b6:fa:e5:
95:81:65:61:1d:40:89:fe:91:ef:4f:3a:5d:76:91:15:17:66:
80:85:a4:fb:19:2e:35:59:85:55:3c:35:6a:e6:a1:0f:7b:49:
c9:4e:8d:93:8c:eb:dc:96:bc:44:11:c5:39:ce:8f:a0:17:ce:
13:26:28:5b:1f:5b:ff:da:45:a4:23:c0:89:66:95:e8:8f:cc:
2e:d6:7b:e9:ac:7b:61:3e:3d:e4:de:8f:45:30:51:62:9d:f5:
fd:cd:06:8d:a2:9a:c8:18:a4:c9:00:c3:7f:a3:9e:2f:20:06:
a0:5c:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:45:29 2025 by rpki-client