Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File: xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier: Z3xY9bkDX0tQ2DfErNLyWZ6Imfqvn7Ck+FXDN6C2AT8=
Subject key identifier: F3:04:B1:88:B6:03:A5:19:BE:BE:AB:0B:68:34:F3:D2:86:44:91:D0
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer: /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial: 0458
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number: 0458
Signing time: Thu 03 Apr 2025 02:00:47 +0000
Manifest this update: Thu 03 Apr 2025 02:00:47 +0000
Manifest next update: Sat 05 Apr 2025 02:00:47 +0000
Files and hashes: 1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: 5DAUcw4IhE56AYzmfXoW/WrUoPxgKhApxBern77oPRI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642C0FAF
Validity
Not Before: Apr 3 02:00:47 2025 GMT
Not After : Apr 5 02:00:47 2025 GMT
Subject: CN=67edebcf-406e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:14:6a:49:9f:9f:f1:4e:53:b1:2d:fd:d2:
66:7f:22:b7:08:a8:6d:a2:49:1c:e8:52:3f:db:db:
ad:6d:c3:0d:ba:7d:6f:4f:a2:12:2f:9f:a3:78:dd:
72:31:34:39:75:32:c0:70:57:f5:ef:84:f4:19:74:
ba:60:96:cd:f5:47:35:27:06:9a:c6:76:91:62:7b:
ea:c1:86:f4:5b:96:72:24:d5:4c:09:b3:3d:57:9c:
5b:12:b6:eb:99:c8:53:7a:81:3b:7c:4a:92:bf:5e:
0b:f7:13:c0:9e:5d:20:a9:62:b1:b6:27:83:e8:19:
b0:32:90:55:5d:3f:47:4e:c6:f7:67:60:bb:ff:b1:
b2:8d:22:3e:2f:10:83:90:d4:6b:a0:93:1a:79:a8:
8d:ba:ed:42:34:70:05:ca:d9:a8:f4:23:c0:71:ac:
13:e4:7e:1e:da:92:5a:cd:d6:20:72:e2:ea:0b:0b:
3f:f0:11:ef:35:24:f5:1e:89:bf:80:f3:e3:ed:f5:
f9:af:fa:50:b9:cb:9d:12:4f:c3:96:dd:e8:42:ce:
55:85:b0:af:65:66:e0:6e:b4:3b:41:ca:18:89:ac:
15:56:e7:69:66:57:70:fb:c1:ed:00:7d:c1:b0:44:
fa:8c:15:8f:db:3b:3f:0b:db:e1:31:03:37:18:2f:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:B1:88:B6:03:A5:19:BE:BE:AB:0B:68:34:F3:D2:86:44:91:D0
X509v3 Authority Key Identifier:
keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:5a:24:7e:a4:20:93:b2:74:cd:85:80:4e:01:0c:17:29:51:
fb:a1:25:3b:09:1c:54:96:76:33:3b:e4:a4:42:5c:94:ba:7b:
c2:b9:c9:21:1b:41:95:32:da:de:5a:62:3e:b8:d8:29:ee:c7:
db:20:ed:e8:fc:7e:84:e2:13:5f:8f:34:83:a5:c6:0b:9a:88:
56:8c:dd:99:c6:83:f8:97:68:d8:86:83:cb:73:89:32:31:c4:
c4:66:42:61:90:ba:96:2a:8d:19:2a:88:6f:21:26:e5:47:7b:
f9:d6:12:ae:97:e1:88:b9:c0:af:2a:4f:44:65:f1:72:e9:2e:
d8:58:7e:0a:a9:05:57:cc:07:4c:55:af:f7:8e:3e:56:15:08:
e6:28:49:a7:f2:7c:a2:8b:fc:04:dd:0c:59:b3:d8:83:2a:18:
0d:5c:71:b6:68:80:2f:41:1d:df:15:a5:be:d3:0d:e0:98:c2:
b4:09:b1:53:c4:13:72:8a:c6:52:1f:8a:95:96:89:fd:c7:94:
53:39:e8:6b:50:77:20:a8:be:45:1d:1b:d9:b1:81:fd:10:6e:
c8:ec:98:fd:5d:0d:cf:47:50:9c:48:7d:f4:7c:07:ca:d3:b8:
fe:c2:b5:db:07:2b:18:93:5b:88:76:fe:cf:94:28:93:9b:ed:
01:0b:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:44:02 2025 by rpki-client