Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
File: epndbb4tFgeKUOWEHlqOilkM3Us.mft (raw, json)
Hash identifier: 8Ad4g3NNdBK3U0mV2DQfoKswovs4E4q0y17jtFT2T9g=
Subject key identifier: 9B:B9:C7:42:AA:6D:FE:E7:86:79:53:07:19:23:EC:19:F9:7F:69:27
Authority key identifier: 7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B
Certificate issuer: /CN=F365052EAR/serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
Certificate serial: C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
Manifest number: C3
Signing time: Sun 16 Feb 2025 03:10:58 +0000
Manifest this update: Sun 16 Feb 2025 03:10:58 +0000
Manifest next update: Tue 18 Feb 2025 03:10:58 +0000
Files and hashes: 1: epndbb4tFgeKUOWEHlqOilkM3Us.crl (hash: k+6no4NW0rhtrJuGwrCxQb2sb0LT5ohjIvvRa4WYARU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl
rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365052EAR
Validity
Not Before: Feb 16 03:10:58 2025 GMT
Not After : Feb 18 03:10:58 2025 GMT
Subject: CN=67b15742-4e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6b:07:4b:b5:03:87:78:28:d8:28:f3:f9:59:
b5:15:64:d7:04:2f:53:25:1c:d9:2b:0e:58:52:54:
4e:83:f0:60:66:11:60:6a:4b:4b:8f:7a:ab:a0:a6:
a9:8c:34:06:e1:e0:11:c7:da:b4:87:6c:e2:55:65:
af:85:42:8c:d7:37:77:8b:6a:f0:bb:8d:a2:d5:26:
aa:5e:e0:da:c3:39:09:07:8f:48:6e:23:27:68:08:
55:39:a5:e5:eb:62:a6:0d:30:19:c9:e5:9a:4c:b1:
39:f5:62:1a:d8:b8:d1:cc:80:39:27:a2:7c:31:00:
60:11:3c:4b:5c:c9:cf:f2:fd:23:0b:99:7f:cb:48:
b1:61:8d:e1:23:e3:f8:b2:ff:96:7d:47:cb:90:85:
e7:ca:59:46:0f:8a:dc:05:54:f9:22:2b:1a:e1:95:
fc:ad:ff:4f:75:1c:34:a1:c7:1d:b3:27:7c:aa:b1:
70:f8:42:b9:65:c5:fa:99:cd:ac:e2:48:f6:36:78:
25:7f:d7:8c:ad:dd:f5:90:68:b5:e5:b9:4b:75:0c:
04:c3:e9:7e:95:70:74:56:7f:49:d6:97:10:58:ab:
4c:8b:cd:69:1b:3b:71:fe:ea:09:18:a3:19:17:38:
e9:5f:1b:3d:7a:e6:44:3e:04:01:eb:da:36:a6:9c:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:C7:42:AA:6D:FE:E7:86:79:53:07:19:23:EC:19:F9:7F:69:27
X509v3 Authority Key Identifier:
keyid:7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:60:a8:11:22:c4:41:b1:2d:80:17:6d:73:dc:67:fb:49:e5:
fc:0e:23:73:87:db:dc:40:18:e0:ed:4d:cd:36:be:fc:5c:b0:
cc:cb:42:74:ba:12:7f:e5:84:a8:ef:07:af:8a:12:a7:a2:1f:
d2:bd:b5:e7:23:8e:dc:22:47:e3:92:6c:77:e3:86:e0:69:c4:
4c:4b:c1:51:f8:f1:05:b1:27:35:ba:39:d1:91:11:73:96:59:
89:6f:f3:ad:1f:d1:37:bf:b1:a7:34:5a:72:06:b3:81:d3:89:
4a:24:25:80:e0:fe:34:75:f2:a7:bb:c7:bf:a7:46:f1:15:72:
71:54:ec:97:8f:92:81:65:1a:6f:da:55:bd:c9:4e:88:d6:e4:
58:12:f8:e7:99:a9:fe:bc:65:99:ab:14:21:4d:7d:c6:41:06:
6f:e8:e2:b0:99:3e:6b:36:f8:a4:17:25:35:b4:f2:d5:70:a0:
c9:33:57:28:d5:d3:39:66:8f:93:6d:4a:32:85:3c:e8:8d:f7:
51:28:fc:1c:44:fd:29:2e:c8:16:45:d3:6d:45:d1:bc:ff:29:
c2:74:90:8d:60:da:d2:0b:df:d6:3e:c8:96:77:61:18:7c:cc:
14:e6:a6:39:3f:db:56:de:90:c2:fa:07:7e:79:6e:74:d8:e6:
ec:5b:5d:6d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1MkVBUjExMC8GA1UEBRMoN0E5OURENkRCRTJEMTYwNzhBNTBFNTg0MUU1QThF
OEE1OTBDREQ0QjAeFw0yNTAyMTYwMzEwNThaFw0yNTAyMTgwMzEwNThaMBgxFjAU
BgNVBAMTDTY3YjE1NzQyLTRlNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzawdLtQOHeCjYKPP5WbUVZNcEL1MlHNkrDlhSVE6D8GBmEWBqS0uPequg
pqmMNAbh4BHH2rSHbOJVZa+FQozXN3eLavC7jaLVJqpe4NrDOQkHj0huIydoCFU5
peXrYqYNMBnJ5ZpMsTn1YhrYuNHMgDknonwxAGARPEtcyc/y/SMLmX/LSLFhjeEj
4/iy/5Z9R8uQhefKWUYPitwFVPkiKxrhlfyt/091HDShxx2zJ3yqsXD4QrllxfqZ
zaziSPY2eCV/14yt3fWQaLXluUt1DATD6X6VcHRWf0nWlxBYq0yLzWkbO3H+6gkY
oxkXOOlfGz165kQ+BAHr2jamnCrjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUm7nH
Qqpt/ueGeVMHGSPsGfl/aScwHwYDVR0jBBgwFoAUepndbb4tFgeKUOWEHlqOilkM
3UswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNTJFLzY0RUMxQzVDNUU0QjExRUZCN0M0OERBMzc2MkU5NTFBL2VwbmRi
YjR0RmdlS1VPV0VIbHFPaWxrTTNVcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VwbmRiYjR0RmdlS1VPV0VIbHFPaWxrTTNVcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTA1MkUvNjRFQzFDNUM1RTRCMTFFRkI3QzQ4REEzNzYyRTk1
MUEvZXBuZGJiNHRGZ2VLVU9XRUhscU9pbGtNM1VzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsYKgRIsRBsS2AF21z3Gf7SeX8DiNzh9vc
QBjg7U3NNr78XLDMy0J0uhJ/5YSo7wevihKnoh/SvbXnI47cIkfjkmx344bgacRM
S8FR+PEFsSc1ujnRkRFzllmJb/OtH9E3v7GnNFpyBrOB04lKJCWA4P40dfKnu8e/
p0bxFXJxVOyXj5KBZRpv2lW9yU6I1uRYEvjnman+vGWZqxQhTX3GQQZv6OKwmT5r
NvikFyU1tPLVcKDJM1co1dM5Zo+TbUoyhTzojfdRKPwcRP0pLsgWRdNtRdG8/ynC
dJCNYNrSC9/WPsiWd2EYfMwU5qY5P9tW3pDC+gd+eW502ObsW11t
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:14 2025 by rpki-client