Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File: XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier: 6ZtoVgNpVjM5AiC4Ar+0aHy340GhKdbLRDE//VUFFBo=
Subject key identifier: 64:94:33:82:3C:63:CE:68:91:C1:6B:81:A3:EC:0D:62:DC:58:38:0B
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer: /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial: 035D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number: 035B
Signing time: Sat 12 Apr 2025 02:19:11 +0000
Manifest this update: Sat 12 Apr 2025 02:19:11 +0000
Manifest next update: Mon 14 Apr 2025 02:19:11 +0000
Files and hashes: 1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: qbucmY51LgfCIoK3s9ONMDjlVYO7oxBZRK4kvXrws2I=)
2: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861 (0x35d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Validity
Not Before: Apr 12 02:19:11 2025 GMT
Not After : Apr 14 02:19:11 2025 GMT
Subject: CN=67f9cd9f-7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:a2:3c:e6:b5:c7:f6:0c:fa:66:52:ec:da:
fd:bc:89:35:c5:6e:3d:1f:06:85:20:5d:b8:b2:ad:
9e:68:04:60:eb:a0:7d:11:cf:d0:7e:d0:42:7d:43:
84:76:3c:e4:d9:20:65:1e:f2:7d:36:dd:cd:13:fa:
5c:f2:52:6a:e3:a4:87:8b:a9:ff:2d:54:c3:97:1d:
c4:65:05:43:04:0b:d4:de:5f:8f:e3:dd:8d:cf:8f:
c7:fa:26:26:f2:5c:96:b2:93:4f:1a:cc:c4:9d:2c:
c0:9a:11:4c:81:b0:c9:a8:bd:80:e2:9a:ca:d1:63:
e4:e6:22:00:a7:fb:fb:41:f1:da:45:b7:6b:8a:97:
f4:ed:cd:4c:29:6b:fd:c6:79:a7:10:d8:cd:f0:dc:
fb:ec:bb:63:74:bf:1f:a2:3f:8a:52:10:ee:68:bb:
f7:eb:af:0d:75:69:c4:8d:25:74:4d:28:9b:16:a2:
2e:37:3b:ea:28:3b:08:7b:7c:ff:0d:59:ab:db:70:
d9:da:6e:8d:32:ed:8b:af:b8:b9:2e:8c:76:0f:a2:
f6:40:72:84:82:d1:35:fa:4d:49:a6:ce:17:a6:5a:
48:ce:55:3b:72:99:fc:e2:2e:12:56:c5:9f:a1:63:
92:97:47:e1:3b:9d:a6:d4:25:6c:ca:bf:0f:3f:10:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:33:82:3C:63:CE:68:91:C1:6B:81:A3:EC:0D:62:DC:58:38:0B
X509v3 Authority Key Identifier:
keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:91:9e:f6:53:73:ed:14:e3:50:24:9f:3d:58:f7:b5:ad:76:
3a:03:b1:87:39:4a:92:92:ef:cb:6c:8a:8b:e6:52:41:fc:c2:
e4:98:65:5a:91:e5:4e:34:ed:13:08:76:b6:38:6e:e6:42:90:
5f:5e:24:58:d3:2a:02:e8:70:f3:2c:67:ed:2d:a7:a8:ed:ec:
12:30:42:f5:36:72:1f:91:76:48:36:41:15:dd:e8:bb:5f:15:
28:cb:c5:cf:b1:93:4a:64:48:62:c2:65:68:8b:36:72:3f:1f:
71:79:11:45:e0:1e:99:82:1e:51:ac:84:c8:ef:f6:5b:cc:05:
23:ee:2a:1e:38:95:e7:34:ff:41:b9:20:2a:b4:17:bd:6c:5a:
d8:ae:95:92:c5:a5:0f:79:45:e3:5c:60:95:a5:97:df:67:9d:
22:14:5e:6e:dd:0c:58:6c:83:5d:09:cb:f7:8a:07:2c:d2:d5:
5b:a3:73:7c:3e:5a:4e:e6:23:75:f3:25:f1:ee:8e:ad:a4:e0:
b9:b7:ec:0d:bc:9c:e0:b5:c8:35:0a:8f:a8:b6:00:8e:1b:3d:
9f:d4:ff:a6:62:85:05:1d:c8:10:0e:39:28:91:cf:da:80:8c:
f1:fe:f7:6c:5f:57:c5:32:0b:36:09:3e:64:d1:7f:3b:0f:32:
e7:fd:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:24:27 2025 by rpki-client