![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
File: 53ShMCOPlyuu0yi9QDj8r4LXhLc.mft (raw, json)
Hash identifier: KyJ1ko3HPdXxNbc8k+7UujZxlDU0Jf+tUtpOgbZCQ8Y=
Subject key identifier: D1:A5:09:5C:10:DE:C8:FE:6E:9D:E3:28:A6:FF:64:7F:9E:D5:75:1A
Authority key identifier: E7:74:A1:30:23:8F:97:2B:AE:D3:28:BD:40:38:FC:AF:82:D7:84:B7
Certificate issuer: /CN=F364ECB6AF/serialNumber=E774A130238F972BAED328BD4038FCAF82D784B7
Certificate serial: 03E0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
Manifest number: 03DF
Signing time: Sun 16 Feb 2025 02:09:13 +0000
Manifest this update: Sun 16 Feb 2025 02:09:12 +0000
Manifest next update: Tue 18 Feb 2025 02:09:12 +0000
Files and hashes: 1: 53ShMCOPlyuu0yi9QDj8r4LXhLc.crl (hash: J5UnUwvbpy5ajL4LmGcfFF6TQCNaoH5zZwADl8lo9Tk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.crl
rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 992 (0x3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364ECB6AF
Validity
Not Before: Feb 16 02:09:12 2025 GMT
Not After : Feb 18 02:09:12 2025 GMT
Subject: CN=67b148c9-b25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:d2:0b:67:d9:1b:eb:30:de:67:24:6d:fc:
52:f4:d7:19:09:aa:9f:8f:19:b6:1d:55:fc:4c:5d:
35:b8:a8:bc:1b:2f:23:17:cf:6a:ba:52:fc:ac:6d:
8b:f7:87:81:eb:f2:5c:3f:ba:73:73:eb:02:bf:90:
f1:72:5c:8b:03:2a:67:bf:cc:78:35:8c:9e:e7:7d:
7a:6e:5f:da:07:28:a1:06:b0:65:ad:0d:7f:70:11:
88:71:66:c6:77:85:0c:f9:f2:d3:cd:97:4c:ea:c7:
c3:31:bf:a7:30:98:3d:8b:f1:a7:80:ee:9d:4b:cb:
59:f2:68:e0:5e:0f:e1:ca:f3:50:ff:1f:90:ac:14:
15:9d:78:56:5f:63:c2:66:6e:88:12:7c:13:fd:81:
7f:f0:3a:41:18:5f:0f:c8:13:78:02:dd:bc:6a:28:
0f:a5:81:68:c9:a8:ba:cc:3b:b7:89:83:f6:ba:88:
90:83:af:fb:75:7f:cb:e5:cb:2d:6e:42:7f:0a:10:
d8:eb:55:ff:79:47:11:e6:f7:aa:83:a3:5c:43:9a:
07:4a:2d:87:12:6a:c9:30:56:e4:25:da:3b:b3:1a:
28:dd:03:48:c2:62:44:32:37:6e:bd:32:57:36:b9:
01:19:8c:a0:73:e8:a0:92:d3:8d:4a:b6:9f:2e:4c:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A5:09:5C:10:DE:C8:FE:6E:9D:E3:28:A6:FF:64:7F:9E:D5:75:1A
X509v3 Authority Key Identifier:
keyid:E7:74:A1:30:23:8F:97:2B:AE:D3:28:BD:40:38:FC:AF:82:D7:84:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:30:0d:0e:dc:a5:64:59:1d:83:4d:2b:e8:2c:eb:9d:40:4e:
c6:b6:06:55:dc:91:66:76:5d:41:c6:8c:0e:d0:69:5a:f7:67:
40:46:f0:ed:e4:5b:d4:02:44:75:b6:bd:8a:58:a7:b1:3e:b1:
3d:28:66:f5:63:8b:ba:9f:2d:54:43:4e:19:b7:64:63:07:92:
63:e0:3b:d8:7b:28:b6:9f:02:2c:7c:1b:66:9b:f4:22:fa:9e:
8c:0a:99:06:82:a3:9a:f2:1b:a5:33:8d:8b:f4:74:31:56:f9:
d0:b1:a8:94:72:95:16:95:22:85:85:af:d7:fb:a9:4e:aa:ca:
75:2f:c1:bb:73:83:7d:41:70:ee:13:68:c4:6e:68:45:6b:1c:
9e:1b:fb:a6:95:ea:c5:a3:0f:fd:ff:27:8f:36:dc:ea:ec:20:
7c:f8:4c:2f:f9:82:0f:2a:5d:dd:13:17:d6:59:b6:94:ce:ae:
f2:54:52:71:19:67:f4:94:9c:8b:03:b9:f6:2d:ea:57:04:7c:
96:d3:cc:4e:c3:5e:6a:47:bf:31:33:3c:80:06:ca:ef:42:2c:
89:98:23:4d:fb:da:42:60:1b:c4:b9:c3:fa:ef:33:8e:d3:30:
62:47:43:cd:2a:cd:49:34:f3:02:bc:a3:77:a6:e0:c0:cd:25:
02:57:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:24 2025 by rpki-client