Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: xU44Ycta8P3TxEKfzD68MdWy9S//1QVmHc+yxSyBhKA=
Subject key identifier: A6:B5:69:E2:F6:75:40:36:F8:5B:89:14:1A:3C:D0:D8:45:08:20:B2
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 02D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 02D1
Signing time: Sun 16 Feb 2025 02:27:36 +0000
Manifest this update: Sun 16 Feb 2025 02:27:36 +0000
Manifest next update: Tue 18 Feb 2025 02:27:36 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: 1L4d28gTM9R9ub/WI5Xqd+95FMhRLIyjbSGyBUeM0Fg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF
Validity
Not Before: Feb 16 02:27:36 2025 GMT
Not After : Feb 18 02:27:36 2025 GMT
Subject: CN=67b14d18-d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:a7:0f:81:cf:6d:d5:86:fc:53:60:ef:90:
7d:ea:8a:c2:b2:f1:c2:2e:a0:75:c7:22:65:08:b4:
21:00:9c:c9:c2:68:17:06:9e:99:c7:b8:c3:c4:3b:
2d:51:97:1c:98:3b:0a:59:fd:f3:d9:68:40:09:39:
e0:19:b8:59:c9:33:2d:2e:31:52:49:3a:c2:36:fc:
a0:85:51:51:20:ad:49:5f:60:56:84:61:15:ae:94:
1f:d9:b7:97:f1:5c:c5:76:b8:d6:57:ab:3a:b0:08:
63:aa:90:ed:58:27:ca:5a:18:77:44:81:3e:7f:78:
0d:d0:59:2d:77:78:bb:1e:d2:30:b6:f8:c7:3b:ff:
47:28:83:51:22:4a:26:4b:29:73:39:28:10:54:13:
ca:c3:9f:43:ba:a5:5f:61:23:19:76:47:d4:ed:90:
00:39:da:ca:21:bc:92:8a:c4:dc:64:1a:34:81:3b:
8e:3a:76:89:af:56:ca:f0:dc:56:47:95:d9:12:76:
8c:67:e3:d2:25:c2:a3:de:8c:61:d6:74:7c:24:89:
db:36:6f:2c:95:7b:05:98:31:27:f5:8d:b2:67:85:
5e:f6:38:cc:9a:21:50:23:a2:54:f2:b8:d2:73:a1:
8f:48:a4:1e:ec:ec:94:cc:9c:e1:46:50:81:86:4a:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B5:69:E2:F6:75:40:36:F8:5B:89:14:1A:3C:D0:D8:45:08:20:B2
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:31:de:ff:6d:50:59:3c:2f:ad:0f:a8:dc:7d:70:6c:51:
df:c4:10:aa:db:23:fe:90:73:2c:2b:b8:fe:8c:14:aa:26:16:
6f:45:0c:7e:32:36:a0:46:5d:71:77:71:97:79:8e:0a:2e:ea:
85:3b:d7:58:a5:27:cc:9f:f1:51:08:bc:b4:2f:77:9a:aa:6b:
3c:dc:18:9e:b0:97:00:85:f5:1c:6b:d1:9d:b6:f5:19:a9:37:
b3:5e:b8:c3:75:2d:89:37:76:b3:67:a2:f3:ab:ec:d6:58:05:
8c:fc:2e:3a:45:59:32:e2:6a:44:df:47:97:68:a8:c9:37:74:
63:6e:a7:7e:a7:7b:0d:ea:fd:6d:07:da:64:b9:02:02:dd:25:
d0:aa:be:6b:74:0e:fd:1a:4d:e8:f3:5f:0f:e7:6c:99:2b:17:
af:05:e8:c3:18:0c:11:8d:72:9c:d1:c4:09:e6:b8:fb:ad:93:
f1:b6:a2:4b:36:3b:5d:e1:85:eb:0d:7a:75:64:81:20:95:fa:
28:47:40:11:18:a6:f6:9e:4d:c3:9d:6f:f4:af:02:27:0a:6a:
7a:97:d8:d0:c3:16:c8:dd:c5:ea:94:73:66:49:10:fc:e0:45:
f8:e7:e5:d4:9f:1f:e9:5c:48:4b:85:e7:21:aa:62:b0:b4:a3:
c8:21:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:25 2025 by rpki-client