Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File: Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier: GpKyPUP+KfPMnKxcz/hm0z3Tbe9b8tCFxws/xya5H00=
Subject key identifier: C0:D8:C0:4C:D7:B2:F1:53:8E:02:45:2F:4F:20:09:13:59:83:2B:D6
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer: /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial: 01F1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number: 01ED
Signing time: Sat 29 Mar 2025 03:13:29 +0000
Manifest this update: Sat 29 Mar 2025 03:13:29 +0000
Manifest next update: Mon 31 Mar 2025 03:13:29 +0000
Files and hashes: 1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: W4S/KipNf6p94BgRWCbc1hG0XH/5316NIN90IKXD/YI=)
2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652C3AAF
Validity
Not Before: Mar 29 03:13:29 2025 GMT
Not After : Mar 31 03:13:29 2025 GMT
Subject: CN=67e76559-6c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:2e:2c:51:7d:b5:fa:ae:35:11:f1:a0:e4:
ad:15:c2:d4:2f:b6:5e:2a:b3:9f:cb:10:ce:8a:4a:
65:55:bc:40:52:50:e5:a2:15:60:77:39:ba:b5:39:
a8:1c:b3:db:6f:98:ed:4a:37:e4:e5:03:16:86:8c:
48:b6:ae:e7:2a:fa:e4:94:f6:95:7e:8c:ba:8b:c5:
b2:2e:13:8b:06:a5:a9:30:29:4a:fc:1e:07:78:8a:
3f:a8:b1:af:18:a8:8e:4c:83:63:30:24:64:3e:cd:
2b:39:4a:23:d8:8b:c2:0b:02:4a:9e:fd:42:76:3a:
cd:5a:8f:f6:ef:8d:6c:f2:51:b0:13:8d:d5:df:f7:
79:c5:b5:3f:cd:0b:91:b7:d6:24:70:26:55:92:19:
22:6c:0c:60:05:c6:85:31:dd:73:49:5c:db:5e:39:
95:7d:ec:d4:b0:7c:97:9f:c1:64:74:a8:e2:39:88:
13:ad:84:5a:0f:0e:a2:3e:75:6f:d7:8f:55:70:e8:
71:35:0f:91:8c:2a:32:7b:5a:60:d8:81:53:ad:6e:
0e:0a:0d:ef:c6:4a:62:eb:f1:79:b5:d1:0e:79:bb:
31:25:ec:b5:87:5d:37:bf:5b:e8:0c:88:c1:d3:1b:
b3:e8:20:eb:34:1e:e6:0a:b6:4c:f0:fa:31:b2:c0:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:C0:4C:D7:B2:F1:53:8E:02:45:2F:4F:20:09:13:59:83:2B:D6
X509v3 Authority Key Identifier:
keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:06:33:04:16:ba:00:46:18:98:83:47:03:90:c4:2a:b3:1a:
d0:58:a3:90:35:ec:88:66:1e:c2:53:62:00:1a:7c:aa:17:41:
37:8b:53:47:6a:d6:a1:b6:c0:be:4b:8e:d7:fc:0f:46:7d:4e:
06:81:65:1f:de:ef:55:ef:fe:1a:c4:19:2b:8c:0c:b2:e2:48:
9f:68:63:91:1f:c1:fc:5a:8e:81:52:9f:a9:1c:53:d8:e4:30:
0b:54:23:b4:c1:ab:04:eb:32:a4:74:b7:fd:0f:89:af:69:70:
fa:23:09:47:ca:28:9e:a2:33:b4:17:e5:9e:6a:c5:dc:58:aa:
01:c8:6f:25:b0:d5:51:dc:65:88:24:03:63:76:bc:4e:93:ee:
46:2f:9c:c1:16:2a:32:f6:3a:e4:7f:a1:c5:15:c6:df:88:e6:
3b:54:16:9a:77:c9:b6:7b:c3:5f:f5:3a:37:60:8d:a9:b8:d1:
d7:a6:bb:7e:2a:7b:f7:93:d5:42:9f:6e:e8:a9:be:14:9f:d6:
b5:07:cf:41:aa:cd:e9:68:9c:f1:f4:f7:bc:ff:a3:7b:5b:4c:
c6:46:a0:75:d7:bd:16:65:6c:38:2a:79:bf:a4:eb:1f:e2:bc:
ed:0b:91:5d:fd:8e:15:3b:59:26:08:01:bd:5a:f1:46:1b:a6:
77:c3:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:26:12 2025 by rpki-client