Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
File: DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft (raw, json)
Hash identifier: 5y75lxshArbtNKT0lvEz+v2VAGbu/evhW3o97usYbuw=
Subject key identifier: D6:64:3D:5E:83:BD:4F:F6:A7:03:6D:58:01:2D:36:2E:6C:82:91:6A
Authority key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
Certificate issuer: /CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Certificate serial: 086E
Authority info access: rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
Manifest number: 0867
Signing time: Sun 16 Feb 2025 01:15:46 +0000
Manifest this update: Sun 16 Feb 2025 01:15:45 +0000
Manifest next update: Tue 18 Feb 2025 01:15:45 +0000
Files and hashes: 1: DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl (hash: MMSk5NTDyEYsi7OR1OR+e2PgtX+4SL4NJSrev4hUt6U=)
2: 74AA29FC3E9A11EFB1E37554762E951A.roa (hash: WV585CADX8C6BW4JHivJOJddO/5hxxRDI5ze3ORaNIk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C81DAR
Validity
Not Before: Feb 16 01:15:45 2025 GMT
Not After : Feb 18 01:15:45 2025 GMT
Subject: CN=67b13c42-7935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:f5:83:07:e5:05:11:e0:c1:b6:fd:b7:e1:
f9:b5:58:09:a1:e4:40:d5:2d:7d:47:ad:8d:ca:ef:
c3:b8:09:95:76:b2:48:1f:1a:01:61:6c:c9:d6:31:
03:94:88:24:5c:2c:f6:c3:a2:3b:27:d1:8d:f8:cd:
82:e9:67:3a:83:af:29:d6:b8:2b:19:c3:d7:0c:0d:
5a:3d:44:03:3d:5d:7e:26:ef:5d:3e:5f:d4:c6:24:
fb:3f:8e:71:6e:71:63:5e:3c:ba:a2:25:af:05:a9:
1c:f4:50:4e:8d:46:83:72:84:54:64:bf:b6:09:dc:
e3:1e:09:de:38:ad:68:a4:49:2a:b0:a3:04:ed:cb:
fa:5a:77:67:cb:95:d8:30:fc:9b:5b:0e:f2:69:78:
a7:05:a5:e8:02:3d:bb:85:4a:2c:8c:51:6f:72:cb:
94:a3:a5:b9:77:80:95:a8:00:19:10:b0:e6:33:e9:
eb:56:74:86:45:29:e3:84:a8:60:b2:e9:72:89:e6:
bb:2b:bb:89:cd:6d:24:e1:ea:a4:6d:6f:a9:49:bf:
e9:36:3c:8b:34:12:73:a2:f5:db:42:e0:d7:e0:62:
b8:52:a3:33:eb:cb:b0:8d:6d:03:87:63:24:eb:1c:
cf:6e:c6:57:87:90:f1:d4:83:cc:7a:ef:f2:2f:e1:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:64:3D:5E:83:BD:4F:F6:A7:03:6D:58:01:2D:36:2E:6C:82:91:6A
X509v3 Authority Key Identifier:
keyid:0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:83:17:6a:62:8f:2b:1c:2d:cb:4d:aa:99:ee:19:4c:f3:82:
5a:14:39:52:46:b6:9a:1c:66:dc:ce:3a:20:e6:dd:4f:00:f1:
61:4d:b3:dc:06:56:63:20:20:b0:e1:04:30:86:7b:b3:29:10:
4f:e6:ce:1d:31:b0:b2:4e:2a:25:03:76:de:b1:4d:d6:20:14:
da:f9:c9:f9:79:e7:26:51:35:ca:20:ad:6e:e7:8c:3a:13:04:
15:ba:5c:47:33:40:68:11:1a:87:dd:c5:2b:01:d4:60:3b:bf:
5b:43:ff:44:d6:88:80:1a:c3:46:d5:1e:14:f3:a5:ed:93:68:
d6:4f:fc:e6:be:8f:bb:e2:7a:e2:6f:51:c8:4a:8b:55:ba:6a:
fb:61:bb:a2:a5:1c:a7:47:fc:a7:04:d5:ed:49:62:8e:c1:64:
2b:65:bc:6f:a0:d7:15:24:0a:44:c9:48:2b:6b:03:04:63:62:
61:2c:51:c6:8b:c1:26:2d:02:1b:c8:26:e1:0f:12:f0:02:db:
40:05:13:74:8f:87:ff:2d:2f:06:d9:42:d1:e0:d4:ec:97:9e:
df:ed:d0:f0:4e:e3:b5:d9:59:a8:43:7d:f6:b1:26:29:86:e4:
fb:49:3c:56:c1:ea:64:4f:9c:de:62:8e:ec:98:b5:b7:4e:eb:
6c:95:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:28 2025 by rpki-client