Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: QIl9lUz7QVMfpAy7T0/aEEEqT33FEMFOwK1a4zsB7PM=
Subject key identifier: F0:E0:70:4E:C5:10:A6:8E:94:9F:8A:BF:6F:10:9A:71:BE:B6:BD:32
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 0429
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 0428
Signing time: Sat 29 Mar 2025 02:30:43 +0000
Manifest this update: Sat 29 Mar 2025 02:30:42 +0000
Manifest next update: Mon 31 Mar 2025 02:30:42 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: A5FVEfhXGWtP/H4CfeZjoFQkrc1epM7snVfLSBy7Inc=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF
Validity
Not Before: Mar 29 02:30:42 2025 GMT
Not After : Mar 31 02:30:42 2025 GMT
Subject: CN=67e75b53-9726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:e0:08:e4:95:9f:5a:28:11:74:e9:a0:a2:
4d:17:31:0e:e6:82:f7:6f:8a:ed:ba:d1:ae:74:59:
39:47:e1:39:8e:39:28:48:37:dd:36:0a:00:1b:06:
1d:5f:95:83:b8:7c:c5:3a:c4:42:41:3c:fa:0f:06:
34:01:02:97:7d:d7:11:11:65:04:48:f9:a6:b3:ca:
aa:67:2a:2e:d7:3e:5c:ca:3f:41:c4:36:48:2d:ed:
c1:51:eb:cc:dd:c6:6f:c2:fc:45:1d:46:00:be:02:
fc:e8:e0:f0:fe:ec:8d:be:c0:3b:dd:c1:f4:1f:e7:
d7:a5:ad:e9:1d:be:95:80:2d:cd:68:7e:65:5b:eb:
a0:84:01:73:8a:b4:37:1e:93:31:00:48:d9:c7:38:
aa:4f:04:19:0b:55:9c:66:52:b0:64:ec:cc:aa:8f:
6f:d3:19:76:44:5f:59:47:a3:81:3d:a9:48:64:43:
bb:20:b3:bb:c6:4b:54:0b:6a:49:60:02:62:fe:d0:
b3:9c:39:ba:fd:60:ac:fe:32:5b:f2:b1:b9:65:2e:
97:32:66:4e:4c:ca:3a:0c:a8:19:6d:46:34:52:66:
09:40:84:fd:d8:a2:07:f6:a9:6b:09:91:1c:fa:af:
b9:36:4d:22:9b:50:bb:c1:32:9d:e3:c1:98:31:6e:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E0:70:4E:C5:10:A6:8E:94:9F:8A:BF:6F:10:9A:71:BE:B6:BD:32
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:86:8f:2f:86:72:c4:b3:87:6a:42:d6:ec:92:e8:a9:57:4e:
4c:5b:87:62:52:a3:42:77:e6:8c:75:2c:17:cc:10:32:6b:f0:
82:3c:67:a2:45:4b:1e:34:71:2d:e2:0a:7b:12:37:89:4d:3a:
df:59:e0:3a:e1:3a:a9:bf:45:1f:40:10:40:41:b6:bf:4d:6b:
d6:80:a8:0a:cd:b1:a7:0b:d3:ab:13:10:e5:f7:be:a0:c4:73:
04:a4:27:8f:c6:12:6c:bd:11:30:e8:47:9c:cd:f5:1a:02:10:
65:76:85:80:47:c3:93:95:49:e3:6f:c6:00:fc:4b:3b:f1:96:
91:ee:d7:74:cd:c5:91:d8:59:23:dd:b9:e3:76:31:49:38:94:
64:b4:bb:01:4b:90:04:15:12:f7:57:95:63:d3:3f:a5:5d:62:
72:f9:50:f0:86:62:c7:22:75:18:5b:9c:11:86:1e:87:c7:ef:
8c:20:31:13:c8:fc:b1:ea:a5:f9:61:27:66:d3:27:b2:aa:03:
19:a5:82:a2:0a:db:b4:33:11:97:7d:0c:f5:6c:bf:52:e1:2f:
41:e1:c2:6a:35:cd:ba:d2:18:fd:7c:e1:74:08:a5:e4:10:df:
c6:d3:39:8d:bb:48:c6:02:ff:fd:8f:2c:ec:84:e2:e0:ed:41:
b1:6e:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:06 2025 by rpki-client