Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
File: DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft (raw, json)
Hash identifier: FThbArM2JTma/zSidfuVZGpSHVrdXoLlZS7/avwSk5U=
Subject key identifier: BF:56:6D:FC:7B:D5:03:46:05:34:00:96:02:9C:ED:2B:0D:FF:07:CB
Authority key identifier: 0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98
Certificate issuer: /CN=F36177FDAF/serialNumber=0DC0B22C742F0253805F41AF704E1D7DE1B8BF98
Certificate serial: 0437
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
Manifest number: 0436
Signing time: Thu 03 Apr 2025 02:02:58 +0000
Manifest this update: Thu 03 Apr 2025 02:02:58 +0000
Manifest next update: Sat 05 Apr 2025 02:02:58 +0000
Files and hashes: 1: DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl (hash: M8+/+c/m21KxFrXyHuFY8SwDIqY+hs2/WkqNEsK2aBI=)
2: 60ED4636F92F11ECB2841083F1222468.roa (hash: +OqQfy+sVKv4R+tkPpa18z23bTOCNf4eXR6WRiM8IYA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36177FDAF
Validity
Not Before: Apr 3 02:02:58 2025 GMT
Not After : Apr 5 02:02:58 2025 GMT
Subject: CN=67edec52-94c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0f:bf:d8:4c:a2:91:2e:a8:bd:73:32:e2:d0:
1a:62:8e:ac:aa:7a:f7:d9:0e:d3:c6:25:e8:4b:74:
cf:06:0e:e3:3b:00:31:f1:e7:d4:b7:ad:d1:4f:26:
9e:2f:03:73:c4:0c:58:0d:e7:2e:f9:55:c2:56:e9:
84:5a:44:6c:e4:86:8e:b5:39:87:6a:52:49:3c:4e:
cb:97:f2:4e:62:b5:0b:d5:65:65:5e:cd:ed:c8:4c:
5e:a4:47:e4:a7:4e:0e:42:62:84:69:d8:e0:5a:1b:
b5:64:cc:7e:73:5f:17:ea:a1:6c:82:8f:b2:5c:d1:
39:01:3f:bc:bd:1a:a6:16:80:f0:22:89:c6:bd:7b:
25:13:27:f2:b8:63:4c:95:5c:61:8f:a1:aa:21:84:
2c:4f:99:aa:a8:5a:3c:f6:ee:f0:77:6d:2c:94:ea:
fa:64:d1:cc:af:72:34:c8:de:f1:de:ba:b0:7c:f5:
38:ba:ec:d5:a7:3e:c8:ff:08:1d:f8:de:e9:fd:dd:
c5:61:e4:71:65:73:09:cd:08:a2:34:fc:eb:36:b8:
d8:c2:22:92:89:6a:c4:bc:14:5e:6c:57:35:80:39:
6e:b4:a6:0d:5a:17:c0:a4:3b:68:fb:37:f4:83:5c:
c1:0c:be:56:03:4a:3b:79:75:67:7b:31:42:98:a1:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:6D:FC:7B:D5:03:46:05:34:00:96:02:9C:ED:2B:0D:FF:07:CB
X509v3 Authority Key Identifier:
keyid:0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:26:0e:37:09:1a:bc:a7:d6:f6:ec:cf:f1:f7:30:32:53:5d:
2a:4f:76:eb:63:f5:c4:9c:5a:99:f0:3c:48:51:50:e5:ab:09:
98:0a:d8:48:00:24:d4:9a:a7:e3:f6:60:c5:61:64:f9:c1:0f:
21:83:8a:64:b3:9b:82:c6:ec:f2:0f:02:8b:56:b5:ce:94:33:
86:a3:71:06:48:31:b2:51:9c:5e:7b:f0:86:e7:db:b8:2a:89:
58:f6:1c:38:cb:85:a6:ec:95:8c:ca:af:4c:96:fb:06:c4:17:
98:41:e6:77:2b:90:3e:88:0b:2e:02:93:56:33:f0:1a:7d:dd:
ce:82:42:50:28:2e:92:27:f5:81:42:49:bc:ce:ab:96:1f:e4:
39:d5:c2:8d:dd:1b:9c:8d:3c:d2:41:08:19:81:24:7d:78:e3:
d0:79:22:74:e6:5e:1d:9e:ba:4d:42:3a:5f:b9:cb:fe:28:ee:
6e:c4:9e:b4:39:f7:8d:c0:dd:de:9c:7c:5d:f5:31:e9:da:85:
2d:29:d4:1e:03:84:f6:0f:72:c6:68:87:8d:38:e4:1c:90:b8:
7f:2d:a7:d3:18:89:5a:57:cb:41:4c:16:fc:be:a8:3f:35:0e:
40:cf:4a:55:0a:b5:08:58:a1:35:c5:68:04:cc:ae:e1:20:91:
c8:b5:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:07 2025 by rpki-client