Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
File: fB-8tURrPURYdKAjdA4kfWIwI10.mft (raw, json)
Hash identifier: MwMXDBnppif7ubxXSGHBRknyRjAHwgdjBowikG2Xy/o=
Subject key identifier: 2F:BD:23:A6:04:D8:51:CA:64:88:99:2D:7F:38:9C:AC:F6:6C:B9:BD
Authority key identifier: 7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
Certificate issuer: /CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Certificate serial: D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
Manifest number: D6
Signing time: Sun 16 Feb 2025 03:09:09 +0000
Manifest this update: Sun 16 Feb 2025 03:09:09 +0000
Manifest next update: Tue 18 Feb 2025 03:09:09 +0000
Files and hashes: 1: fB-8tURrPURYdKAjdA4kfWIwI10.crl (hash: atCONl547XqTcAHXMelLLuvK9pWPueHb/QdtO06BFz4=)
2: 69176EDA54B411EF85302264762E951A.roa (hash: aXC5ZcMaKvppj9wFu7iH9bADIONa5jeymvvlcxe0MZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C154AF
Validity
Not Before: Feb 16 03:09:09 2025 GMT
Not After : Feb 18 03:09:09 2025 GMT
Subject: CN=67b156d5-0d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:28:dd:0c:dc:53:09:b5:cf:98:6e:89:69:
aa:ce:b5:31:a6:d9:6c:b0:f3:ba:39:b0:8f:12:4c:
f9:52:b3:d2:55:de:ef:f4:5b:8b:1d:30:ed:cf:93:
d6:b5:2c:ff:22:9f:51:fc:0f:2b:e8:c0:51:91:b8:
5e:09:90:73:b4:2c:25:31:45:bc:e4:75:8b:a4:4e:
f1:57:65:b1:9a:4b:1b:92:0c:71:07:3d:02:e6:d5:
bb:49:57:67:a1:66:b7:eb:f8:c7:3d:16:d4:55:f3:
99:f0:3b:e7:0d:a4:84:33:96:0c:56:b0:92:05:89:
2c:72:b0:83:35:ac:24:1c:55:0d:3b:35:c4:bd:95:
b0:92:6f:30:c6:be:e4:d2:f4:1e:e0:6d:89:95:1f:
f6:64:9f:82:04:5d:bf:5b:df:a2:b8:40:d7:f2:37:
5b:79:b1:7b:0f:58:97:b4:0e:e9:ee:e4:24:4e:70:
ba:19:34:a2:5f:a5:ce:03:8d:00:c5:6b:3f:dc:85:
af:84:7c:0a:1b:af:30:b8:9d:57:7d:b0:7a:49:93:
cf:7b:1f:fd:26:c8:f1:04:2d:a0:ca:39:8e:ae:82:
a5:78:a9:a9:66:e5:83:ca:21:5e:ce:36:23:56:fe:
63:be:49:b0:c8:c8:4f:19:61:73:a9:81:4a:3c:0a:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BD:23:A6:04:D8:51:CA:64:88:99:2D:7F:38:9C:AC:F6:6C:B9:BD
X509v3 Authority Key Identifier:
keyid:7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8e:b0:0c:13:bd:ae:8c:49:ac:9e:7d:35:96:ee:d9:43:a8:
f8:0c:bf:32:26:1b:1c:a3:66:a2:b6:d0:d9:30:a7:fc:83:33:
8d:dc:d1:70:0f:fc:fb:2d:27:85:7e:1e:13:ef:76:31:31:39:
61:44:0e:64:cf:a8:ea:47:f9:55:bf:c4:9d:d9:b0:bd:a4:76:
2c:be:eb:3a:e8:2c:70:17:c8:98:2c:00:3c:c9:88:fa:a9:b7:
88:f0:50:33:99:62:7e:95:00:ea:98:c3:7c:ed:ea:ad:b1:58:
d7:71:1d:c0:65:6a:62:26:a2:fc:ad:9b:98:86:83:90:35:32:
73:c8:7c:6b:dc:60:b0:08:f8:06:23:6d:56:8f:92:ad:3a:ae:
db:36:c3:cd:0c:bc:96:ee:1a:aa:b6:98:f2:c9:ff:43:98:c9:
96:8e:77:a1:3e:da:98:1b:86:53:ba:19:89:74:35:47:85:13:
24:ae:c0:c3:01:d2:64:ac:db:7f:76:a9:6a:dd:c3:ec:82:b5:
a8:6e:a8:1b:51:97:40:11:a3:55:f2:df:f0:b6:81:a1:e8:90:
c7:e6:55:31:d8:74:42:53:d9:08:46:8d:de:ad:04:76:9d:62:
0e:cf:29:ad:19:8d:51:b9:53:ae:a6:9c:fe:1d:d3:e6:72:b9:
25:f0:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:24 2025 by rpki-client