Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
File: RQb8pqpV74TTpMAErIOrtQvu07k.mft (raw, json)
Hash identifier: 8Bq2bVDu0JmKByaYfWRs57W2OZzuCsLk6OQhOVe+RoQ=
Subject key identifier: 33:EC:14:4D:AD:B9:EF:42:0B:F7:82:55:9E:AF:87:E2:59:9F:4C:87
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Certificate issuer: /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial: 048D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
Manifest number: 048C
Signing time: Thu 03 Apr 2025 01:59:09 +0000
Manifest this update: Thu 03 Apr 2025 01:59:09 +0000
Manifest next update: Sat 05 Apr 2025 01:59:09 +0000
Files and hashes: 1: RQb8pqpV74TTpMAErIOrtQvu07k.crl (hash: AwafQInAAvDtTSWg95p3g7Gt3suavUfJBoTd9WtUmuk=)
2: 9DDD28FC9A3111EC8707D1B65A40D577.roa (hash: FZcB4QBBqx/jYH6PVYH2VRq/gBlCUQZrKAZfwhy/+S4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3658AE0AF
Validity
Not Before: Apr 3 01:59:09 2025 GMT
Not After : Apr 5 01:59:09 2025 GMT
Subject: CN=67edeb6d-8cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:bb:70:59:27:7c:64:f5:4e:93:23:cb:c1:
f5:a6:e6:70:73:44:94:4a:24:c3:79:0b:55:d5:b9:
f9:35:e0:f2:e8:df:a1:a9:42:b4:39:8a:76:9c:e5:
03:c6:ea:c2:21:fe:9a:81:bb:3a:f4:17:94:c5:fa:
d3:03:3c:06:3f:ce:db:47:40:f1:27:05:b9:50:06:
ac:54:86:07:05:90:f7:86:50:c0:f8:51:76:8e:3c:
5d:6b:0d:64:44:b5:dc:26:51:8f:b7:69:d2:43:1c:
b2:89:e5:98:a6:56:75:87:a5:31:7a:94:ac:0c:2b:
f9:be:06:06:ca:f7:90:4e:d5:dc:16:d2:2e:11:81:
b0:e2:45:73:33:9b:91:dc:c1:aa:b6:b1:41:bc:1b:
21:4e:c7:9c:0c:30:ce:85:b8:12:a1:e7:78:40:2c:
bf:f9:04:31:7c:0d:d8:ad:33:2f:de:44:3d:af:74:
1d:2a:8a:ab:32:f2:f5:0b:45:99:09:ad:a3:e0:31:
e4:53:ae:60:d5:b9:bb:2f:24:d0:7c:6b:09:63:b7:
37:01:c5:ab:a9:68:d3:9b:96:68:41:f8:ab:c8:34:
0b:68:7c:1f:74:33:63:5d:23:1c:93:cf:ed:0f:48:
26:b7:f2:31:2e:92:b4:5a:9e:18:12:5c:27:7c:3d:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EC:14:4D:AD:B9:EF:42:0B:F7:82:55:9E:AF:87:E2:59:9F:4C:87
X509v3 Authority Key Identifier:
keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c2:3f:87:1e:f8:47:9d:96:55:e8:ba:6f:74:b0:d5:a4:af:
34:8a:b7:da:3c:fa:62:38:22:ae:43:c6:47:4f:64:bf:91:94:
9c:a6:b6:53:19:21:91:09:81:05:51:d9:da:58:69:be:61:da:
b5:ce:ec:06:68:f8:30:81:39:1a:50:3b:eb:b4:a2:0a:ad:8a:
9e:b2:70:03:40:8e:b5:a9:20:20:71:53:f6:5e:0f:3e:5d:19:
53:ab:86:fa:2d:c8:aa:18:b6:a8:e1:d2:f3:2b:cc:24:85:b0:
cf:c1:b0:6b:b2:db:6c:88:a4:84:76:a7:e6:02:e5:49:37:4a:
a2:56:ae:79:d6:73:7e:03:a2:89:99:83:5a:30:9e:89:9d:34:
9c:f7:64:95:7d:da:9c:ad:11:65:c5:81:35:9c:57:17:b3:b3:
ff:99:d7:a9:d2:c5:87:e8:77:8c:ca:ba:bc:50:6e:41:f1:2a:
34:cd:b5:32:1d:70:1a:bf:36:3c:4a:19:73:40:8a:5a:0e:53:
e7:dc:c3:a4:24:77:eb:97:f3:83:00:64:ec:1b:16:50:87:1c:
2c:bd:de:75:9d:dd:34:f7:cf:97:f5:ed:b5:21:da:9c:09:48:
b1:a1:f3:78:55:ed:da:0d:b3:c5:2f:43:9b:25:f5:94:b2:38:
93:9f:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:56 2025 by rpki-client