Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier: I8rphYJybGl9y6MrYVka5LqbQBvA16Ku9GV7BVNnquM=
Subject key identifier: FB:A7:3C:EC:D9:77:CD:FD:43:B2:A4:FD:70:32:06:73:BA:69:0C:9C
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer: /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial: 36
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number: 35
Signing time: Wed 05 Feb 2025 03:22:28 +0000
Manifest this update: Wed 05 Feb 2025 03:22:27 +0000
Manifest next update: Fri 07 Feb 2025 03:22:27 +0000
Files and hashes: 1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: LQPBtfposC0TRWIT4Y8TFUbUWSq7Ln8X4XBPdP5BuUc=)
2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628288AF
Validity
Not Before: Feb 5 03:22:27 2025 GMT
Not After : Feb 7 03:22:27 2025 GMT
Subject: CN=67a2d973-743f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:41:31:6d:8e:fb:97:3a:ee:e0:b3:b5:35:
19:7d:e8:03:37:41:5c:90:72:e0:c8:cc:f5:ff:24:
19:d3:12:cc:df:ec:9e:0b:62:24:c3:1d:f0:a0:8d:
0d:0e:67:c3:e1:a6:9c:11:e3:10:75:16:74:51:b5:
3b:18:3d:98:18:c5:22:1a:0f:18:f0:96:be:6f:02:
25:59:fc:dd:b3:ee:47:f6:48:48:cb:a3:cf:40:a0:
01:ed:60:71:34:08:fa:04:2a:d6:27:8a:89:10:0b:
67:69:e6:07:31:23:3c:ab:00:c2:42:cc:7e:e2:0e:
30:3e:d0:a2:73:89:a1:e9:d7:34:da:2d:77:52:d6:
7c:c1:47:2c:fc:1c:e7:5f:0b:8b:cb:bf:7a:ef:f6:
41:76:f0:3a:5e:94:3b:67:22:dd:d0:ba:8f:8f:6a:
a4:b3:af:db:dd:31:f8:9a:e1:09:84:ab:d3:01:74:
78:07:72:83:e8:99:9b:83:28:e3:34:6b:49:99:b4:
bc:03:18:91:56:d6:a8:30:2d:a0:42:50:b3:ae:1a:
f7:15:1b:51:59:20:b3:9c:ca:ba:2e:2b:55:00:a0:
ef:95:70:c8:79:22:39:5d:d6:4a:b5:e0:0f:08:1b:
ab:7f:dd:25:67:d3:1d:b6:ad:bb:10:cd:91:39:81:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A7:3C:EC:D9:77:CD:FD:43:B2:A4:FD:70:32:06:73:BA:69:0C:9C
X509v3 Authority Key Identifier:
keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:9b:94:38:9b:e1:92:14:fe:6f:61:c7:00:7c:b4:bd:16:74:
d5:b0:d7:97:bb:97:57:24:67:70:85:88:ef:4b:e2:4e:50:2d:
d3:14:ca:6b:5c:68:b4:f1:28:c7:f4:c2:10:59:de:52:84:31:
2f:c5:d1:fe:a7:aa:56:7b:a6:3e:ad:e9:a2:88:3f:95:b0:f5:
b0:58:1d:f9:fa:6d:f3:e5:08:8d:de:cb:12:6e:46:a8:61:1f:
18:af:f3:7e:19:87:2e:3a:17:4a:9e:9e:77:9d:a9:88:e4:b3:
05:5c:48:f6:c7:93:24:02:66:46:64:01:03:db:50:5d:f8:bb:
20:f5:de:d7:97:ec:8d:14:50:2b:d4:de:a8:6d:aa:93:ce:57:
12:e4:5e:f1:4b:87:e7:18:f7:60:28:de:83:d9:ab:4f:77:9d:
3c:7c:bd:32:01:bf:c8:49:10:a2:ed:0e:d6:8e:57:51:a3:52:
d1:4f:a2:3f:23:82:c1:a2:45:b3:a5:ea:27:0d:39:42:11:09:
8c:b2:b5:60:24:93:f9:d6:88:d7:e1:bb:f4:37:9d:58:5f:2b:
b0:f2:41:69:8b:a7:3f:3a:7d:5b:b8:ad:ea:54:e9:52:fe:fe:
3e:60:18:26:e6:a7:72:9d:59:34:57:80:28:c1:95:23:f6:d9:
8f:0d:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:53:06 2025 by rpki-client