Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
File: X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft (raw, json)
Hash identifier: dPhdnhA01HVxGu0+P9leFXk2pZ1A/jMnOCQKsy1C9l8=
Subject key identifier: E9:A4:02:AB:03:2A:4C:22:ED:A3:72:C4:7C:19:91:58:14:01:1D:6A
Authority key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Certificate issuer: /CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Certificate serial: 0402
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
Manifest number: 0401
Signing time: Sat 29 Mar 2025 02:33:59 +0000
Manifest this update: Sat 29 Mar 2025 02:33:59 +0000
Manifest next update: Mon 31 Mar 2025 02:33:59 +0000
Files and hashes: 1: X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl (hash: DX5Q9Fc0aImDm7n4qq1KqE4ACGjsdhbbzZWAGQZKy4Q=)
2: 07EE873A020211EDAC199783F1222468.roa (hash: YfCMAg3Y9dxZRfFftpeSFNVqy74lmtcSUOaH6LHRzXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026 (0x402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362A252AF
Validity
Not Before: Mar 29 02:33:59 2025 GMT
Not After : Mar 31 02:33:59 2025 GMT
Subject: CN=67e75c17-d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:0d:85:0b:73:2a:43:2e:ef:1c:3c:67:4e:
dc:dc:3a:8c:12:4c:e9:bb:32:c8:41:40:72:9e:6c:
10:60:d4:ca:e2:cf:74:83:a5:35:91:fe:48:54:ec:
56:06:be:39:9d:d3:c8:fb:74:bd:9f:86:db:0a:81:
19:a0:74:a8:0a:d1:f3:0a:f4:73:d8:a4:e2:5e:76:
24:3c:01:45:25:42:ff:1a:83:95:af:a3:62:17:aa:
7c:e8:19:0d:9b:e5:e8:3d:e6:0b:ff:db:d7:c4:ab:
12:8e:63:50:5b:0c:aa:95:83:99:c7:64:3d:43:ff:
7a:7b:25:54:89:62:fd:72:12:3b:89:ad:54:29:72:
22:fc:70:b9:40:ec:91:a2:5c:47:2f:4a:a3:3a:9a:
c7:25:eb:c5:0d:3e:ad:a2:0c:9b:9c:70:a2:f1:4a:
33:52:98:bd:c1:50:cb:9a:c1:82:58:c8:e1:75:cf:
3d:70:cc:bb:cb:60:bb:5c:4d:5a:42:8b:c9:bb:de:
66:f1:68:f6:96:09:3a:f2:58:02:5b:27:e3:9c:54:
e7:6a:e9:67:62:67:b5:d7:75:90:1f:f4:b5:84:f3:
c4:1f:a2:eb:09:e1:31:47:e8:78:66:5c:e6:01:5b:
0b:cd:16:73:c6:90:13:ec:b3:0a:e6:ef:5f:d6:e5:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A4:02:AB:03:2A:4C:22:ED:A3:72:C4:7C:19:91:58:14:01:1D:6A
X509v3 Authority Key Identifier:
keyid:5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:56:b1:3b:e4:f8:19:f6:a8:7d:5a:7f:9b:86:eb:3b:97:da:
e8:8c:90:4b:2e:68:4a:8b:6d:1d:ec:69:bf:74:c7:aa:26:60:
eb:92:bc:84:82:04:bd:8a:78:cd:10:75:34:e3:db:51:33:66:
1e:36:b9:e9:4f:8d:c2:86:77:20:8f:4a:7e:47:d5:42:f9:66:
40:9e:19:4a:95:97:bb:83:02:0a:5d:fb:a9:13:95:69:f6:6e:
b3:34:64:d2:f4:7a:7e:ea:8b:b7:32:32:4e:4a:be:6d:57:4b:
e1:64:bb:5d:02:11:64:57:fd:c2:49:12:48:ce:02:1f:8e:fd:
81:3e:04:be:25:83:05:45:c8:cd:78:0e:bb:c2:25:35:0a:4f:
78:40:f7:89:d5:35:18:38:7c:f6:1b:29:d3:df:f4:e9:ef:8a:
83:3b:9e:0b:60:b4:17:d8:aa:fb:4c:f9:65:20:32:a1:44:1d:
35:bc:b2:95:89:fa:92:29:a2:d6:85:c9:d3:45:97:96:88:d8:
92:53:dd:03:a9:5e:0c:d9:4d:e8:88:c0:55:ed:3d:07:05:5c:
5b:d5:b9:df:9d:74:db:16:a8:95:bd:38:f8:c5:b7:a9:25:90:
8a:04:61:3a:0a:bd:33:1d:27:23:0a:8b:7e:7e:46:c7:2d:d6:
78:2e:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:26:11 2025 by rpki-client