Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
File: 5_z-A6OF76F0KyB_rsnT3GwDl50.mft (raw, json)
Hash identifier: YJPQGWfnVxHimfxeSswguFgTcewiKqWypZQO20+dGzA=
Subject key identifier: 0E:85:F4:D0:18:6D:B5:FF:FC:38:51:B0:F1:24:EE:2B:9F:71:CC:3C
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Certificate issuer: /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial: 0DC4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
Manifest number: 0DC2
Signing time: Thu 03 Apr 2025 00:54:54 +0000
Manifest this update: Thu 03 Apr 2025 00:54:53 +0000
Manifest next update: Sat 05 Apr 2025 00:54:53 +0000
Files and hashes: 1: 5_z-A6OF76F0KyB_rsnT3GwDl50.crl (hash: 7YZOb9JiiWFNcQ6TzWA64B/ST6afpYBVDOJqCusZe/8=)
2: 97EFF9FE41C911E6974C3715F8AEA228.roa (hash: PV1x2NuqP503+6sU0r3JzrSccMtiDFB0mgrEAngyzh8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3524 (0xdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646DCFAF
Validity
Not Before: Apr 3 00:54:53 2025 GMT
Not After : Apr 5 00:54:53 2025 GMT
Subject: CN=67eddc5e-d833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2f:ab:2d:8d:9a:08:f6:ce:3c:bc:9d:47:68:
ef:24:58:1a:23:bb:b1:05:d2:43:b9:09:03:57:cb:
2e:d5:b7:ed:ac:07:e3:36:9e:f0:09:1a:7f:8d:be:
db:bc:fb:e7:a9:ed:52:fc:84:11:2f:99:bc:c3:fc:
37:9f:c5:a0:0c:25:72:58:ed:ed:df:f7:26:18:a3:
7b:40:31:55:29:e9:b9:59:d6:22:1d:d2:7b:ec:d6:
f2:cd:3d:d5:24:68:8f:08:bd:e7:8b:ff:20:25:10:
00:52:90:cf:bc:1c:af:99:b5:6b:ef:d8:2b:c3:07:
d3:36:80:eb:b5:91:c5:74:35:87:18:cf:f9:19:d7:
7c:be:e3:07:fc:30:a3:81:31:68:7b:0a:16:25:be:
f4:a3:78:fc:d1:38:bf:8c:65:71:73:b1:be:03:39:
e0:25:b3:b8:d5:c8:d5:09:0c:c8:f4:d0:4a:cb:26:
ad:1e:53:4b:63:ad:33:30:e5:9b:02:74:6c:ed:ab:
e6:8c:18:94:82:b1:e9:51:9e:01:1b:af:36:2e:8c:
84:68:99:d0:99:c5:0d:a7:57:96:b1:01:7f:ec:98:
37:c7:96:9f:55:30:a5:02:03:90:5d:9d:47:f0:63:
ce:6e:21:cc:52:0e:02:4a:a2:ab:2e:c5:01:5a:dc:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:85:F4:D0:18:6D:B5:FF:FC:38:51:B0:F1:24:EE:2B:9F:71:CC:3C
X509v3 Authority Key Identifier:
keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:94:a5:9f:98:e1:07:48:42:8f:97:08:58:52:80:92:17:82:
a2:c2:4b:3c:b3:18:d5:0a:8b:94:d1:f3:8d:99:a3:6f:b4:fd:
29:a8:80:7f:9f:cd:1b:4f:54:09:f4:25:46:ba:db:90:c6:02:
91:bb:0b:c2:cd:53:df:2f:4f:16:d6:c4:44:a1:9b:dd:f6:0e:
6b:3f:43:f9:44:d4:01:a0:92:78:22:5b:be:0a:62:f2:3d:df:
5e:fa:26:76:fd:60:2a:c8:a5:6a:33:e9:84:95:65:79:d7:82:
cc:03:7a:a1:1f:5f:7d:77:0b:a1:e9:77:6a:c6:f4:c3:0a:02:
b2:1c:0e:1b:53:08:00:49:9c:b1:19:b8:c3:fb:18:fc:5b:4a:
57:a3:9a:a1:60:32:63:de:b1:98:54:48:fe:f6:d4:6e:17:8c:
15:1d:8a:c5:d3:4a:98:03:a0:8b:ed:e2:f3:cd:7d:c4:f6:7b:
2e:00:85:84:1c:84:3e:45:03:fa:da:40:fe:5c:18:46:8e:99:
a5:23:89:3d:55:38:a1:98:6d:c1:df:48:1c:de:5f:db:08:87:
af:96:57:8f:37:15:91:40:1e:36:d9:0c:0f:0d:d4:c2:68:70:
b5:22:3a:e1:aa:c4:88:45:42:e0:7a:c2:30:f4:13:06:0e:13:
23:80:2d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:32:59 2025 by rpki-client