Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File: NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier: 4Bm0DC5AVY0loOkezryXMp3v8NZT3PluziO+qpVJv/E=
Subject key identifier: 3E:AC:DA:31:DA:D0:27:D6:41:F3:DD:C5:7B:76:B8:D8:B5:60:1E:BC
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer: /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial: 054C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number: 054B
Signing time: Thu 03 Apr 2025 01:48:52 +0000
Manifest this update: Thu 03 Apr 2025 01:48:52 +0000
Manifest next update: Sat 05 Apr 2025 01:48:52 +0000
Files and hashes: 1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: QPayd5VYkWg11KLHPs6XPIu6QrqMnrTVMBg6HYl7y5I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633396AF
Validity
Not Before: Apr 3 01:48:52 2025 GMT
Not After : Apr 5 01:48:52 2025 GMT
Subject: CN=67ede904-95af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:0f:c0:78:e9:0f:49:35:82:f9:ba:9c:ff:
2a:37:66:56:00:80:7e:bb:b5:40:26:06:49:7f:ff:
03:d1:03:62:c2:37:d3:09:2a:a2:81:f1:ee:ec:ca:
e6:5c:bf:f9:0f:17:09:b7:a9:88:06:15:f6:d6:46:
03:49:5e:5f:9b:5b:94:78:27:90:8f:de:d1:18:2a:
1a:d1:36:0d:55:52:73:9b:8a:73:66:9d:25:fc:0b:
e6:e6:d5:55:12:2b:70:05:f8:e8:11:07:ee:29:17:
79:af:10:ab:8f:ca:01:de:db:62:48:c7:a2:04:27:
ab:07:ac:f4:6a:ad:57:76:f8:3e:e6:17:f1:1a:6a:
75:ef:f0:1d:11:53:59:3b:74:d9:bc:39:5e:9b:bf:
c9:9f:4a:30:79:28:27:a2:48:6d:9f:cb:7d:c1:bc:
0f:c5:57:fa:de:c2:72:a5:2f:49:28:35:a6:0b:c6:
1d:ec:4b:9f:95:b5:a0:d9:0d:f2:f3:e6:f3:a6:91:
89:64:18:c1:8a:2d:be:9c:b8:f0:ae:d9:c5:b9:1e:
4f:7c:70:4f:9c:23:d8:63:36:e4:21:43:67:0b:81:
79:65:d4:81:7a:e8:bf:9e:ed:1b:b5:5f:cb:3a:47:
53:78:62:2d:63:51:53:56:69:58:7c:bc:66:10:2a:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:DA:31:DA:D0:27:D6:41:F3:DD:C5:7B:76:B8:D8:B5:60:1E:BC
X509v3 Authority Key Identifier:
keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:bc:02:fa:91:dd:9c:3f:5e:98:36:d2:ab:02:9d:ca:e8:
ec:27:a9:9b:d5:5f:16:3c:55:ee:e0:77:f7:d3:0e:1a:42:f8:
40:f3:bd:f8:00:75:a1:a4:5d:93:5e:8a:b0:a4:c9:84:79:ee:
63:b4:0f:0d:12:0c:53:5a:f9:78:c1:e7:a9:d3:3a:a8:f8:ab:
19:7d:47:6a:75:a5:32:d3:42:c1:59:31:99:80:26:0d:74:53:
b1:9d:2b:d6:c8:ca:2a:45:88:ae:3c:27:18:1d:29:fd:a8:96:
62:99:f6:33:cf:18:8b:50:d3:6a:26:70:1f:c3:0d:47:a9:28:
36:bc:e0:73:18:f3:af:b7:1b:d5:5a:02:bf:c3:e5:4e:a1:b9:
df:31:5f:2e:e8:ea:f8:fb:d5:fb:2e:b0:da:7e:40:55:db:cf:
06:af:a6:1b:6a:f2:d9:ba:de:7a:bc:22:a6:af:9b:da:01:cc:
fb:a9:f4:3c:8b:98:7e:28:80:95:0d:35:26:e1:42:ed:a8:50:
3c:fb:69:10:c6:17:de:3e:ca:a4:8f:66:ea:21:06:be:4f:74:
df:c1:92:51:06:7e:a6:da:c5:cc:c8:aa:67:f0:8c:88:f9:22:
1f:a5:49:44:97:86:ca:e8:94:b1:79:3b:b4:87:0c:35:04:6a:
3a:fe:0d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:49:04 2025 by rpki-client