Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
File: Ho4GD8DqacvW-tSkvG7THSnI5Go.mft (raw, json)
Hash identifier: C3ypHatXXH1bG/vyZ3sXxAMsBz6h2mJP1zqkovpWZ24=
Subject key identifier: 3C:2B:30:F5:8B:B0:BD:B2:FB:93:DB:0D:B7:A2:D4:73:AA:E6:E0:CB
Authority key identifier: 1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
Certificate issuer: /CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
Certificate serial: 0446
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
Manifest number: 0445
Signing time: Thu 03 Apr 2025 02:01:46 +0000
Manifest this update: Thu 03 Apr 2025 02:01:45 +0000
Manifest next update: Sat 05 Apr 2025 02:01:45 +0000
Files and hashes: 1: Ho4GD8DqacvW-tSkvG7THSnI5Go.crl (hash: GCGEPhmzm5z+kRx1e3JsBOFrOT4nbu2NyvPbzrzkvRk=)
2: 5C02D460D03F11EC9A4EAA89F1222468.roa (hash: F/9p11nL0wbGpBdREAn2qkEHpPq+G048kxKZo17dwn4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl
rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094 (0x446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363D435AF
Validity
Not Before: Apr 3 02:01:45 2025 GMT
Not After : Apr 5 02:01:45 2025 GMT
Subject: CN=67edec0a-503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:74:20:05:d9:c2:3d:f2:31:e9:e2:ee:71:
36:ce:7d:35:e5:95:b9:c7:b4:18:26:d3:f2:fe:3b:
e2:ce:23:9c:35:9b:1d:96:5a:17:1e:a4:52:ae:f8:
58:b3:21:8f:5a:6f:4a:95:ac:4b:c1:55:ec:94:d3:
ba:cb:80:a0:ea:4c:84:04:5d:57:05:45:bc:91:20:
df:ff:70:02:3e:9b:7f:c7:c1:2c:d1:df:a3:0e:dc:
2f:c6:2d:88:ee:f5:3d:de:d4:7e:1a:c7:09:eb:27:
86:23:70:eb:53:d2:8d:3f:8d:db:f9:fa:a7:05:a4:
b5:d2:5e:c8:54:b8:ad:84:b6:73:99:f9:bb:aa:53:
81:19:ec:79:75:72:6d:98:b6:0a:20:22:8d:58:16:
93:60:e4:4f:47:ef:41:36:6c:dc:95:e1:32:ca:43:
a4:34:e0:3a:d8:ab:ad:2d:9e:c9:28:36:28:2f:9c:
0a:07:dc:09:72:9c:b6:a2:51:9c:44:8e:6e:b2:59:
9c:95:ef:1d:a2:53:40:46:ec:b0:18:ec:40:80:37:
d0:05:d3:ae:ff:8a:0d:c4:f5:87:c9:78:68:7c:ee:
f2:0d:14:29:4b:b9:91:c3:e6:78:91:95:81:28:45:
40:41:81:03:28:0f:df:a5:5a:4e:ef:21:c3:2d:52:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:30:F5:8B:B0:BD:B2:FB:93:DB:0D:B7:A2:D4:73:AA:E6:E0:CB
X509v3 Authority Key Identifier:
keyid:1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:41:96:19:57:61:e5:fb:8d:0f:71:bf:dc:46:6f:43:52:30:
4b:36:79:4b:f5:3d:dc:e8:d5:90:ea:d3:58:ff:5b:75:62:8d:
d8:8e:95:a8:be:ba:5f:91:36:29:79:2a:d9:0f:a8:54:00:6b:
69:60:f0:69:80:20:c9:4c:45:b4:68:27:4d:ff:29:0a:c6:66:
c0:9e:be:4d:5e:fa:a2:fc:2a:08:7d:75:ec:2c:a6:3e:0e:32:
5f:b4:ab:c8:7d:f0:20:b3:29:6d:f2:38:cf:df:7d:78:7e:fd:
a7:06:98:20:62:2e:90:dc:dc:74:4e:78:c3:6e:98:7e:0d:53:
cf:2a:de:88:0f:a4:50:7d:e4:69:ca:5e:35:c9:81:01:fe:1f:
ca:22:4f:d9:0f:95:7a:1a:36:b8:1d:68:55:db:48:dd:2e:17:
01:54:8d:de:d8:a7:ba:0f:45:fd:37:d0:11:40:0f:9c:8a:7a:
ec:34:ca:66:83:4f:b5:7a:44:9e:70:9e:ee:d7:60:06:a5:b1:
64:1f:02:86:ba:f7:be:76:8f:9e:da:aa:54:6d:ef:b6:0e:b8:
25:c6:51:27:48:77:b6:20:47:71:6e:7a:17:9a:09:f1:b1:74:
d2:da:70:06:73:68:63:7c:76:44:8e:fe:82:10:65:a9:9b:95:
b5:d7:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:25 2025 by rpki-client