Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier: iuMSygR/oEvSR8iIDi8Smmblw+K+nGXYQDeGYL+yTR4=
Subject key identifier: 07:C9:17:19:30:E9:94:AC:91:B7:7C:7E:58:47:EB:06:A3:28:72:69
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial: 012C
Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number: 012C
Signing time: Sat 12 Apr 2025 03:03:01 +0000
Manifest this update: Sat 12 Apr 2025 03:03:01 +0000
Manifest next update: Mon 14 Apr 2025 03:03:01 +0000
Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: dznmabgER6PskMo0tEuWAxn9kOkgJ+hWncHu4M050Js=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Validity
Not Before: Apr 12 03:03:01 2025 GMT
Not After : Apr 14 03:03:01 2025 GMT
Subject: CN=67f9d7e5-ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:d5:58:67:ad:ad:e2:37:ac:71:a2:6b:f5:
4b:80:38:6a:e8:63:87:95:cd:3b:3e:44:b9:48:d6:
63:d1:48:03:c1:dc:db:91:6a:5d:d8:39:b9:05:1b:
80:d8:2c:de:82:40:f8:26:98:2f:1a:3b:2f:d9:1b:
1a:79:37:43:07:fb:bc:a6:2d:08:87:86:57:0d:03:
7c:40:90:a0:23:9f:95:b2:9f:98:ed:8a:38:d7:f5:
80:4f:a6:b1:2c:a1:a5:89:1d:c2:74:a2:61:e1:de:
ec:e1:5f:fb:50:f4:39:cb:48:b1:64:29:97:bd:7a:
57:0f:89:76:af:fd:b9:d9:76:97:96:b2:43:1d:8f:
c4:5d:83:63:f0:21:b0:30:6e:e3:9d:ad:2e:a7:51:
94:f8:53:73:bb:7a:95:eb:25:a6:f0:0b:66:5d:ab:
b7:96:ae:ea:75:70:b8:0d:17:36:bd:94:b5:19:3d:
87:f1:3c:af:e0:46:77:1a:af:24:cf:60:f1:e8:5d:
9c:91:d4:17:7a:e2:87:bf:9b:4b:9c:e5:4e:cf:23:
85:e1:23:94:10:88:31:87:f0:c8:43:38:1f:df:35:
19:2d:8e:33:1c:95:f0:9b:11:b6:ea:a5:69:63:df:
5f:b5:1c:98:c7:57:96:79:21:c7:96:32:b0:9a:e2:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C9:17:19:30:E9:94:AC:91:B7:7C:7E:58:47:EB:06:A3:28:72:69
X509v3 Authority Key Identifier:
keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:6a:99:aa:cf:30:33:d3:66:f4:f1:99:8f:5b:c4:fe:e9:b7:
0d:3a:50:41:1b:7d:50:0a:d3:92:b2:0d:92:25:ee:d8:1f:14:
b3:97:15:c5:bb:6e:f2:95:12:a4:aa:53:bd:9b:e7:68:bc:c2:
10:49:b4:6b:99:4b:b6:01:18:ee:29:64:e7:d2:bb:81:95:94:
a0:b5:14:06:96:ed:fa:ca:44:55:fd:c2:02:ae:a8:42:58:e6:
b0:1c:48:b0:f5:56:df:91:d8:bc:26:47:76:21:88:a9:74:24:
61:dd:22:a9:8a:73:53:36:54:2c:9b:a8:e3:2f:6b:88:1b:20:
97:8c:a4:8d:6c:fa:a3:17:fa:d4:ce:d4:99:33:2b:42:b0:2e:
7d:c7:a3:db:d1:8f:4c:34:f5:cd:70:59:ca:7d:f5:59:b0:37:
9d:71:e9:f8:9e:00:dd:17:97:5a:fb:10:50:ab:87:e6:ca:c0:
df:80:3c:62:7b:43:24:0f:6b:06:68:32:14:3b:88:4e:33:88:
73:c0:09:d4:5f:b3:ba:e5:80:ba:dd:07:82:89:fa:98:4e:b3:
23:99:1b:c6:47:5e:64:fc:0a:82:91:a1:86:0c:66:e3:db:67:
51:2c:95:60:06:8a:0d:01:9b:04:8b:9d:56:05:f1:5c:2d:b7:
c6:2e:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:40:17 2025 by rpki-client