Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: i21e+u7m4XZwWjYX9ivQf1clKrRqor64tPUR8FhM4TA=
Subject key identifier: 17:1C:C0:1C:74:4A:AB:E6:34:EC:A0:22:5E:55:EB:A6:87:42:B4:A2
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 06D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 06D2
Signing time: Sat 07 Jun 2025 02:03:53 +0000
Manifest this update: Sat 07 Jun 2025 02:03:53 +0000
Manifest next update: Mon 09 Jun 2025 02:03:53 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: vNZWoQsDtV/znzx8zhSmx/dwQWuZlJwr8vKaLK3aFx0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 02:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746 (0x6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: Jun 7 02:03:53 2025 GMT
Not After : Jun 9 02:03:53 2025 GMT
Subject: CN=68439e09-ea89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:69:e5:ef:f6:1a:8b:b6:46:9e:6d:03:39:
93:2c:75:49:b8:bd:c7:55:fc:20:a8:b4:39:07:ac:
36:fb:d4:ae:df:bf:93:83:b7:27:01:f0:6d:c4:88:
2a:9e:db:7c:ea:d8:83:04:ad:24:ab:d9:00:10:6b:
d5:ce:c1:c9:83:8a:8a:d5:7c:60:02:d9:67:f1:9a:
a6:dd:0b:15:b5:e7:16:f1:dd:b7:f7:0b:b3:b4:83:
5d:5a:a1:79:46:1b:cd:1b:96:31:90:bc:04:66:41:
ee:9b:2f:1a:5f:5d:4a:01:1f:66:0e:57:14:da:94:
01:15:8e:20:0c:b3:cb:f8:60:70:39:ef:a3:f4:b7:
34:11:84:12:d6:4d:1b:5b:6f:f9:ec:bf:33:bf:91:
d5:12:92:bd:1b:90:ea:e9:77:19:13:a5:fb:d4:61:
f8:4a:c6:62:c5:15:55:95:1b:a3:02:1d:c0:ff:41:
30:16:c9:bc:87:4d:15:61:98:49:90:6d:bb:5c:b5:
82:24:0d:1d:9c:b9:c2:e4:05:53:e3:6d:cf:78:a3:
d1:b4:b0:d9:cd:11:b0:73:41:e1:7f:77:dd:23:02:
e0:7b:92:93:1f:63:e1:64:67:2c:41:8b:9b:cf:93:
72:6b:bd:bb:30:61:c1:ae:e6:2c:ed:ef:0c:c3:8c:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:C0:1C:74:4A:AB:E6:34:EC:A0:22:5E:55:EB:A6:87:42:B4:A2
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8a:90:88:64:51:c5:13:d1:31:5f:72:19:55:53:d4:58:c6:
71:e1:69:53:88:d5:97:26:11:1f:98:df:0d:15:00:cb:cb:f5:
87:5d:d9:87:81:f9:3e:f6:22:a9:d7:b2:86:8c:ff:9e:6f:69:
8b:b9:54:48:07:2f:d6:c8:98:9a:50:ef:29:b1:b0:00:30:f1:
ab:f5:c0:ee:8b:7a:b3:e4:63:57:49:1a:29:b1:b9:6d:bd:36:
d5:fa:aa:7b:b2:85:0f:bd:ab:78:95:3a:84:9c:d0:fa:d0:9f:
82:97:18:17:4b:7f:fa:5f:85:e8:ea:12:0a:e4:53:76:ea:25:
d0:6b:0f:63:5c:0c:9c:2d:48:93:6b:e3:f9:41:2d:7d:79:79:
0f:20:c3:6e:68:68:c1:b2:a0:85:3f:15:db:42:72:e8:66:2f:
9e:88:3e:5d:8a:b1:74:f9:84:fc:d1:f6:53:57:2f:11:12:ad:
93:7e:9e:97:68:d1:2d:8e:2a:62:2b:97:30:90:57:46:93:c5:
04:14:06:6c:5b:46:09:0e:76:5f:d9:e4:f8:13:3c:10:a4:42:
6e:be:16:ae:dd:fa:a3:60:90:4a:d6:2c:ed:fb:40:e2:cd:c5:
a7:9c:aa:e1:35:13:8d:45:9d:5b:54:a9:93:18:10:56:b8:fa:
24:71:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:04:30 2025 by rpki-client