Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
File: UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json)
Hash identifier: IS5EeCcrKMAm9pu7Pb279wD0iwKn+JEDn4pRvAFzOaw=
Subject key identifier: 60:A0:F3:8C:C6:CD:6B:AA:87:57:0D:38:E6:58:E9:CE:9B:7E:9F:7D
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Certificate issuer: /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial: 0346
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
Manifest number: 0342
Signing time: Thu 03 Apr 2025 02:20:20 +0000
Manifest this update: Thu 03 Apr 2025 02:20:20 +0000
Manifest next update: Sat 05 Apr 2025 02:20:20 +0000
Files and hashes: 1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: OOgm7Dl9qFUy6syDSuoYsb9Nn3sLFPQum5i1Xhhck5o=)
2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=)
3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 838 (0x346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619AFBAF
Validity
Not Before: Apr 3 02:20:20 2025 GMT
Not After : Apr 5 02:20:20 2025 GMT
Subject: CN=67edf064-cb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:8b:20:96:70:15:48:52:23:71:29:d9:6e:
3d:b4:fa:f0:7e:85:f1:63:fb:da:13:e2:ac:2b:75:
42:99:df:e5:c6:09:a4:23:9c:2d:e0:4b:3f:4e:66:
fb:8c:b5:2b:9b:6e:94:50:24:ce:64:ae:cb:13:07:
82:6c:9b:f0:1d:1c:09:69:f4:44:83:48:66:8e:7a:
76:8b:60:8d:ff:ce:71:21:9b:d3:33:56:54:72:9a:
4b:c4:ce:0a:b8:a0:ed:10:9e:f2:40:fa:a2:5f:66:
32:f1:b7:fb:4e:10:72:f9:a9:52:18:9c:44:c0:73:
dd:0f:4b:04:29:46:50:c7:62:83:87:ea:e7:b6:17:
bf:39:ea:9c:bb:59:8a:ff:41:f6:ce:49:b9:75:31:
7f:63:89:72:95:37:28:43:c7:1d:75:c0:26:96:6b:
d6:f9:d2:0d:0e:af:80:63:79:68:9c:8e:01:9e:b7:
64:28:f9:12:e3:d5:72:73:a4:20:6b:60:34:46:fe:
ca:ab:f0:28:70:0d:eb:a3:74:65:f4:9c:f0:31:8b:
49:12:c2:c0:66:df:69:0b:b7:8e:5b:e5:d3:12:5b:
1e:33:51:18:84:bb:ca:e9:19:b4:81:10:02:c8:eb:
69:cf:5c:31:be:d3:40:5d:fd:f4:9a:21:3e:10:90:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:F3:8C:C6:CD:6B:AA:87:57:0D:38:E6:58:E9:CE:9B:7E:9F:7D
X509v3 Authority Key Identifier:
keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:26:c1:b2:f5:72:5e:b7:c0:49:90:6f:da:9d:ec:fe:55:0a:
a7:2c:a1:0d:15:28:16:f9:d3:9b:19:7f:94:c1:6d:53:86:d3:
fb:6e:10:53:2a:fc:4a:f2:20:e2:d5:6f:fc:0f:c2:22:4e:1b:
71:65:b9:5e:f6:20:ff:5f:28:59:7f:58:91:6d:68:43:51:28:
c0:ef:94:ba:5d:75:b2:0a:82:4c:6b:b9:d8:e5:df:50:aa:c8:
bb:28:dc:f9:0c:82:40:90:83:0e:47:dc:d5:3d:c0:63:fc:a0:
5e:91:de:6e:bd:2a:6d:78:60:cb:76:18:04:bb:df:fd:b7:d7:
a2:40:8c:53:1c:ea:53:93:ed:f6:a6:24:7a:08:63:2c:c0:bd:
32:fd:17:c9:c8:2a:8d:76:73:54:2f:b1:9a:fd:a0:6d:28:87:
88:a4:a2:cd:2f:73:b4:ec:6f:54:f0:10:4b:0c:d1:fe:1d:3a:
ce:c6:f0:31:22:78:fa:24:e3:26:1b:ff:87:7a:0b:a1:20:7c:
f8:61:91:73:cf:c1:5c:bb:ea:c3:5f:98:24:84:3d:02:35:b8:
24:e5:63:6d:f5:6c:d2:16:5f:cc:69:42:8b:b8:c3:0f:4b:dc:
82:a8:76:98:fe:69:88:96:7c:ff:56:ca:fc:00:e9:90:4f:11:
70:7a:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:57 2025 by rpki-client