Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File: l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier: vR9uMiaNi7Q+Rstx+snDaG1DH6BUTwj99kze7LIk0Ao=
Subject key identifier: D4:53:FB:E6:87:7C:41:94:64:C6:0A:3A:9A:30:0A:C7:59:70:82:CC
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer: /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial: 02A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number: 02A0
Signing time: Sun 16 Feb 2025 02:31:10 +0000
Manifest this update: Sun 16 Feb 2025 02:31:10 +0000
Manifest next update: Tue 18 Feb 2025 02:31:10 +0000
Files and hashes: 1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: rXEokL2u2bIRh1OPK3R0hvPfgvYOW7+1pGXgiKTRHvY=)
2: 60A3BEAAEE7311EDBF3DAE174AD9E6FC.roa (hash: QNrfzd3ARf2QVpOaSCByjJBaaDBdSWDu5u6B8Hs+BLk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624E32AF
Validity
Not Before: Feb 16 02:31:10 2025 GMT
Not After : Feb 18 02:31:10 2025 GMT
Subject: CN=67b14dee-e0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:00:4f:9e:db:4d:45:0a:4f:20:bb:49:6c:
27:4f:24:48:57:cf:63:e4:04:fe:4a:c7:95:9a:66:
ac:33:e0:8d:d1:7e:b9:48:af:13:29:f1:25:6e:e5:
0d:29:45:b2:44:f0:8f:d8:dd:d3:39:f6:0c:a9:ff:
ac:c7:19:11:ca:02:39:d3:07:14:4a:d0:b4:0e:96:
11:34:3f:cb:d4:50:ef:d2:1b:61:cd:cd:26:f3:27:
06:ef:88:6d:15:cb:23:c2:b9:35:bb:ff:6b:33:3d:
84:80:84:71:8a:f9:78:41:f4:84:1d:ed:a0:28:69:
0e:73:f3:eb:b8:73:48:92:94:93:14:ad:22:50:71:
1f:7a:88:85:2e:62:5f:4d:26:1a:28:e2:be:e4:b7:
21:19:2f:89:4e:9d:d3:7b:83:30:a8:41:f0:a1:72:
c0:03:65:7a:a5:67:2a:f4:f0:5c:d7:aa:4d:43:6d:
e5:26:11:aa:fd:23:d0:4d:63:81:c0:4b:05:d9:3b:
60:fd:3a:61:e0:64:2b:ec:ce:c4:b1:0d:01:5c:15:
07:99:8b:d0:60:41:a8:72:9f:ac:4e:5b:89:74:f1:
65:c8:c5:fe:8f:48:d5:d3:73:48:b5:1d:a1:6c:c1:
2a:41:d9:0e:57:e7:4f:3d:d7:64:14:d2:5a:0b:2e:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:FB:E6:87:7C:41:94:64:C6:0A:3A:9A:30:0A:C7:59:70:82:CC
X509v3 Authority Key Identifier:
keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:5e:8b:25:a3:2a:24:64:16:09:e8:16:95:5b:16:55:70:71:
c4:d0:d7:8e:8b:f3:b2:2f:83:cc:a1:b8:0a:12:70:63:0a:d5:
ce:f7:7f:67:ac:a3:db:0a:6b:f2:79:31:04:13:4b:03:be:a8:
0e:60:ce:72:86:76:5c:d9:05:c7:fd:91:6f:12:77:7b:c4:71:
9a:13:1a:45:06:3f:36:e6:7d:04:5b:5e:3c:b8:01:d4:79:37:
af:c6:06:39:ad:cd:bb:1a:7d:e5:9a:94:0c:11:7d:cf:98:41:
6a:58:d4:1d:c3:b8:ba:58:7f:49:4a:79:75:77:e3:4a:2d:3c:
69:86:0d:1c:ee:65:0a:83:e3:0f:4c:ac:f1:86:ea:74:f9:fa:
4a:8b:8a:3c:11:47:ac:64:63:6b:d9:d1:3a:1a:ba:18:14:48:
70:02:69:07:33:50:27:77:be:7d:c9:5b:97:6c:97:25:23:cc:
f6:15:83:49:7e:e0:ee:d3:2c:33:0d:aa:6f:25:ff:14:29:9b:
d7:6f:b5:7a:8b:e6:9f:82:20:90:52:ef:d1:5f:53:79:df:68:
fd:95:be:e5:be:0b:ae:3c:b6:43:d4:66:90:f0:46:c5:6c:0f:
8a:41:f0:a0:c9:c5:3f:be:bd:a2:65:10:84:52:a7:12:86:40:
91:48:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:33 2025 by rpki-client