Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
File: v1plQpwwfXk7DXBa2V_P60lCIWo.mft (raw, json)
Hash identifier: rkZ8hbeYzorhkIXuDXGKKcxMMQv0tkZCIO3pvN5va/o=
Subject key identifier: 37:DF:33:8D:F3:40:3E:64:CB:42:2B:E9:60:A8:6B:B0:7E:0D:B2:3A
Authority key identifier: BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
Certificate issuer: /CN=F3619CE0AF/serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
Certificate serial: 4D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
Manifest number: 4C
Signing time: Wed 05 Feb 2025 03:20:55 +0000
Manifest this update: Wed 05 Feb 2025 03:20:54 +0000
Manifest next update: Fri 07 Feb 2025 03:20:54 +0000
Files and hashes: 1: v1plQpwwfXk7DXBa2V_P60lCIWo.crl (hash: Hbf9dFEXpWgqBDm8wrQX5jIAgI6x2ocJh4QnmaunXls=)
2: 3995E772B22911EF8FFA5C88762E951A.roa (hash: q5GdnXuThvMc7lFNIre+h57AswQCqM5v2uH6+3ENceQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619CE0AF
Validity
Not Before: Feb 5 03:20:54 2025 GMT
Not After : Feb 7 03:20:54 2025 GMT
Subject: CN=67a2d917-4598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:eb:14:36:ac:c6:c2:a3:fa:6b:87:f1:1e:
11:c6:19:0d:69:b2:0b:7e:fc:50:ea:fb:ef:4c:b2:
ab:d3:8e:69:54:57:06:10:d3:e7:e6:ef:17:a7:2f:
39:e0:cf:69:dd:96:da:d9:06:07:08:20:05:80:1b:
7e:c2:cf:f6:22:09:83:38:8a:ec:bc:fc:fa:3f:a4:
a7:c4:b4:35:f7:aa:4a:c7:8c:cd:70:f6:a8:92:69:
4e:9c:52:09:4e:17:76:eb:a9:d7:6d:bb:3a:7e:75:
f7:b2:84:0d:4b:fa:e7:60:d8:1f:5b:4b:29:5c:5f:
c6:9c:50:3d:88:34:eb:eb:93:08:5f:c0:d0:83:8d:
95:23:5e:d1:50:ab:ba:6d:00:90:5b:0c:ba:9a:82:
18:aa:97:db:c0:07:cb:0b:0c:f2:20:77:c2:ac:5e:
28:e7:c5:b8:c7:5d:d1:11:22:33:25:5c:13:55:0b:
48:7f:5e:cb:11:e3:d4:b3:c5:56:ff:62:86:b6:30:
72:cf:8f:86:cf:ab:7b:aa:05:15:ea:85:48:21:a5:
f7:f9:e8:43:09:28:f4:a5:a1:eb:b1:f0:70:df:19:
15:eb:5f:3f:b0:ec:28:6b:ec:95:ec:aa:71:88:52:
2a:7b:f3:f9:6d:ef:d8:a1:e5:2e:88:f5:02:69:1a:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:33:8D:F3:40:3E:64:CB:42:2B:E9:60:A8:6B:B0:7E:0D:B2:3A
X509v3 Authority Key Identifier:
keyid:BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:50:ab:02:20:1f:dc:1f:1f:03:bc:5a:ce:fb:1b:62:8c:
dd:67:df:23:32:cf:eb:ac:a2:86:b3:0a:f9:c9:78:79:70:b8:
ae:e5:b0:6e:b0:a3:78:54:e8:22:6b:3c:ac:a2:4f:70:6a:f2:
84:13:86:f7:ec:c3:0c:a6:08:22:71:35:9b:6b:dc:d4:07:b4:
b9:37:6b:6e:08:24:bb:38:b6:d5:bc:13:8d:c4:bf:f6:46:47:
e0:c1:32:75:30:aa:c1:fd:af:61:84:d6:22:c1:ad:c1:4f:4d:
26:27:cd:42:a7:61:c9:ab:54:39:1d:94:ef:f3:d8:74:f8:18:
75:e6:1d:8d:8a:b5:d4:ea:2d:7a:56:c6:6f:0b:af:4a:89:21:
95:28:51:40:d9:3f:a3:54:11:37:21:4f:9f:60:3a:6f:a5:0d:
5b:a6:37:5e:96:75:e7:49:45:56:e3:71:25:c0:29:6a:ab:db:
d9:2f:33:7f:ce:1e:ae:d7:a6:31:a6:61:58:9b:28:4a:75:50:
ae:55:6a:e2:25:3c:ef:d5:a7:ba:b5:65:b5:aa:2f:04:9b:54:
dc:58:8d:9b:20:c6:21:85:b9:d5:30:85:57:a8:57:04:3d:5a:
ab:b9:dc:58:93:94:7f:b0:56:1e:b4:45:85:f3:bd:8a:d3:72:
b6:68:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:40:40 2025 by rpki-client