Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft
File: WF4wfCBwCWQDd_LGenl7YYBYcwU.mft (raw, json)
Hash identifier: RI0JZFrwVA3CMtf/TVzCPP/m3pYpDzPtIJrahDUuU0M=
Subject key identifier: 90:B2:20:05:2D:B9:94:76:DC:BF:A1:CC:A4:ED:D9:DA:10:FA:BE:72
Authority key identifier: 58:5E:30:7C:20:70:09:64:03:77:F2:C6:7A:79:7B:61:80:58:73:05
Certificate issuer: /CN=F365C439AF/serialNumber=585E307C207009640377F2C67A797B6180587305
Certificate serial: 0118
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WF4wfCBwCWQDd_LGenl7YYBYcwU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft
Manifest number: 0117
Signing time: Sun 16 Feb 2025 03:01:17 +0000
Manifest this update: Sun 16 Feb 2025 03:01:16 +0000
Manifest next update: Tue 18 Feb 2025 03:01:16 +0000
Files and hashes: 1: WF4wfCBwCWQDd_LGenl7YYBYcwU.crl (hash: 5IqnF7oGRKNcd3ezmae813DEZgW+/QkQb0Nd7z4br9o=)
2: 21A1087C19C211EFB818BD53017001B1.roa (hash: zqwaVPZuU0bamDmOPHw2hVNIZ8LHafl72E8Nv5M3OgI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.crl
rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft
rsync://rpki.afrinic.net/repository/afrinic/WF4wfCBwCWQDd_LGenl7YYBYcwU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C439AF
Validity
Not Before: Feb 16 03:01:16 2025 GMT
Not After : Feb 18 03:01:16 2025 GMT
Subject: CN=67b154fd-70fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:83:df:d3:03:f6:bb:b8:94:4b:f3:ac:ce:
4d:ad:ee:62:a1:89:5b:f9:3e:cb:0f:c2:da:53:ba:
33:80:10:47:a2:32:90:2a:65:20:64:b7:4d:9b:14:
d5:41:27:64:4f:13:d8:76:69:5c:34:c0:13:22:83:
e8:e9:87:37:d5:a0:02:dd:c3:78:bd:ba:e8:42:ca:
d0:69:43:cc:80:2c:30:f5:61:45:e8:73:cf:9a:87:
c4:78:18:dc:62:03:2a:db:7d:42:53:10:6c:4a:4a:
d8:10:3b:7d:b6:0b:32:b3:80:3d:bc:c3:c3:7a:53:
92:09:8c:3f:4d:41:d8:a3:a0:1f:eb:31:0c:85:36:
82:ef:7f:86:8e:11:15:49:64:9c:c7:11:c5:40:73:
64:28:01:69:e9:c5:43:6f:04:7b:25:1d:ec:53:0b:
b3:29:ea:11:1b:50:32:d6:11:4b:66:61:c1:ac:58:
ce:fd:39:ad:64:0a:27:bb:2b:6a:c7:de:a7:3f:29:
d9:d2:56:bc:6d:68:85:94:8c:7b:34:d3:82:01:9b:
e6:a3:8f:85:aa:a7:8f:3c:9f:ab:82:bf:44:8d:39:
8f:a2:44:0c:fd:c4:70:65:1f:ac:8e:8a:1a:4f:2c:
2c:44:5c:f7:97:20:5b:8d:8a:2b:c3:39:c5:0a:37:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B2:20:05:2D:B9:94:76:DC:BF:A1:CC:A4:ED:D9:DA:10:FA:BE:72
X509v3 Authority Key Identifier:
keyid:58:5E:30:7C:20:70:09:64:03:77:F2:C6:7A:79:7B:61:80:58:73:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WF4wfCBwCWQDd_LGenl7YYBYcwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:7d:fe:0c:a0:03:19:5b:64:9f:8f:1e:56:26:48:d6:17:00:
17:24:33:8a:ce:83:11:f4:01:cd:ac:e2:96:6f:16:40:9e:f6:
ae:fb:39:2d:c2:3c:e8:c2:65:55:76:00:bd:ef:21:42:d6:b2:
61:9f:78:e3:2c:c2:91:49:52:a4:07:c3:d4:b4:a1:45:57:a2:
e7:f2:e0:3a:14:e8:bd:5d:90:93:3a:fa:49:cb:64:a0:09:13:
01:1e:bd:f9:2e:cb:3a:ee:86:63:74:c4:32:85:b6:4d:5b:65:
9a:8b:69:d5:d8:1e:db:31:2a:d0:7b:d9:20:76:5e:43:a1:7a:
0f:1f:29:00:eb:e2:49:f0:60:44:d8:cc:87:e4:a0:99:6e:e8:
26:4d:bd:d4:f8:10:e2:bd:99:13:00:28:92:48:3c:d9:99:51:
b9:f0:d4:b8:4a:fa:ff:4b:fd:75:db:1b:86:f6:b6:8c:77:e7:
20:a9:ac:05:5f:f7:b7:3c:91:b6:61:ef:20:5d:20:2b:9e:62:
e6:f1:79:98:cf:04:6c:43:ec:89:0c:c8:5d:84:12:ca:27:66:
eb:df:d5:77:8c:4c:ed:f3:b8:0b:4f:db:4d:0c:84:b0:f3:a0:
39:a0:9e:a7:15:78:22:42:0f:b6:bd:62:21:9a:2f:8a:fa:2c:
75:0f:98:52
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICARgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUM0MzlBRjExMC8GA1UEBRMoNTg1RTMwN0MyMDcwMDk2NDAzNzdGMkM2N0E3OTdC
NjE4MDU4NzMwNTAeFw0yNTAyMTYwMzAxMTZaFw0yNTAyMTgwMzAxMTZaMBgxFjAU
BgNVBAMTDTY3YjE1NGZkLTcwZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCy3YPf0wP2u7iUS/Oszk2t7mKhiVv5PssPwtpTujOAEEeiMpAqZSBkt02b
FNVBJ2RPE9h2aVw0wBMig+jphzfVoALdw3i9uuhCytBpQ8yALDD1YUXoc8+ah8R4
GNxiAyrbfUJTEGxKStgQO322CzKzgD28w8N6U5IJjD9NQdijoB/rMQyFNoLvf4aO
ERVJZJzHEcVAc2QoAWnpxUNvBHslHexTC7Mp6hEbUDLWEUtmYcGsWM79Oa1kCie7
K2rH3qc/KdnSVrxtaIWUjHs004IBm+ajj4Wqp488n6uCv0SNOY+iRAz9xHBlH6yO
ihpPLCxEXPeXIFuNiivDOcUKN1V3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkLIg
BS25lHbcv6HMpO3Z2hD6vnIwHwYDVR0jBBgwFoAUWF4wfCBwCWQDd/LGenl7YYBY
cwUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDNDM5L0QxRjM0MEQ4MTlDMTExRUZCMkM3Mzg0RjAxNzAwMUIxL1dGNHdm
Q0J3Q1dRRGRfTEdlbmw3WVlCWWN3VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dGNHdmQ0J3Q1dRRGRfTEdlbmw3WVlCWWN3VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUM0MzkvRDFGMzQwRDgxOUMxMTFFRkIyQzczODRGMDE3
MDAxQjEvV0Y0d2ZDQndDV1FEZF9MR2VubDdZWUJZY3dVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXff4MoAMZW2Sfjx5WJkjWFwAXJDOK
zoMR9AHNrOKWbxZAnvau+zktwjzowmVVdgC97yFC1rJhn3jjLMKRSVKkB8PUtKFF
V6Ln8uA6FOi9XZCTOvpJy2SgCRMBHr35Lss67oZjdMQyhbZNW2Wai2nV2B7bMSrQ
e9kgdl5DoXoPHykA6+JJ8GBE2MyH5KCZbugmTb3U+BDivZkTACiSSDzZmVG58NS4
Svr/S/112xuG9raMd+cgqawFX/e3PJG2Ye8gXSArnmLm8XmYzwRsQ+yJDMhdhBLK
J2br39V3jEzt87gLT9tNDISw86A5oJ6nFXgiQg+2vWIhmi+K+ix1D5hS
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:58 2025 by rpki-client