Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
File: 98YIN8gMV8TbybsBYAgwPJT7oqk.mft (raw, json)
Hash identifier: vhM1bTGgge/QieYm4bFY6Pw8mEO9PIfMrsUuft56RzM=
Subject key identifier: 7E:3A:6A:C1:27:82:6E:62:17:3F:C2:8B:76:74:DD:59:02:40:6E:03
Authority key identifier: F7:C6:08:37:C8:0C:57:C4:DB:C9:BB:01:60:08:30:3C:94:FB:A2:A9
Certificate issuer: /CN=F363C4A6AF/serialNumber=F7C60837C80C57C4DBC9BB016008303C94FBA2A9
Certificate serial: 4D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
Manifest number: 4C
Signing time: Wed 05 Feb 2025 03:20:40 +0000
Manifest this update: Wed 05 Feb 2025 03:20:40 +0000
Manifest next update: Fri 07 Feb 2025 03:20:40 +0000
Files and hashes: 1: 98YIN8gMV8TbybsBYAgwPJT7oqk.crl (hash: GKEhGD7EIB6UBBIpw9I9CoJi2RFjCzEAW2NfPdBKkaU=)
2: 7DDDEAB0AD5111EFA8CB627A762E951A.roa (hash: dvM01EkOXh9FWTfE/7UMNp1k9IOWCI+KkRyoJeJVDAA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.crl
rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C4A6AF
Validity
Not Before: Feb 5 03:20:40 2025 GMT
Not After : Feb 7 03:20:40 2025 GMT
Subject: CN=67a2d908-c2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:c8:96:98:4a:89:a3:9d:fe:5f:3b:e3:44:
5a:c5:64:8f:bf:19:06:56:cc:4e:08:99:b0:36:59:
d9:f1:6d:2e:42:d3:19:29:9f:af:f1:6f:80:e9:45:
e5:fe:9b:3c:98:26:31:ec:eb:1e:08:6e:46:b3:b7:
04:00:01:3f:14:9e:0a:37:55:ef:84:75:ca:7c:0f:
6b:69:7e:87:e9:0a:ac:56:45:eb:a2:6e:5d:c3:06:
39:3d:a9:e6:fb:31:c0:6e:ad:14:d6:20:e2:eb:8c:
0d:20:46:cf:80:a4:5a:e4:49:e2:45:7f:05:ee:6c:
cd:5e:92:ea:98:d7:ad:e4:c1:8f:3d:f6:f0:5d:f9:
81:21:26:8b:cb:9f:d1:64:1e:c4:35:3e:41:f6:49:
2b:03:00:89:e7:e5:22:93:15:88:aa:4a:58:26:87:
0c:a1:6d:e6:a8:2f:49:63:23:5f:59:7c:39:ef:77:
6f:17:da:1c:ea:e0:b3:fa:fb:6f:a1:09:29:1e:91:
53:b3:6a:ba:52:63:74:15:24:a1:0b:4b:7f:ed:c3:
93:2f:40:05:32:8d:95:3a:08:5a:c9:48:47:3a:29:
83:7a:c8:11:f6:8b:3c:4e:53:7a:72:60:21:86:85:
6d:67:72:0e:f7:09:ac:eb:50:1b:75:c2:a4:fa:4c:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:6A:C1:27:82:6E:62:17:3F:C2:8B:76:74:DD:59:02:40:6E:03
X509v3 Authority Key Identifier:
keyid:F7:C6:08:37:C8:0C:57:C4:DB:C9:BB:01:60:08:30:3C:94:FB:A2:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/98YIN8gMV8TbybsBYAgwPJT7oqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C4A6/82599DF6AD5011EFB697D675762E951A/98YIN8gMV8TbybsBYAgwPJT7oqk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:12:64:9d:b8:a4:62:26:49:08:85:80:37:f7:e8:7a:f3:ce:
1a:74:67:90:bc:a5:f9:62:54:ac:3a:54:43:be:67:ef:9d:16:
b2:cc:a8:ca:d5:cc:cb:28:bc:da:54:2c:7e:f3:2e:3c:33:b0:
19:20:fa:f5:c9:65:c6:fa:52:77:e0:34:dd:33:3b:33:13:46:
6b:fd:7b:d6:25:50:22:d3:e6:29:d8:b9:44:29:4c:3c:66:1d:
b8:72:20:e6:0c:d8:da:12:74:c4:7e:03:d8:9a:a8:74:8e:c1:
01:c2:be:ea:ea:68:de:5a:90:ae:ed:ac:47:a9:7f:29:59:31:
06:17:d7:d8:4a:a6:6f:6c:46:b6:d9:0f:a5:8a:90:3c:b5:64:
83:e4:04:4b:d8:a7:5b:9a:ba:4b:7b:89:c6:7b:93:6b:44:a0:
cd:c0:6b:db:16:4a:a0:df:5c:a2:11:68:4a:a8:c5:82:d4:2b:
85:05:70:e6:d1:57:50:20:fc:e7:f6:57:ba:a8:9a:5d:a8:2d:
b7:5c:7a:71:00:d6:f8:bc:17:0d:08:d6:31:a9:0a:e6:87:d0:
d9:15:54:b7:4a:a3:0e:d3:d3:bd:59:ef:b2:25:8a:fa:e7:7e:
05:a8:59:59:dd:79:8a:72:aa:dc:77:73:4c:58:b6:62:ff:4d:
c6:e2:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:01:20 2025 by rpki-client