Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File: X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier: mL1y7m8Blp75k+eTnl+UKoLnJ5tsr+2CI1YFylvGCTI=
Subject key identifier: 84:5A:EB:C0:9F:CE:31:8E:89:23:ED:1B:E4:EA:EC:DD:2A:43:5F:55
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 0229
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number: 0223
Signing time: Sat 29 Mar 2025 03:09:23 +0000
Manifest this update: Sat 29 Mar 2025 03:09:22 +0000
Manifest next update: Mon 31 Mar 2025 03:09:22 +0000
Files and hashes: 1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: v8eVjeiKl2adFv7RVY0m00YrPeFO56eOJJDvpG9N0Lk=)
2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF
Validity
Not Before: Mar 29 03:09:22 2025 GMT
Not After : Mar 31 03:09:22 2025 GMT
Subject: CN=67e76463-e587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:e5:37:10:b5:eb:a2:af:03:2b:f5:98:95:
d4:d9:43:ff:0f:9a:7b:e1:4d:74:79:ab:20:1a:e8:
1c:c5:6b:24:dc:8c:48:fa:ab:5e:98:17:8b:0e:7d:
6e:71:0d:31:4d:b3:d2:d8:ea:0f:78:b9:22:e4:9e:
b3:ec:4e:89:db:ac:1d:e3:6e:be:a6:5b:e7:16:c6:
b8:71:a7:9d:36:6f:e8:e4:e0:74:98:aa:56:6f:fb:
4d:60:11:23:0d:c5:6e:1b:da:8c:26:da:ec:62:5b:
49:b1:c0:dc:71:fe:6c:dd:cc:88:dd:b6:44:00:74:
b7:b4:5a:d1:c0:be:98:59:f1:ae:d7:8a:db:50:ff:
3a:ab:87:c3:88:2f:94:05:a6:5d:3a:8f:b3:cc:40:
19:32:4e:b1:4d:3e:29:eb:28:a5:ee:bf:4a:94:e3:
0c:fc:41:b0:51:51:34:54:51:61:10:29:8e:3e:d6:
d1:e1:5d:7c:31:66:39:89:35:9e:d1:0c:bc:2f:55:
10:32:b3:5a:dd:f0:76:36:36:8f:6d:4a:53:20:fb:
b7:c1:ee:04:03:a3:f7:63:8f:82:88:19:b3:1a:a4:
36:81:98:51:fa:bd:a1:dd:3f:54:a8:2f:3b:ae:a3:
7a:24:47:8e:27:b6:93:39:e6:7b:77:cd:1f:c1:69:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:EB:C0:9F:CE:31:8E:89:23:ED:1B:E4:EA:EC:DD:2A:43:5F:55
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4e:34:2a:f4:ce:d7:0b:c7:43:49:1b:b4:4a:1c:6d:e5:35:
a6:46:b2:ab:41:cc:f4:c8:ca:f9:40:cc:2c:bd:e4:6a:da:87:
b3:2a:c1:37:7d:ae:d0:e2:30:60:29:24:8e:52:65:b4:cc:53:
40:3d:f1:da:8c:66:2a:ec:ed:bf:4b:0c:04:dd:c4:43:8c:e6:
f1:75:e5:17:b2:1c:7c:41:c4:3f:cb:f0:64:aa:14:e2:85:63:
8a:c6:94:af:97:73:90:90:a1:de:00:5e:ba:22:86:ab:27:59:
e0:6c:56:3f:18:58:7c:0d:6d:b8:f1:6e:cc:e0:18:06:b5:75:
fd:0d:3b:57:fe:6f:05:5d:77:4b:a1:1c:27:66:44:25:de:5c:
c7:e6:14:25:47:7b:b3:76:cc:2c:67:96:d8:e0:d4:33:45:2a:
33:bc:a7:3f:2b:4f:dc:aa:74:ef:80:be:7a:94:ae:d7:97:98:
d4:ee:5f:35:40:11:3d:f3:3e:e3:6c:53:13:17:21:2b:97:fe:
da:46:c1:96:89:d6:b4:9c:c7:fd:55:ef:5f:19:45:1c:7f:c5:
58:77:fb:d1:a8:d2:fa:bb:54:22:fb:6f:76:44:5e:87:fe:8f:
92:e2:2d:28:68:12:ab:83:88:33:6e:23:c5:9e:74:eb:ea:37:
29:c3:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:36:44 2025 by rpki-client