Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
File: 8WD77pBHtMM9L6HZ04IBrg0Yw58.mft (raw, json)
Hash identifier: 7YM+OuKc3acPMO6Ng2UqGQCPMO7+fk2GgV3evVK8L/Q=
Subject key identifier: CB:6A:60:8B:EC:D3:1E:A9:B4:A0:00:FA:DE:B0:89:13:AA:6D:BD:46
Authority key identifier: F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F
Certificate issuer: /CN=F361C63DAF/serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
Certificate serial: A2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
Manifest number: A1
Signing time: Sun 16 Feb 2025 03:15:38 +0000
Manifest this update: Sun 16 Feb 2025 03:15:37 +0000
Manifest next update: Tue 18 Feb 2025 03:15:37 +0000
Files and hashes: 1: 8WD77pBHtMM9L6HZ04IBrg0Yw58.crl (hash: SIJ5LykYr26hu0avPKQbYjZ8mic95+EXtBbcHWkIuSQ=)
2: C7ECF7DE74D211EFA2250567762E951A.roa (hash: 2JN5T3Dym/uP+aQB4QDNBNpdJtMGonjqC1jPbmHacMk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl
rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C63DAF
Validity
Not Before: Feb 16 03:15:37 2025 GMT
Not After : Feb 18 03:15:37 2025 GMT
Subject: CN=67b15859-27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:53:e5:87:ad:c6:28:9d:c2:a8:0f:b2:ef:
e7:5d:d2:07:e4:7d:95:bd:3c:3f:e9:27:80:fb:d7:
ce:c2:0b:8e:21:cd:22:5f:60:b6:3f:91:45:f7:8f:
46:82:b1:de:ba:54:6d:6e:a5:3d:fc:d3:9a:ec:c2:
03:75:de:fb:91:85:65:21:f1:9a:64:66:fe:9c:78:
e2:7b:55:3f:8c:3b:41:49:42:28:9c:cf:a4:bd:5d:
8c:6f:5d:55:6a:d2:cd:6c:d4:a8:08:ac:d0:0f:12:
64:b0:9c:f0:cc:10:c4:02:bc:cb:ee:b0:94:9c:e1:
07:0e:9f:f0:3f:10:f7:49:9f:f7:a9:6c:98:2f:c3:
a7:ed:2b:6f:2f:86:4d:8a:7e:ed:b6:38:3b:30:2a:
50:c1:9a:7d:f6:ae:49:26:58:ac:fd:c3:b2:02:29:
db:90:f3:e8:4d:32:ed:f8:70:19:08:41:10:3c:3f:
06:0a:ff:64:47:51:1a:db:5b:b5:a3:c0:a9:d2:66:
54:18:f9:fe:02:4b:0b:61:4b:62:fa:33:9d:00:75:
1d:7c:12:c8:1c:34:4b:62:4b:ce:2f:24:59:9b:8a:
6e:f5:c7:11:64:ae:eb:c5:72:20:05:fb:f4:3e:92:
94:35:66:06:0c:bf:a0:09:42:98:34:a2:7b:08:5e:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6A:60:8B:EC:D3:1E:A9:B4:A0:00:FA:DE:B0:89:13:AA:6D:BD:46
X509v3 Authority Key Identifier:
keyid:F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:bd:25:55:7a:82:c8:9d:11:06:f9:5e:5f:f6:97:99:94:
cf:af:ec:12:03:b3:5a:de:44:2a:94:cc:30:c8:03:7d:46:0c:
a1:a0:12:73:7c:7c:9d:89:b9:6f:80:9d:09:3b:63:b7:a1:7b:
c0:13:3f:01:2b:d3:43:e3:12:18:f0:5b:c8:9f:69:1f:21:4d:
f7:cd:97:bb:ba:90:a7:a4:c4:79:9e:2e:e7:fc:a3:19:6f:f1:
89:84:70:19:ee:d2:75:60:b8:4a:d8:ff:cd:4d:d2:16:6b:6d:
c8:6c:73:6a:fe:25:9c:02:09:6e:95:5f:63:c8:c0:b6:6a:ca:
11:3a:d8:68:bb:f5:dc:4c:8a:f4:2b:77:a0:2e:3e:42:c2:44:
5c:18:c1:6f:90:cb:2a:4c:fc:88:19:7d:22:b0:4b:93:6f:85:
53:6a:ee:e6:c7:f9:29:36:36:c7:98:40:b3:e4:a4:de:12:ac:
87:ad:bd:50:5a:a8:56:75:09:5b:d9:61:7b:29:b3:34:90:7f:
15:6a:67:24:6e:44:c2:b9:b3:77:c7:2f:d4:13:a6:bf:de:2f:
8e:8d:a3:93:3b:54:ac:bd:f5:19:ff:fe:08:67:4f:bc:ad:39:
47:3a:db:82:64:46:ed:54:f8:d2:0f:16:e9:cf:21:6d:ed:d5:
86:eb:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:32 2025 by rpki-client