Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File: kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier: H6j6bortO2HjKVYXEmbHL3RX395t1p6QEutikZO9dFU=
Subject key identifier: 73:69:4F:32:3F:A4:29:6C:8B:57:3F:4B:0D:86:80:F1:37:B7:89:75
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer: /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial: 08B1
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number: 08AA
Signing time: Wed 23 Apr 2025 01:27:36 +0000
Manifest this update: Wed 23 Apr 2025 01:27:35 +0000
Manifest next update: Fri 25 Apr 2025 01:27:35 +0000
Files and hashes: 1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: Swf4IMbUAAvV7uliiUKZPg6XN7MJ+Q25Zdb65V2eGZk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Validity
Not Before: Apr 23 01:27:35 2025 GMT
Not After : Apr 25 01:27:35 2025 GMT
Subject: CN=68084208-8350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:67:28:d5:eb:db:de:da:eb:e0:cf:1a:fe:
0b:3b:d4:01:9c:f5:af:68:f8:7c:54:be:9f:da:b6:
76:5a:fa:1b:49:7e:d1:e2:35:10:56:eb:1f:6b:db:
37:6b:32:fe:2d:cd:49:a1:9b:00:5f:33:13:94:02:
c3:8e:38:2f:c0:e1:8c:a6:f6:e9:5c:23:48:7e:68:
bc:53:45:d3:28:5d:dc:72:77:aa:81:e9:aa:88:49:
b9:be:c9:2d:27:28:bf:48:b2:d3:60:88:fd:1a:a4:
0e:d0:2e:e4:99:28:39:e7:6a:01:e3:f8:88:44:11:
85:cf:d4:c3:b1:2b:0f:46:ee:38:00:71:2b:c2:2e:
ed:8d:71:03:a5:5e:9f:73:d3:82:10:6f:e0:8d:42:
c9:1a:a0:fb:6a:44:71:6c:1c:cf:5e:6d:e9:d5:7a:
47:da:83:72:1f:19:f6:05:55:02:2b:5d:31:5d:f8:
bf:31:35:b2:ea:6d:a8:b3:70:44:c8:b8:73:54:da:
58:09:8e:d6:c2:65:d7:ee:34:7e:3f:eb:61:84:b7:
4f:e2:67:94:29:26:7b:6f:27:6a:1e:a5:ae:3b:a1:
6f:6d:21:e4:9a:3f:ea:26:f1:42:ba:f6:3c:bf:f8:
0a:78:53:4c:5b:28:65:ef:06:11:fd:7d:23:0b:48:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:4F:32:3F:A4:29:6C:8B:57:3F:4B:0D:86:80:F1:37:B7:89:75
X509v3 Authority Key Identifier:
keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:91:66:a4:f3:4f:41:f8:e2:fd:d6:21:83:f5:10:b2:b0:df:
17:10:30:84:55:59:30:2e:f7:8b:4b:2a:bd:4b:3f:fd:5d:dd:
ea:3f:c5:3d:d2:f1:77:a3:2a:e8:72:19:5f:f7:f1:bc:82:1f:
7c:b1:cb:74:3f:98:22:77:0b:3a:91:d4:05:c0:ff:f1:d8:cc:
2a:12:dc:01:55:f3:35:35:af:30:06:47:1a:66:c5:fe:ae:72:
c9:df:f7:6a:f6:23:b1:bd:c0:29:4f:0e:01:64:e6:d0:7b:6c:
18:84:95:01:91:5b:c0:5d:d8:79:06:ef:81:96:70:6c:af:eb:
75:f3:a2:94:b6:da:08:fb:e3:76:7c:db:39:05:de:aa:ab:b7:
93:a6:06:ed:61:45:b9:dd:d4:3c:55:f7:7b:af:de:17:b6:7c:
20:9d:96:9b:c4:9b:57:0a:5f:76:88:c2:61:24:21:bc:bc:ee:
16:f2:bd:4f:b6:f1:4f:49:d5:d8:97:1f:6b:e0:24:7e:b0:51:
91:7f:80:91:a1:0c:72:e1:dc:8d:61:ca:05:b7:53:85:21:19:
e2:cb:68:18:8a:ff:77:99:ce:b2:4a:5f:68:1a:fe:cd:23:33:
ee:a8:f9:9e:58:81:a3:89:fe:6f:ce:0d:db:23:70:ee:5b:f4:
47:7c:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:09:12 2025 by rpki-client