Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File: C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier: c0lcv5L8aYv9AzRvsWBDXVKmYr0BBQCbLuxtC746b0M=
Subject key identifier: 1B:E9:1F:5D:28:E4:D3:82:83:2F:83:46:3B:B4:1E:83:9D:12:9D:B4
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer: /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial: 073D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number: 0739
Signing time: Mon 07 Apr 2025 03:54:24 +0000
Manifest this update: Mon 07 Apr 2025 03:54:23 +0000
Manifest next update: Wed 09 Apr 2025 03:54:23 +0000
Files and hashes: 1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: F8GhWj9CmEXu3p4gZRkwC2WnMzZX5ToNVN1qkbHCVk4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645501AF
Validity
Not Before: Apr 7 03:54:23 2025 GMT
Not After : Apr 9 03:54:23 2025 GMT
Subject: CN=67f34c70-4623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:f9:5a:a3:e4:76:ff:21:f2:cf:c4:c8:90:
00:90:9a:47:0e:a3:33:80:c9:29:d7:b5:2f:65:c7:
9e:ef:1a:69:d6:8f:b1:71:ee:74:67:87:c5:dc:f1:
a3:80:0b:b6:53:d9:f2:e0:df:46:cf:48:cf:f9:8b:
40:33:ad:91:f8:f0:d1:40:34:29:2b:67:bc:c5:5f:
d6:fd:0d:4f:91:56:48:fc:28:b5:cc:9c:af:c0:48:
d4:16:ae:a1:9c:c4:b0:6d:37:9f:ed:9b:97:48:e8:
d2:b9:e8:1f:87:0b:b3:32:0f:ed:31:98:5d:bb:f0:
d3:06:a3:b2:2f:48:a7:84:02:93:5a:d5:d8:dc:1d:
b0:c1:7d:8c:d1:8b:3b:dd:7b:aa:f6:22:9e:a2:89:
ff:5f:18:b3:80:af:ad:8b:f2:5c:fd:d3:0f:ad:3a:
63:90:f2:b5:d7:95:07:d9:e8:ba:c3:bb:a3:46:a9:
52:1e:2e:ed:e6:54:cf:3e:7f:85:6c:34:43:d9:c2:
25:91:91:c7:4a:f8:10:5c:59:92:0f:cb:26:b9:88:
26:18:9a:23:c4:2f:0e:c8:b8:df:d6:70:f4:f1:73:
09:c1:d8:12:66:81:92:76:e0:ae:a9:c2:1d:63:87:
b4:18:c3:c4:d1:f3:f8:13:e2:ea:e5:c7:42:2b:27:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:1F:5D:28:E4:D3:82:83:2F:83:46:3B:B4:1E:83:9D:12:9D:B4
X509v3 Authority Key Identifier:
keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:bd:ab:06:c3:d3:00:44:97:21:3f:a5:40:87:11:3c:dc:
f1:2d:e5:68:98:bf:f3:0c:6c:e6:f5:2c:27:ac:b2:af:79:28:
d9:c1:6c:f1:27:fb:9d:78:57:d8:90:a2:21:dc:d9:22:06:ad:
94:1e:ef:93:05:b6:c0:99:0a:09:aa:f6:e4:b7:90:13:cd:ef:
3a:a3:72:c3:7a:39:52:e6:da:09:2e:22:b5:3f:39:53:47:e5:
35:f4:57:d8:75:da:f6:8f:ed:4f:ab:ce:8f:de:ba:e2:8c:ff:
93:86:09:8d:ff:b3:38:9a:f8:ba:4c:bf:b5:08:3c:cd:aa:a8:
ff:4c:c7:e9:f2:37:80:e6:0f:3b:13:24:12:ba:d8:83:29:07:
7c:f1:c8:af:50:28:30:13:06:11:2c:ae:b4:dd:ae:59:3d:96:
bd:8e:72:97:81:fc:64:2b:7d:73:0d:f8:33:fe:75:05:20:83:
9d:b7:73:bb:65:64:54:17:d9:5b:26:de:ab:4c:23:36:74:c2:
f3:12:35:dc:5c:fc:db:fe:c3:d6:a4:75:5e:74:ba:e4:c0:c0:
50:26:26:dc:8e:c9:2e:b1:f0:95:50:ef:6f:0f:24:12:e4:9e:
28:a9:63:da:9d:8a:bd:6d:a3:c2:ee:10:67:04:32:be:51:50:
79:b4:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:24 2025 by rpki-client