Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File: -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier: yhFym1nv9V6c5L/sCh39UxxZOeaHkDFis1yeMW6rFTM=
Subject key identifier: 48:82:A6:84:3F:68:74:C3:44:3A:FD:5A:46:40:11:36:D9:30:09:21
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer: /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial: FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number: FF
Signing time: Thu 03 Apr 2025 03:08:32 +0000
Manifest this update: Thu 03 Apr 2025 03:08:32 +0000
Manifest next update: Sat 05 Apr 2025 03:08:32 +0000
Files and hashes: 1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: yPWsX/YJ3mX4WanyWWxQ6WTf+nKsEvOMBWcWGd5W58E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3658583AF
Validity
Not Before: Apr 3 03:08:32 2025 GMT
Not After : Apr 5 03:08:32 2025 GMT
Subject: CN=67edfbb0-859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:ac:3c:4f:ff:48:17:28:5b:0f:6f:fa:61:
6c:ba:77:29:12:f5:6e:59:da:5e:99:61:8c:29:82:
f9:87:6a:9b:0d:60:90:87:08:f4:ad:f8:f2:a4:a8:
49:20:bd:f6:b2:db:68:7e:75:6c:34:45:c8:84:5f:
46:18:a0:18:92:43:69:15:ee:32:77:34:e7:b7:6a:
fe:72:bf:98:21:1e:28:e3:9a:39:2f:18:68:9d:6f:
f8:e7:64:c3:6b:74:45:b0:d3:d7:23:7c:ae:8f:dd:
82:d1:fb:e9:2b:a6:63:04:03:05:6b:ca:ff:e1:bc:
ec:d4:8a:48:c0:fc:bc:52:82:97:a6:80:f9:4f:3b:
4b:ef:b7:69:09:5e:2c:7d:bf:6a:8d:79:ce:d6:8f:
8f:72:35:02:09:59:c6:cf:29:c5:96:56:b7:7d:79:
17:d5:67:29:92:3b:06:a8:74:79:24:67:8a:68:41:
9e:3d:26:e7:4a:5a:fc:61:8e:be:2a:20:00:5d:10:
bd:a5:6b:08:48:21:f9:4a:60:67:8a:3e:88:be:6f:
8e:58:23:44:0e:8f:0f:a8:fa:8a:e2:78:9d:f5:7c:
40:29:68:38:e6:4d:ec:34:73:0c:52:ec:6c:9d:3b:
0e:67:1c:43:91:ea:83:3d:22:be:85:a2:f5:67:14:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:A6:84:3F:68:74:C3:44:3A:FD:5A:46:40:11:36:D9:30:09:21
X509v3 Authority Key Identifier:
keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:63:69:5e:dc:4d:9b:bb:44:50:6f:64:18:76:af:92:cd:19:
3d:b5:c4:8c:87:10:f8:bf:c8:64:a3:7b:e2:c6:7b:eb:9e:65:
08:fa:47:e7:16:29:c8:bd:5d:c7:25:47:7e:d7:94:23:17:77:
3d:b4:56:1a:5f:dd:94:6b:e3:07:0c:62:e1:75:63:01:29:b8:
06:42:1a:fd:4d:40:97:17:43:55:d4:8f:91:fe:c3:59:86:46:
b4:d1:f2:69:fe:89:18:ad:a1:59:7f:e0:0f:1f:6e:2e:64:06:
e4:4e:8f:b1:38:3d:ab:37:31:e5:f1:78:32:db:13:89:0b:3b:
64:e4:27:db:15:70:2d:f3:56:53:12:87:0e:7e:d4:fa:4e:4d:
2a:b0:64:c4:3c:2b:ce:dc:58:a7:41:5f:1d:92:69:27:48:ce:
93:06:61:2e:be:42:ea:c0:68:3a:e7:21:56:24:ca:b2:94:ce:
a6:0a:c2:db:00:b7:62:ca:db:a7:b2:a5:a3:69:86:51:40:f8:
cf:d7:71:ad:fe:37:88:20:e1:05:07:1f:75:70:06:d8:9e:26:
6d:40:00:bc:af:cc:25:a8:03:bb:aa:60:b4:78:a9:00:81:ef:
55:b8:8c:f8:18:a3:bd:5b:68:93:b0:09:67:8a:2f:d2:cf:9e:
44:90:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:19 2025 by rpki-client