Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft
File: RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft (raw, json)
Hash identifier: Z185j6L8ZX5pb6GnerTNazOPfq+Aec41H1817z1F7vo=
Subject key identifier: EF:A2:17:A3:BB:96:67:F1:1B:B3:C6:30:2C:D7:8B:FB:90:15:66:CF
Authority key identifier: 44:8B:19:3F:7D:AB:A4:CB:06:F0:C5:92:44:53:C5:BF:8B:2A:62:34
Certificate issuer: /CN=F3624904AF/serialNumber=448B193F7DABA4CB06F0C5924453C5BF8B2A6234
Certificate serial: 0700
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RIsZP32rpMsG8MWSRFPFv4sqYjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft
Manifest number: 06FF
Signing time: Sun 16 Feb 2025 01:28:21 +0000
Manifest this update: Sun 16 Feb 2025 01:28:20 +0000
Manifest next update: Tue 18 Feb 2025 01:28:20 +0000
Files and hashes: 1: RIsZP32rpMsG8MWSRFPFv4sqYjQ.crl (hash: WSzcWtmce+CCe/cZWGfSRNCi/aRQlhm5CLgaenorzes=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft
rsync://rpki.afrinic.net/repository/afrinic/RIsZP32rpMsG8MWSRFPFv4sqYjQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624904AF
Validity
Not Before: Feb 16 01:28:20 2025 GMT
Not After : Feb 18 01:28:20 2025 GMT
Subject: CN=67b13f35-8ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:01:1d:c3:67:97:00:7c:b0:7f:d5:72:e8:
58:79:ee:0c:b7:50:b5:3b:9e:d3:96:56:69:8b:85:
c1:a4:35:96:1b:2e:e7:3d:c9:87:90:79:ca:db:b7:
40:69:d1:ae:2f:45:29:50:f6:9b:83:49:b0:40:56:
54:a5:53:25:ca:49:97:6c:8c:19:15:6c:cf:e8:3c:
08:1f:e0:77:17:c5:b2:05:a9:39:2a:63:9c:6e:0a:
b8:b7:26:b7:67:67:f0:be:76:4d:82:2d:f5:38:0b:
d7:9f:a5:30:5c:12:c5:57:87:62:ae:9c:d7:a7:46:
0d:82:23:2a:02:6f:ba:95:f5:0c:4f:6a:08:84:75:
63:18:8e:d9:bf:ed:d3:f3:d3:e9:08:4a:62:d2:3e:
77:a6:f1:99:fb:d4:17:d1:91:da:c1:14:e2:1c:b8:
72:e1:d2:be:be:52:b2:4c:ff:c3:56:e9:6f:52:12:
85:36:eb:fc:46:03:40:bd:5d:e0:d6:84:8d:d1:b4:
30:e2:0e:36:1f:2f:55:bf:d9:d0:a1:9b:37:7b:84:
ed:c5:c2:ee:f6:55:89:f8:ac:5c:a4:14:a0:8c:2c:
3b:7b:ae:9f:a8:38:c5:85:c0:ee:4b:df:0d:d1:a4:
d6:bd:f0:95:77:96:1f:b8:a3:b1:0a:72:ca:68:a0:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:17:A3:BB:96:67:F1:1B:B3:C6:30:2C:D7:8B:FB:90:15:66:CF
X509v3 Authority Key Identifier:
keyid:44:8B:19:3F:7D:AB:A4:CB:06:F0:C5:92:44:53:C5:BF:8B:2A:62:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RIsZP32rpMsG8MWSRFPFv4sqYjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:48:36:33:c0:87:e8:99:f3:45:09:05:51:24:ad:59:db:5f:
56:db:0f:d0:c2:f1:2a:99:76:12:bd:9a:e0:29:65:b6:d2:b1:
d3:4e:02:58:f7:32:0a:4f:ce:52:7c:04:33:c0:0d:53:ff:c9:
79:7a:60:07:b1:e0:28:a7:91:29:13:da:00:07:ad:4b:be:00:
0b:f7:48:3e:e4:10:74:24:2e:ac:ec:cd:ff:8a:25:9c:51:14:
ae:dc:90:ab:cf:3f:e2:0d:4b:4c:67:71:5f:79:d5:69:b2:7b:
19:ca:0b:bc:5d:94:7c:dd:c0:2d:c4:8a:53:d0:b5:36:7b:25:
38:85:09:d7:b2:26:77:15:4f:6b:30:65:6b:eb:94:6a:de:ef:
51:3d:86:b2:43:e6:47:52:90:f9:d7:e2:f4:c3:81:10:9e:8f:
ec:d8:3d:a4:45:ec:a6:1c:7a:cf:db:5b:5a:21:99:92:35:23:
41:4e:ec:70:2b:d8:b3:c3:95:d7:0a:a0:cf:3f:47:92:02:ff:
1c:6e:d0:83:6a:1e:9a:60:88:00:cf:2d:5d:56:ee:47:e9:29:
25:53:b4:c7:a0:ef:43:cb:be:eb:0c:3c:c2:7e:8e:0f:fb:fb:
d8:b2:80:9e:0b:83:bc:9b:da:57:43:e5:0d:f6:db:d7:bc:96:
7d:45:d5:99
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQ5MDRBRjExMC8GA1UEBRMoNDQ4QjE5M0Y3REFCQTRDQjA2RjBDNTkyNDQ1M0M1
QkY4QjJBNjIzNDAeFw0yNTAyMTYwMTI4MjBaFw0yNTAyMTgwMTI4MjBaMBgxFjAU
BgNVBAMTDTY3YjEzZjM1LThlYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCw9AEdw2eXAHywf9Vy6Fh57gy3ULU7ntOWVmmLhcGkNZYbLuc9yYeQecrb
t0Bp0a4vRSlQ9puDSbBAVlSlUyXKSZdsjBkVbM/oPAgf4HcXxbIFqTkqY5xuCri3
JrdnZ/C+dk2CLfU4C9efpTBcEsVXh2KunNenRg2CIyoCb7qV9QxPagiEdWMYjtm/
7dPz0+kISmLSPnem8Zn71BfRkdrBFOIcuHLh0r6+UrJM/8NW6W9SEoU26/xGA0C9
XeDWhI3RtDDiDjYfL1W/2dChmzd7hO3Fwu72VYn4rFykFKCMLDt7rp+oOMWFwO5L
3w3RpNa98JV3lh+4o7EKcspooG8XAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU76IX
o7uWZ/Ebs8YwLNeL+5AVZs8wHwYDVR0jBBgwFoAURIsZP32rpMsG8MWSRFPFv4sq
YjQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0OTA0L0RFNTMxOEJBOTEwMDExRUFCMjdEOTA3MkY4QUVBMjI4L1JJc1pQ
MzJycE1zRzhNV1NSRlBGdjRzcVlqUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JJc1pQMzJycE1zRzhNV1NSRlBGdjRzcVlqUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQ5MDQvREU1MzE4QkE5MTAwMTFFQUIyN0Q5MDcyRjhB
RUEyMjgvUklzWlAzMnJwTXNHOE1XU1JGUEZ2NHNxWWpRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTSDYzwIfomfNFCQVRJK1Z219W2w/Q
wvEqmXYSvZrgKWW20rHTTgJY9zIKT85SfAQzwA1T/8l5emAHseAop5EpE9oAB61L
vgAL90g+5BB0JC6s7M3/iiWcURSu3JCrzz/iDUtMZ3FfedVpsnsZygu8XZR83cAt
xIpT0LU2eyU4hQnXsiZ3FU9rMGVr65Rq3u9RPYayQ+ZHUpD51+L0w4EQno/s2D2k
ReymHHrP21taIZmSNSNBTuxwK9izw5XXCqDPP0eSAv8cbtCDah6aYIgAzy1dVu5H
6SklU7THoO9Dy77rDDzCfo4P+/vYsoCeC4O8m9pXQ+UN9tvXvJZ9RdWZ
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:36 2025 by rpki-client