Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
File: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft (raw, json)
Hash identifier: hlcXs2XrM/vY8NnSdYAN5dT2tXaIucUga8OZyaIJm94=
Subject key identifier: 19:9A:8E:D5:7D:03:FE:0D:39:6C:AA:3A:BC:04:2F:56:84:9D:E8:D1
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Certificate issuer: /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial: 0663
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
Manifest number: 065C
Signing time: Sat 29 Mar 2025 01:58:46 +0000
Manifest this update: Sat 29 Mar 2025 01:58:46 +0000
Manifest next update: Mon 31 Mar 2025 01:58:46 +0000
Files and hashes: 1: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl (hash: 2tfc54G4K4Cb5xRL+25RUG+2wRmzdkxuwBUy8Ui759I=)
2: 734F013479C511EFAE81627D762E951A.roa (hash: xdurMFAxJPU0CP+M6yamIm2npN94Z/AsDJKHCn0C3Ko=)
3: 2B48BC985C0C11EB9996AA30F8AEA228.roa (hash: q6nVowz9VuDpjWX/IbvfjqSfChWzoCDvGswNPS2gk/0=)
4: FE6D92CA5C0B11EB95157330F8AEA228.roa (hash: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=)
5: A573C59E7F2111EFABEC8243762E951A.roa (hash: z2hxV4eIGWcs9mH3SGVDwRrbCV/vQwHP3UQvoUEczXo=)
6: 336BF2CA332411EBB561BF72F8AEA228.roa (hash: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=)
7: 66D788525C0C11EB89D7F330F8AEA228.roa (hash: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=)
8: 4D1819725C0C11EBB458D830F8AEA228.roa (hash: Y5bEDudGZy2SxFSFnv47v/c/OeLSoqXcxTY9JA/Rm5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FF17AF
Validity
Not Before: Mar 29 01:58:46 2025 GMT
Not After : Mar 31 01:58:46 2025 GMT
Subject: CN=67e753d6-d290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:14:ba:57:b2:7a:c8:3b:f1:09:42:e5:70:
8a:02:1a:31:4a:b8:b8:9c:22:04:5f:3f:0a:d1:16:
63:38:3e:a3:62:3c:90:40:34:48:63:c8:4c:f9:5b:
d8:d2:b0:70:04:b1:97:17:81:f7:da:77:4b:65:77:
31:ff:f6:b7:15:38:57:ff:bf:63:b9:d0:04:fb:b6:
a3:fc:8b:e9:50:e8:df:40:42:e7:14:7c:a9:89:68:
2e:a6:77:78:8a:c9:a3:27:49:91:29:f5:c1:11:07:
d4:a9:8b:a3:b4:08:ed:23:43:6b:fc:ab:95:35:22:
85:2b:da:da:77:1f:81:3b:1d:52:be:5f:e1:de:52:
30:4a:14:e1:8b:12:2b:24:57:e7:a8:aa:8a:be:f1:
cd:2d:31:dc:bd:ab:a0:1e:05:9b:01:37:61:92:7b:
4c:c1:e3:7b:0b:3b:48:0d:eb:11:bf:b7:3d:4f:40:
88:d7:11:09:00:1a:00:95:a2:6b:be:c1:cb:d3:62:
c4:f1:ff:f0:95:67:ab:64:97:0c:cf:28:43:c0:35:
38:ac:ca:f7:16:03:d8:c2:e7:26:f2:60:19:e8:19:
37:71:ff:51:36:02:84:c5:0d:0d:2d:77:55:e9:d4:
fc:d1:91:d0:6a:6d:91:58:2b:80:d8:6f:e8:eb:85:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:8E:D5:7D:03:FE:0D:39:6C:AA:3A:BC:04:2F:56:84:9D:E8:D1
X509v3 Authority Key Identifier:
keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:16:8e:ba:3a:a1:85:5d:57:13:0f:20:db:e3:f9:ee:7c:0b:
0d:4a:d2:f3:05:91:83:9c:78:99:4b:59:15:df:c3:95:d7:d3:
14:24:dc:bb:26:58:7d:6a:02:0a:fb:c0:17:80:d5:01:48:1a:
ae:41:1b:d3:3c:29:ba:6e:e0:ff:73:60:16:18:95:74:6f:70:
b9:df:71:a4:b2:b8:c2:13:30:40:a1:35:68:3f:db:ef:b2:de:
cc:db:9b:07:16:12:15:38:2a:12:50:f8:19:b4:b3:76:40:f4:
74:7b:a6:10:01:b2:00:17:27:6d:65:2b:d9:df:14:0e:1b:c4:
bc:89:00:17:76:60:40:a3:99:f6:ed:37:3d:16:44:43:66:a1:
dc:1f:42:9e:a5:3a:73:a8:94:44:92:2f:e8:23:bf:47:3b:7f:
9d:b7:11:6d:f6:e7:d4:4e:1a:33:ee:66:b2:b0:04:28:f8:84:
39:76:55:f2:36:cc:ce:ce:33:ff:ff:88:cd:42:ea:c3:3b:44:
7c:9f:6a:51:78:7c:40:7b:4e:81:11:bb:16:04:71:66:b5:bb:
ed:cb:8f:3c:e0:b7:fb:61:aa:fd:be:33:91:ba:e7:2e:8c:b3:
0f:af:24:19:b6:5d:11:42:ff:1c:c3:6e:12:dc:1b:d9:d5:69:
9e:67:f3:53
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkZGMTdBRjExMC8GA1UEBRMoOUNENDEzOTZBQkNGOUJCOUVGRjZFMjY4NTUzMjRG
ODNDNTlEQzY5QTAeFw0yNTAzMjkwMTU4NDZaFw0yNTAzMzEwMTU4NDZaMBgxFjAU
BgNVBAMTDTY3ZTc1M2Q2LWQyOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD8hS6V7J6yDvxCULlcIoCGjFKuLicIgRfPwrRFmM4PqNiPJBANEhjyEz5
W9jSsHAEsZcXgffad0tldzH/9rcVOFf/v2O50AT7tqP8i+lQ6N9AQucUfKmJaC6m
d3iKyaMnSZEp9cERB9Spi6O0CO0jQ2v8q5U1IoUr2tp3H4E7HVK+X+HeUjBKFOGL
EiskV+eoqoq+8c0tMdy9q6AeBZsBN2GSe0zB43sLO0gN6xG/tz1PQIjXEQkAGgCV
omu+wcvTYsTx//CVZ6tklwzPKEPANTisyvcWA9jC5ybyYBnoGTdx/1E2AoTFDQ0t
d1Xp1PzRkdBqbZFYK4DYb+jrhSrjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGZqO
1X0D/g05bKo6vAQvVoSd6NEwHwYDVR0jBBgwFoAUnNQTlqvPm7nv9uJoVTJPg8Wd
xpowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGRjE3L0E0NENCQzdFMzMyMjExRUI5M0EyMTU3MUY4QUVBMjI4L25OUVRs
cXZQbTdudjl1Sm9WVEpQZzhXZHhwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25OUVRscXZQbTdudjl1Sm9WVEpQZzhXZHhwby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkZGMTcvQTQ0Q0JDN0UzMzIyMTFFQjkzQTIxNTcxRjhB
RUEyMjgvbk5RVGxxdlBtN252OXVKb1ZUSlBnOFdkeHBvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXFo66OqGFXVcTDyDb4/nufAsNStLz
BZGDnHiZS1kV38OV19MUJNy7Jlh9agIK+8AXgNUBSBquQRvTPCm6buD/c2AWGJV0
b3C533GksrjCEzBAoTVoP9vvst7M25sHFhIVOCoSUPgZtLN2QPR0e6YQAbIAFydt
ZSvZ3xQOG8S8iQAXdmBAo5n27Tc9FkRDZqHcH0KepTpzqJREki/oI79HO3+dtxFt
9ufUThoz7maysAQo+IQ5dlXyNszOzjP//4jNQurDO0R8n2pReHxAe06BEbsWBHFm
tbvty4884Lf7Yar9vjORuucujLMPryQZtl0RQv8cw24S3BvZ1WmeZ/NT
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:44:01 2025 by rpki-client