Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File: kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier: gBPUOd8OZp/ctrp/pMIumihFO875VNQiftSxqwpzXL0=
Subject key identifier: 23:C2:07:59:F4:E2:93:B1:01:B7:8F:FD:90:1F:FC:11:DA:B7:0B:FF
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer: /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial: 086E
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number: 0867
Signing time: Sun 16 Feb 2025 01:13:24 +0000
Manifest this update: Sun 16 Feb 2025 01:13:24 +0000
Manifest next update: Tue 18 Feb 2025 01:13:24 +0000
Files and hashes: 1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: 5NzjwyMkDPwuV/vZDWd73xAlmUlSEmH0fs046GNwsfQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AR
Validity
Not Before: Feb 16 01:13:24 2025 GMT
Not After : Feb 18 01:13:24 2025 GMT
Subject: CN=67b13bb4-2170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:5d:6e:0f:68:64:fc:d7:cb:2e:2e:ef:f1:
a4:2d:76:62:3a:24:b9:3a:4b:9b:25:85:ed:75:99:
b5:da:13:67:9b:12:b0:fa:55:48:f7:7d:7f:09:8a:
f4:65:4e:8e:6a:36:55:09:d0:df:32:f9:4c:76:dc:
7f:8d:57:44:f6:42:16:c2:8f:4d:cd:8d:59:70:f7:
76:16:99:a4:76:43:92:a3:3a:83:ac:d1:f8:3f:1f:
91:d6:d6:f6:db:b6:26:8d:9f:bd:ac:b8:f6:ab:4b:
c6:78:8f:7d:2c:0c:d3:5a:f4:1f:d6:1f:29:47:62:
c5:f6:aa:cc:54:49:23:22:43:17:eb:c3:80:fb:0e:
17:20:46:2a:2a:d1:88:73:6e:dc:e0:d6:2b:ea:57:
be:1f:90:f5:70:2b:f6:e4:22:44:cf:b0:b7:c1:a2:
f0:95:29:ff:f8:e8:77:95:35:f2:3c:62:4f:74:01:
5c:f2:21:bc:ce:1a:1b:a9:1a:04:11:14:f7:34:1d:
75:e3:ee:71:93:49:4c:e6:f0:f4:a9:c8:cb:1e:6a:
75:72:32:c5:e1:9f:86:2c:f2:04:cd:2e:2e:2e:58:
27:18:64:45:a7:1f:4b:ad:a1:ef:e9:1d:c3:93:19:
cb:14:16:17:6b:b9:8c:da:1d:69:af:94:4c:76:66:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:07:59:F4:E2:93:B1:01:B7:8F:FD:90:1F:FC:11:DA:B7:0B:FF
X509v3 Authority Key Identifier:
keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:93:eb:f2:95:52:9d:f6:4e:62:a7:44:9c:e9:d2:14:d5:69:
f4:53:e6:75:e1:f5:31:ca:02:49:d7:11:e5:ae:4c:35:a0:d2:
d3:c4:be:af:25:06:e7:eb:aa:01:49:7a:0f:e6:ae:29:b6:81:
69:d4:fc:8e:64:d3:a3:91:e1:36:60:aa:de:d9:38:22:46:e1:
f2:ea:0b:22:78:9f:43:4f:ec:79:d3:a1:e3:18:95:99:54:f6:
c1:7e:cc:f9:7a:f7:33:a4:ca:62:8c:e0:a4:84:88:be:ec:20:
44:26:1d:05:bb:86:c1:ce:d0:2b:c4:d1:4d:cf:3c:70:b6:82:
ba:9d:8a:61:56:f1:fd:27:d7:4c:9d:b7:9a:1f:d7:b7:6d:5d:
a1:3e:a1:e0:d5:d4:5d:35:f7:79:0b:f4:c1:85:9f:3e:be:2c:
83:88:71:d9:c6:b7:14:4c:0b:f4:08:7a:a4:1e:4a:5b:ac:35:
6c:e1:8d:51:b1:a0:bd:06:50:a2:92:22:82:e0:09:da:30:4c:
ae:14:0d:62:0b:93:d3:e3:e4:18:5e:94:18:06:10:c4:47:b1:
27:fb:c7:0b:2c:64:1c:a4:3d:33:4b:9e:7d:3c:43:98:0d:8d:
8d:63:9b:c5:67:5b:f8:9f:cf:1c:c3:6e:51:5f:f7:9c:f9:66:
95:ba:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:27 2025 by rpki-client