Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
File: XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft (raw, json)
Hash identifier: uf3iMrJtUv8iIfW4aSLRLgkqAByF3yyTeAwYwoz6BrU=
Subject key identifier: 1D:F2:E0:A1:CB:B2:D0:30:59:AB:83:4C:61:CD:3A:F3:A9:3A:47:2A
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Certificate issuer: /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial: FB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
Manifest number: FA
Signing time: Thu 03 Apr 2025 03:09:18 +0000
Manifest this update: Thu 03 Apr 2025 03:09:18 +0000
Manifest next update: Sat 05 Apr 2025 03:09:18 +0000
Files and hashes: 1: XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl (hash: d6A9FAoMntXCf6lXxiIXJOBjal9123ap6GsigIXQoeA=)
2: 47D8021A53D411EFA7C83C74762E951A.roa (hash: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627065AF
Validity
Not Before: Apr 3 03:09:18 2025 GMT
Not After : Apr 5 03:09:18 2025 GMT
Subject: CN=67edfbde-8926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:40:b8:19:83:d0:78:0a:77:b6:46:06:61:a0:
19:78:b2:03:5b:80:9f:6d:b1:60:1b:a5:a3:0e:7a:
70:1e:5b:21:d2:fb:a5:ee:15:65:12:6d:27:7a:b3:
89:4e:6e:02:4e:65:73:9a:b4:c5:3f:e0:99:14:5d:
c7:6e:78:1a:66:01:5f:fe:6f:61:67:5b:bf:1d:17:
da:24:be:4e:5f:57:8c:78:54:32:c4:bb:6e:f5:68:
1f:1f:20:2e:a8:a0:5f:21:db:0c:87:a5:cd:c6:87:
22:ff:92:fc:3c:5b:a5:92:4f:8e:d1:06:c3:9b:96:
4c:fa:5b:61:89:4a:77:c3:ac:9e:86:f4:45:fd:bb:
e1:22:c5:34:f9:74:99:44:23:05:ca:4a:ce:33:ea:
07:b0:4d:88:2a:c0:44:93:b0:4d:1a:d9:a7:3d:f6:
46:b4:85:b5:c1:a1:d2:02:88:03:f9:7b:6f:a2:23:
05:87:68:54:1f:3d:bb:22:d3:e3:c5:28:ec:40:d1:
a6:e3:16:9c:08:47:8a:49:34:76:ee:a2:b7:ff:98:
59:9c:da:9d:03:45:13:7f:d7:28:b8:00:06:c7:c6:
28:e2:2e:73:8d:a3:15:9e:82:91:09:46:cd:d7:94:
78:05:9e:85:b6:ed:3a:d2:79:2e:13:ec:38:21:20:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F2:E0:A1:CB:B2:D0:30:59:AB:83:4C:61:CD:3A:F3:A9:3A:47:2A
X509v3 Authority Key Identifier:
keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:bd:d1:3d:6d:b9:43:d2:0d:36:1b:73:c6:ed:24:5c:6a:a2:
2e:8a:95:cc:22:54:48:38:3b:cf:2f:a9:74:f8:ed:26:2b:91:
bf:cf:b0:4d:e4:24:b4:4e:68:3d:76:4f:3b:84:1b:52:b9:a3:
cb:6a:18:e8:04:e5:bc:a0:f2:d8:fb:05:0f:85:8d:43:37:42:
33:61:53:c6:6b:30:2f:db:e5:ad:b0:05:16:04:72:c4:04:66:
4e:ee:9c:67:c7:68:c0:01:d8:01:45:1f:e4:89:24:ee:8a:a0:
d3:a1:4e:b1:9d:66:8f:6a:31:2b:a9:0a:2b:b6:90:e5:63:7b:
b7:2c:c0:e9:ef:b1:b2:eb:a0:fc:83:c4:3d:fd:e2:e1:71:90:
f7:ec:15:4d:65:3c:ea:b8:4b:01:0c:ed:8e:53:8f:7d:07:bc:
49:ee:94:ad:11:24:d7:b0:44:8c:b2:b1:71:b8:56:16:b3:ff:
72:20:6c:ec:ab:54:47:07:6b:bb:08:38:8d:ec:1d:8b:b6:6f:
80:d5:1f:83:12:8b:fa:bb:b1:e9:e3:b9:84:01:5a:4e:85:80:
f3:3c:0c:25:db:1d:eb:22:25:d8:4c:80:e1:ef:f8:34:35:39:
d6:8b:36:cb:c1:f3:ed:2b:99:a3:77:04:94:f2:70:5f:43:d2:
ec:c2:c5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:44:01 2025 by rpki-client