Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
File: Gui5Af04SDp0-NI1YM3fc7TRUGM.mft (raw, json)
Hash identifier: qaKb2jbudKSaJbNQId128s//YUwPPpqdx6q0rYlsh6M=
Subject key identifier: 70:44:8E:23:18:20:59:E6:6C:69:D1:29:80:E5:B9:70:D0:CC:5B:1E
Authority key identifier: 1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63
Certificate issuer: /CN=F3644574AF/serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
Certificate serial: CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
Manifest number: CB
Signing time: Thu 03 Apr 2025 03:15:00 +0000
Manifest this update: Thu 03 Apr 2025 03:14:59 +0000
Manifest next update: Sat 05 Apr 2025 03:14:59 +0000
Files and hashes: 1: Gui5Af04SDp0-NI1YM3fc7TRUGM.crl (hash: PpM3qTRdDDrosK6iEutcwmbZQeAD7noDSiKWJZJxbiY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644574AF
Validity
Not Before: Apr 3 03:14:59 2025 GMT
Not After : Apr 5 03:14:59 2025 GMT
Subject: CN=67edfd34-c2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:fb:07:63:f1:66:bb:76:f7:12:1b:c6:44:
07:e9:20:0a:ed:46:51:b3:32:2a:1e:c6:d4:ea:b4:
1d:1c:f5:c7:82:65:33:8e:ba:ce:4b:20:de:d4:49:
e4:c8:77:de:00:86:6b:c2:8b:c1:d7:5d:da:1a:d7:
ac:2a:86:32:0c:31:20:37:f4:c2:44:ca:86:41:39:
f2:8e:c4:fb:04:98:ea:d5:a5:09:11:05:c1:6e:85:
1f:64:9d:cb:2b:c6:88:61:79:01:c2:b2:d3:69:b4:
47:54:ce:e4:3e:84:02:a1:f5:4d:32:0c:a9:1d:18:
b6:66:8d:40:64:18:ad:4f:cd:00:f8:ae:a8:0a:1b:
3e:49:32:11:97:91:33:92:ca:65:0a:7a:fc:10:5d:
a3:50:21:f7:5b:93:53:7f:a8:e8:f6:d7:78:71:0d:
53:58:d1:af:3d:8d:bd:6f:1b:87:ae:e3:74:f4:cb:
86:b6:a1:a8:96:2a:a8:41:50:12:b9:dc:1c:00:a8:
54:b0:cd:d1:0d:1e:b6:a7:a6:0b:5a:a4:4c:c8:67:
7b:14:41:d3:d2:77:ce:f3:d3:22:5d:93:5a:57:f8:
02:78:90:af:7a:76:85:43:ea:77:68:6c:c9:20:84:
4e:d7:40:6f:49:68:e6:a6:9e:f5:4c:e4:66:a8:8a:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:8E:23:18:20:59:E6:6C:69:D1:29:80:E5:B9:70:D0:CC:5B:1E
X509v3 Authority Key Identifier:
keyid:1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5d:d2:6e:f3:1d:52:a5:a9:22:00:c1:b2:3b:a5:1c:6c:63:
52:58:02:39:7e:18:c3:ac:f1:33:86:b4:d0:66:90:9f:da:79:
7d:93:35:77:f2:6d:c5:d3:65:b2:e2:d2:0b:9c:a3:ee:db:f6:
69:90:60:26:90:66:43:f3:85:71:9d:58:f0:8f:2f:b4:5c:69:
b4:e3:fd:4e:d3:40:38:85:57:58:4f:c9:a9:cf:d1:b4:24:39:
71:04:a5:44:8e:0f:a1:9b:3e:c5:37:65:42:85:a4:3a:85:09:
e2:49:b0:61:a3:e4:cd:38:f9:10:cb:1e:e7:38:ea:20:ac:c3:
65:e8:9d:ad:e1:8a:57:2b:72:61:50:28:7e:58:70:6e:2e:1e:
7f:c3:b9:41:b2:bc:cb:45:58:67:ec:43:77:b9:6d:87:23:65:
2e:af:a0:c4:06:9f:dd:b6:96:42:c8:40:45:8a:c6:2d:0b:aa:
ce:a3:02:30:53:27:33:89:1b:6c:ac:aa:61:d1:bc:42:4f:e3:
84:1b:36:de:90:9d:97:b9:92:a3:79:01:94:af:16:cc:04:b7:
2b:4c:d2:6e:cf:22:76:a9:89:05:b5:91:4d:5d:3c:4f:77:53:
91:57:d8:ac:e2:28:0e:68:d6:f6:d5:ee:3b:d9:59:bb:d7:b7:
00:bb:9c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:39:34 2025 by rpki-client