Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File: XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier: 45xwJpLlzXt783ehfM7/qanb+JfI7LgCkclrEYLiITE=
Subject key identifier: 56:E2:55:E4:0D:F5:33:8A:19:10:EE:4B:6D:DD:2D:74:02:53:45:78
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer: /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial: C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number: C8
Signing time: Thu 03 Apr 2025 03:15:15 +0000
Manifest this update: Thu 03 Apr 2025 03:15:14 +0000
Manifest next update: Sat 05 Apr 2025 03:15:14 +0000
Files and hashes: 1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: 1XLac6fhPILzgOkd1xgbCQW+5f8H0LC5c19d12Nke7Y=)
2: F68C77C279C811EFB5AD7293762E951A.roa (hash: w7SzFM4rVLShHyz8Uu4JGbAwVkZlRI11cdVpH3TTF5M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625046AF
Validity
Not Before: Apr 3 03:15:14 2025 GMT
Not After : Apr 5 03:15:14 2025 GMT
Subject: CN=67edfd42-e520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:e6:d0:9e:2c:59:06:14:dc:c0:e5:8f:d8:
7f:42:7c:8d:64:98:e3:9d:6b:e1:22:1d:13:62:2c:
ba:bf:30:c9:dd:96:a5:ab:c4:08:cc:7d:3a:bb:5d:
a9:e9:e0:96:49:07:d6:ed:98:87:ea:fa:d0:7c:02:
85:dd:fe:26:e3:a8:6e:af:64:83:c9:bf:0f:ea:5c:
c7:88:e8:61:95:51:f2:69:ab:6c:b2:2f:f8:d3:23:
0a:b5:ae:d1:ef:f0:6a:b6:5d:0c:7d:57:7b:7f:ba:
aa:d6:30:c7:7c:f1:3b:bd:f6:e3:61:73:c5:16:f0:
6b:2c:f0:9a:e9:2d:f5:fb:68:32:ff:ce:15:a6:35:
b7:b2:b9:ca:ed:93:5e:25:1e:b6:b7:6b:4e:b2:67:
fb:16:6b:ee:18:85:8e:92:3b:67:4a:a6:98:45:13:
36:d0:5d:8e:ba:ed:7f:82:42:1c:05:82:84:74:af:
c8:cd:29:ba:39:c6:6f:37:e1:dc:d9:36:61:22:0c:
50:c3:77:9b:3f:3f:6b:5a:39:c4:07:81:a7:8e:ef:
8d:d8:6f:7c:ed:58:47:37:84:b1:71:ec:a9:47:b9:
8c:78:65:06:2a:e8:16:a9:2c:3e:ae:b4:32:00:70:
93:3a:41:aa:70:5c:a6:da:de:36:32:a1:27:43:1e:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:55:E4:0D:F5:33:8A:19:10:EE:4B:6D:DD:2D:74:02:53:45:78
X509v3 Authority Key Identifier:
keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:05:63:30:ac:35:94:de:bd:af:d1:ec:75:a4:cc:e7:a0:b9:
ba:1d:12:e5:fa:75:34:47:2a:2e:f7:79:47:99:c0:4e:5b:a9:
1e:ce:ac:ae:64:39:88:97:63:df:2b:2a:0f:b6:74:62:31:03:
8d:d3:89:f6:15:77:ef:5c:e4:7f:4a:f5:08:fe:61:e7:c1:ee:
7c:51:4e:6d:a0:bd:6f:4f:58:8a:a4:88:a3:c1:af:25:ae:eb:
09:8c:42:b3:21:63:bc:65:0f:a9:cb:07:c7:d6:2a:3b:6b:11:
f1:f7:de:67:dc:44:0f:6d:57:41:a2:32:f6:62:e2:e8:a3:4c:
fb:a4:ed:e0:e7:1a:d2:6d:d9:ec:47:43:4d:65:f5:c5:ac:e8:
38:2a:08:5d:15:b6:60:34:21:5d:89:8d:ee:7c:fe:e1:55:4d:
32:87:ce:d8:c1:4e:9d:0d:1b:e2:09:25:df:68:37:8b:1e:19:
7f:13:28:66:f8:98:c8:c8:fa:fd:28:db:a8:8a:cc:99:bc:84:
35:85:7d:a5:21:d9:3e:cf:cf:d1:08:f7:6c:3a:c2:32:93:44:
6d:b7:36:94:0c:11:9d:3a:ad:56:3c:f1:44:cb:4d:81:a2:0d:
e3:0b:ab:4a:a4:4f:c4:88:4c:89:63:92:58:1e:30:c2:3a:cb:
67:fa:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:19 2025 by rpki-client