Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
File: Vgq77plEvBY3TSi-TCYHISxchBo.mft (raw, json)
Hash identifier: mY4waruJB8ztb/aodIZTZe4P/rWADUu3vRAhL5E2COg=
Subject key identifier: 69:BE:1C:76:D7:95:3A:84:74:3F:7B:45:5A:AE:2A:36:FF:B0:27:88
Authority key identifier: 56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
Certificate issuer: /CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Certificate serial: 02A1
Authority info access: rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
Manifest number: 02A0
Signing time: Sun 16 Feb 2025 02:31:01 +0000
Manifest this update: Sun 16 Feb 2025 02:31:01 +0000
Manifest next update: Tue 18 Feb 2025 02:31:01 +0000
Files and hashes: 1: Vgq77plEvBY3TSi-TCYHISxchBo.crl (hash: nMBoNH/wYuZUOwxEHYAFZHRde9LrYbVq4KF53RsN0Uk=)
2: 5CEB9A26EE7311EDAE92A5174AD9E6FC.roa (hash: rLtmy6+gg/x50UbRPkkqh7K/Hhi9wWQKPE+ocVnJ+7I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624E32AR
Validity
Not Before: Feb 16 02:31:01 2025 GMT
Not After : Feb 18 02:31:01 2025 GMT
Subject: CN=67b14de5-3aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:a5:68:4d:9b:08:67:fc:70:89:66:88:7c:
7d:0d:7a:9a:48:f2:c7:66:2f:a7:38:4b:b8:3e:44:
e3:4c:c9:ed:52:2a:62:12:36:95:04:e6:21:dc:68:
56:33:5b:18:fd:43:b8:4c:4b:91:59:2c:81:54:7f:
83:b8:a7:3b:5b:11:d7:9f:54:53:8c:23:9f:6b:c3:
0b:6a:ba:62:c2:8c:b9:69:35:ec:71:0e:3a:0e:c1:
72:2d:ca:00:b5:28:fe:06:e1:d1:3d:5e:0f:62:1b:
d9:bb:bb:74:1c:7c:17:a7:ad:7d:18:74:72:d8:ee:
bd:f4:09:6a:eb:89:1c:c5:11:3d:da:5d:05:8b:30:
3f:86:c1:71:ad:40:f6:40:fb:17:6d:f7:1f:67:a0:
1b:1f:8e:b1:24:bb:a9:93:33:9a:71:81:80:7c:05:
2d:41:57:8f:57:f2:35:22:af:22:30:ac:b8:88:70:
00:d0:81:1a:90:a5:c7:9c:31:f7:d5:1d:85:01:fd:
ca:8a:da:a9:9a:58:44:c1:94:72:25:a1:98:fa:ad:
e0:69:3d:7c:33:4c:b2:8f:c9:74:8c:16:80:89:49:
7b:70:f2:69:9a:9b:70:43:10:02:23:45:ad:c9:6c:
2c:f6:bd:10:a6:f3:35:f4:41:ba:18:27:33:73:e1:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:1C:76:D7:95:3A:84:74:3F:7B:45:5A:AE:2A:36:FF:B0:27:88
X509v3 Authority Key Identifier:
keyid:56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:0f:48:84:99:a9:6f:4f:8f:46:04:c9:ec:18:42:54:e4:
39:a8:a1:81:33:54:0e:6c:dd:54:dd:6c:74:12:12:62:f9:16:
88:32:ac:21:7f:65:09:c8:bd:93:aa:ea:77:be:bc:0a:f0:d8:
19:08:37:08:f4:7c:19:3b:14:16:21:bc:5e:5b:9e:86:4b:50:
ea:a8:fd:a2:57:5b:6e:21:66:08:03:80:1b:ec:fb:47:b6:4d:
d1:13:90:da:7a:e3:4e:63:c5:50:fa:3f:09:c6:ed:55:97:3c:
48:6f:46:b9:c1:28:25:9f:8a:ed:99:de:59:1c:70:01:2e:54:
eb:fe:8a:a6:64:2b:a2:bf:97:70:85:1b:d8:60:53:78:b9:91:
ce:2f:cc:d5:b7:83:85:26:55:76:95:a5:93:3c:7f:43:ab:f1:
64:5b:0b:24:05:ee:c8:9c:7a:de:f7:73:76:a9:f6:b0:8e:73:
71:63:09:84:ae:23:16:c1:37:84:2f:ad:d3:3e:2a:9d:4d:81:
38:30:32:69:ec:a5:47:c2:57:9b:05:b0:aa:69:55:12:1c:c7:
f8:54:48:f9:f5:3c:85:4c:56:1b:57:73:c1:45:2c:01:54:0b:
43:bc:2b:7c:18:99:4c:01:08:2f:83:c0:26:79:98:38:f3:4d:
c3:73:2d:e7
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjRFMzJBUjExMC8GA1UEBRMoNTYwQUJCRUU5OTQ0QkMxNjM3NEQyOEJFNEMyNjA3
MjEyQzVDODQxQTAeFw0yNTAyMTYwMjMxMDFaFw0yNTAyMTgwMjMxMDFaMBgxFjAU
BgNVBAMTDTY3YjE0ZGU1LTNhYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTI6VoTZsIZ/xwiWaIfH0NeppI8sdmL6c4S7g+RONMye1SKmISNpUE5iHc
aFYzWxj9Q7hMS5FZLIFUf4O4pztbEdefVFOMI59rwwtqumLCjLlpNexxDjoOwXIt
ygC1KP4G4dE9Xg9iG9m7u3QcfBenrX0YdHLY7r30CWrriRzFET3aXQWLMD+GwXGt
QPZA+xdt9x9noBsfjrEku6mTM5pxgYB8BS1BV49X8jUiryIwrLiIcADQgRqQpcec
MffVHYUB/cqK2qmaWETBlHIloZj6reBpPXwzTLKPyXSMFoCJSXtw8mmam3BDEAIj
Ra3JbCz2vRCm8zX0QboYJzNz4bQ7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUab4c
dteVOoR0P3tFWq4qNv+wJ4gwHwYDVR0jBBgwFoAUVgq77plEvBY3TSi+TCYHISxc
hBowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0RTMyL0YxMzQwRTRFRUU3MjExRURCQTUzMjcxNjRBRDlFNkZDL1ZncTc3
cGxFdkJZM1RTaS1UQ1lISVN4Y2hCby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1ZncTc3cGxFdkJZM1RTaS1UQ1lISVN4Y2hCby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjRFMzIvRjEzNDBFNEVFRTcyMTFFREJBNTMyNzE2NEFEOUU2
RkMvVmdxNzdwbEV2QlkzVFNpLVRDWUhJU3hjaEJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFXw9IhJmpb0+PRgTJ7BhCVOQ5qKGBM1QO
bN1U3Wx0EhJi+RaIMqwhf2UJyL2Tqup3vrwK8NgZCDcI9HwZOxQWIbxeW56GS1Dq
qP2iV1tuIWYIA4Ab7PtHtk3RE5DaeuNOY8VQ+j8Jxu1VlzxIb0a5wSgln4rtmd5Z
HHABLlTr/oqmZCuiv5dwhRvYYFN4uZHOL8zVt4OFJlV2laWTPH9Dq/FkWwskBe7I
nHre93N2qfawjnNxYwmEriMWwTeEL63TPiqdTYE4MDJp7KVHwlebBbCqaVUSHMf4
VEj59TyFTFYbV3PBRSwBVAtDvCt8GJlMAQgvg8AmeZg4803Dcy3n
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:24 2025 by rpki-client