Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File: PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier: Y9feQ/Xgkh1j/69wKNqCMzmm+iS2bcyaTt53Nbt44ug=
Subject key identifier: 25:6B:7D:D8:6A:35:F2:B3:52:72:2D:DB:4B:9C:51:A0:BA:26:96:01
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer: /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial: 043D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number: 043A
Signing time: Thu 03 Apr 2025 02:02:44 +0000
Manifest this update: Thu 03 Apr 2025 02:02:43 +0000
Manifest next update: Sat 05 Apr 2025 02:02:43 +0000
Files and hashes: 1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: BLdNO2pUehfechUjHEs2RZE+vvclj0t+3h+/xHhrSLQ=)
2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36598F5AF
Validity
Not Before: Apr 3 02:02:43 2025 GMT
Not After : Apr 5 02:02:43 2025 GMT
Subject: CN=67edec44-caca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:d8:73:40:50:9d:19:7f:c0:a9:f1:06:f4:
d0:d6:16:95:14:7c:5b:18:1f:cd:ae:f2:78:1a:61:
9f:5f:24:86:c0:4b:aa:6f:60:3f:5b:49:dc:c9:d5:
ce:fb:95:63:8c:48:d5:76:96:f1:b5:ce:43:37:2f:
26:74:d6:02:38:75:13:fb:00:8e:81:bc:0a:ec:8a:
29:2a:ab:ed:56:89:b1:f9:64:5d:5b:c0:99:7f:6a:
da:3e:0d:d6:2f:d6:6e:75:c4:e2:54:75:65:1b:b0:
fc:8d:21:34:d9:40:38:fc:51:86:c2:6e:b7:40:c6:
30:f4:02:de:a5:00:05:f9:20:da:38:f4:f3:dd:eb:
64:28:fc:e2:27:11:3a:a9:c9:68:90:e4:b7:4c:ea:
3d:ae:48:6a:f5:ec:a7:ab:be:7d:f1:22:cd:55:45:
95:51:80:26:2d:20:c5:1c:7f:dd:00:ea:df:26:24:
64:54:40:a9:70:5a:b3:f4:f2:f1:28:da:6c:31:d3:
5a:3b:3b:ff:52:aa:03:04:23:a8:6e:46:a5:88:7e:
7d:cf:ca:ae:a0:dc:97:6d:e4:30:25:03:af:be:0f:
8c:42:77:97:b6:3e:58:a8:bc:74:6b:e3:82:7f:c9:
f8:64:17:46:67:5a:55:9e:f7:b4:52:80:ea:27:e0:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6B:7D:D8:6A:35:F2:B3:52:72:2D:DB:4B:9C:51:A0:BA:26:96:01
X509v3 Authority Key Identifier:
keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:02:36:63:3d:fd:b4:26:d8:91:ce:e8:25:fe:c1:ab:a4:b3:
5c:c0:61:75:9a:a6:b8:34:b9:35:7c:31:63:e0:c8:dc:42:1f:
f7:31:c3:79:4e:93:22:dc:56:f2:08:64:31:16:72:f3:01:cc:
84:be:ec:fe:0c:c8:26:30:05:4a:f5:7d:fe:b6:b1:87:80:d8:
b9:d4:83:66:79:e9:a6:de:0d:1c:43:1a:c1:12:12:03:4e:4a:
46:0e:66:f5:5e:e2:3c:2e:25:e2:61:8f:86:00:5c:74:ef:12:
59:51:b9:0b:5a:84:c7:69:8d:ba:e4:8d:37:91:d2:aa:c0:4f:
37:10:03:fd:d9:b5:5b:c3:c3:2a:60:b4:36:1a:28:ea:07:c2:
66:1f:74:ec:d6:39:4d:1c:3d:ba:10:3a:47:3f:19:88:2d:30:
2a:18:52:15:51:80:5c:a1:48:86:b3:03:e5:4d:38:b9:20:9e:
67:69:82:84:4d:f2:56:92:c1:3c:76:31:60:35:69:55:3d:1f:
a4:ac:5a:df:8b:49:80:9c:25:83:84:fb:65:3d:d0:1e:20:d3:
ae:5c:5c:11:5a:2a:a6:f7:af:0d:9a:ad:fd:59:bf:34:96:0c:
71:ba:42:68:ef:29:79:77:d2:06:f5:a4:f6:ba:51:65:57:61:
13:77:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:06 2025 by rpki-client