Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File: rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier: 7TkK0cNnCmscdNw/YVhxXrFTVBjKTEUVKXcVUYpQrBI=
Subject key identifier: 38:F5:48:4A:E2:12:37:63:42:D7:F8:5B:D2:7B:50:3E:04:A5:1D:BD
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer: /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial: 086E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number: 086E
Signing time: Thu 03 Apr 2025 01:16:16 +0000
Manifest this update: Thu 03 Apr 2025 01:16:15 +0000
Manifest next update: Sat 05 Apr 2025 01:16:15 +0000
Files and hashes: 1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: +8kfCsfBj0oCg0tNoHvVug5wuse9ux2LkxEqkfg2r+o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660C14AF
Validity
Not Before: Apr 3 01:16:15 2025 GMT
Not After : Apr 5 01:16:15 2025 GMT
Subject: CN=67ede160-2910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:b3:14:58:06:f8:8f:39:39:88:a3:a2:35:
1a:41:36:46:57:b5:17:54:83:be:27:fc:eb:68:6f:
c2:ab:25:69:5e:ac:ae:5f:66:bd:c9:b0:0a:16:08:
64:5d:8c:ce:34:ab:5b:14:af:f3:71:89:6c:a1:83:
4b:46:aa:9b:97:0f:ea:38:10:95:81:1b:f3:c1:6d:
42:21:03:c8:f0:c7:fd:93:9f:1b:2b:1a:cb:d9:a9:
77:fd:14:c3:85:e5:e7:a6:92:bd:76:6f:50:e3:b3:
fd:80:25:b0:85:11:c7:9d:d3:97:ab:8b:6f:a9:77:
f5:64:29:0d:7b:42:2c:b0:47:1c:95:15:ea:75:17:
bd:7c:80:68:5a:28:f2:ed:b9:92:2d:b6:c6:69:27:
7a:2e:47:34:74:47:61:bf:7b:38:98:f3:3d:ee:c3:
2a:6f:88:e9:4b:1a:e1:b9:c1:4e:af:d1:0b:ff:7e:
93:0e:34:7c:c2:67:44:a9:00:18:6d:cd:89:d4:5d:
df:31:fa:53:0e:af:39:a2:56:5d:80:d5:e1:2d:5b:
96:a3:92:45:55:13:c2:87:37:30:60:e3:d9:1d:3f:
be:8d:48:00:4c:34:ad:0d:cb:07:f9:02:bf:39:9c:
2d:d6:b9:6a:5b:75:34:48:f5:27:9d:03:17:c7:34:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:48:4A:E2:12:37:63:42:D7:F8:5B:D2:7B:50:3E:04:A5:1D:BD
X509v3 Authority Key Identifier:
keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:87:a7:99:56:84:9a:3c:8b:13:5a:43:c9:e2:3d:76:00:
06:1a:0c:e4:5c:08:fe:1c:c2:0d:a2:34:bd:9b:56:44:1b:1b:
ce:71:2f:04:6e:1b:be:44:d0:ed:b0:21:00:b2:e6:43:73:7c:
89:b2:fc:fc:98:d9:e6:43:8e:e6:9a:f4:7c:3b:00:75:4a:62:
94:75:39:f4:8e:5d:d6:5d:2f:ab:ae:bd:c9:8a:48:63:ea:0b:
d4:15:e7:fb:dc:43:ea:cd:8e:0c:95:de:46:4c:5c:1f:f8:be:
15:80:0e:ed:b3:8c:aa:57:5e:e0:02:db:8d:3d:e9:e6:e1:6a:
a9:7e:4b:82:66:ab:56:59:10:6c:87:94:e2:72:f2:4d:e7:cc:
e6:6f:0b:ae:f2:98:99:27:94:27:74:63:9f:8d:32:c0:61:a3:
5b:d6:be:7e:91:00:53:69:30:c7:c0:91:47:c1:9a:17:1b:ec:
d6:cb:83:d2:d2:2f:c1:d3:19:7e:47:4d:3a:1a:92:5c:44:10:
0c:89:79:98:9e:1e:60:30:8a:52:5a:5a:64:c6:6d:79:4b:43:
f7:f1:19:21:2e:3c:94:2c:40:11:0b:d0:0f:85:02:a0:a7:2a:
6e:75:86:97:42:ce:22:45:af:59:ff:e1:b4:5a:ab:ab:18:2a:
5e:09:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:51:22 2025 by rpki-client