Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File: NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier: ARFVKK47X2x6EaSb9rt9IJdOPpkDCy6a6zOLozxmqaQ=
Subject key identifier: 09:88:DF:CE:53:36:98:DD:11:74:1E:EE:2F:B6:79:CF:F3:D7:5E:20
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer: /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial: 04C5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number: 04C4
Signing time: Sun 24 Nov 2024 01:35:50 +0000
Manifest this update: Sun 24 Nov 2024 01:35:50 +0000
Manifest next update: Tue 26 Nov 2024 01:35:50 +0000
Files and hashes: 1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: pZYOV4+qdzyrQwDerDPQKW3zsMc1/W5naIRfUSYJMRE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Validity
Not Before: Nov 24 01:35:50 2024 GMT
Not After : Nov 26 01:35:50 2024 GMT
Subject: CN=674282f6-3847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e7:e5:2d:9a:b1:42:07:03:75:c5:05:9b:c8:
27:71:24:ed:46:a4:0d:05:06:47:71:b7:63:9b:f2:
32:c1:98:f8:f1:3e:92:17:04:e9:1c:a8:36:44:48:
0b:d1:00:e1:df:94:3f:14:8d:ab:e5:62:5d:8f:39:
11:56:bd:60:39:66:2f:55:43:27:ea:ae:d9:2e:f9:
6a:58:fc:f4:53:46:9f:37:d8:39:28:48:58:f9:6f:
f4:ef:90:c4:d4:de:78:ba:51:b0:5e:09:68:31:58:
be:98:4b:69:9f:1d:0a:07:27:ec:22:75:d8:ef:91:
e6:68:c1:1c:c9:33:73:5d:9b:e9:c9:ed:3d:22:5f:
d7:ca:13:41:63:4b:5d:5c:66:e6:19:6d:9c:ba:1a:
96:29:ea:47:74:62:5b:9c:c8:24:e4:05:1a:8f:54:
5c:ec:12:4e:ab:c0:c2:83:55:a8:aa:60:14:ab:21:
f0:54:51:f4:a9:77:27:3f:4b:39:50:ee:84:db:b4:
8f:9a:c5:cb:bf:ca:b7:e2:f1:f8:a8:a3:39:3f:58:
ca:fe:3b:bd:d0:6b:8c:dc:83:1c:74:d8:ce:9b:c1:
57:5c:02:0d:1f:aa:66:d8:12:1e:92:33:2a:99:c8:
41:1d:1c:aa:5e:9b:43:48:3f:fc:1d:13:64:b8:3f:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:DF:CE:53:36:98:DD:11:74:1E:EE:2F:B6:79:CF:F3:D7:5E:20
X509v3 Authority Key Identifier:
keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:eb:12:d8:be:60:93:6d:d0:af:7e:b4:67:e6:94:13:c0:ec:
8c:ab:f1:4a:03:38:57:38:2b:25:2e:f5:d7:0a:d4:5f:0f:d2:
49:dc:2c:ee:f8:09:1a:86:ee:5b:29:f4:7b:e6:1e:c2:88:81:
73:8a:f3:57:70:b1:07:9e:6c:c0:66:51:58:1b:38:51:ad:08:
21:14:27:e0:04:60:17:9c:0c:01:f9:56:58:ca:6e:5c:fc:79:
bb:d0:ce:d6:93:fa:51:70:c8:98:87:82:e4:5c:cf:d1:e7:1d:
bf:f3:6f:05:72:9c:ab:9a:a3:d1:60:84:6d:04:b3:14:78:8d:
7b:dd:8f:71:be:06:cd:f5:ac:45:84:10:b6:3f:86:e4:9a:8b:
e8:58:42:a7:df:b1:bc:b9:14:5e:82:6e:39:1b:e3:b8:38:4b:
c7:1c:59:8f:0f:0e:96:b3:4f:ac:25:82:83:4a:a1:9e:e6:5a:
a6:a6:6e:76:0b:15:e5:fe:37:bc:be:f2:f0:ef:3d:e8:35:54:
3f:44:6c:b5:c8:3e:a0:7f:2e:bf:6d:a4:92:70:a7:84:d2:29:
58:e3:12:fa:38:29:93:d2:2f:07:f9:d1:a5:15:f9:13:67:7d:
47:2a:60:a9:0c:87:e3:bd:76:30:26:0f:59:3e:43:48:7a:f0:
9c:65:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:13 2024 by rpki-client on console-fra.rpki-client.org