Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File: y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier: dgXfOriltnRyKptU70EwFLryCKoS1CYrZunrs1Mj2JI=
Subject key identifier: DE:A9:DB:F8:21:46:9B:67:78:99:96:D9:B1:C2:6C:DA:C9:F8:EB:13
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer: /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial: 0745
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number: 0742
Signing time: Thu 03 Apr 2025 01:25:12 +0000
Manifest this update: Thu 03 Apr 2025 01:25:11 +0000
Manifest next update: Sat 05 Apr 2025 01:25:11 +0000
Files and hashes: 1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: FLTFGy7XYe0vKMEEo/ChUfxPDNn6wgw8CeEVymqDuu4=)
2: AE18FBD67CA911EEB6D3DD404AD9E6FC.roa (hash: EUXpIG95DQgNgpSPlS78r4ZPbIQJ7nP3j1DIht+45k0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1861 (0x745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663CEEAF
Validity
Not Before: Apr 3 01:25:11 2025 GMT
Not After : Apr 5 01:25:11 2025 GMT
Subject: CN=67ede378-1dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:92:7f:ce:70:f3:18:6c:05:28:60:d8:21:
e0:9b:05:c0:86:7a:2b:bd:52:a4:f9:3c:f6:14:75:
91:27:1f:8a:fc:57:b9:c9:b8:e5:b2:2d:bb:cc:b8:
d6:43:8f:74:35:bb:c2:40:4f:54:9d:93:7b:0b:08:
e4:cc:c8:20:ab:96:f5:26:6a:0b:ac:93:ed:92:9e:
b2:1d:19:be:68:06:a9:8e:1b:50:61:e1:d9:6f:0f:
82:1a:96:df:2e:29:cb:bd:a3:f4:8f:37:9c:ff:fa:
ff:68:86:d2:29:95:e7:ba:ff:83:c8:fd:a0:e3:71:
03:9b:2b:35:36:ac:e9:3b:5c:21:f7:5a:25:9c:78:
ea:8d:e1:6d:0e:b7:20:27:7c:dd:d3:30:2a:31:f6:
da:8f:ea:85:32:9a:e6:58:6b:75:b5:98:53:85:35:
6d:bd:02:72:be:ff:df:b1:5a:99:0e:aa:24:03:05:
6f:88:a8:83:03:e5:43:67:4f:94:c6:98:9b:aa:8d:
0f:39:e3:24:fc:c2:32:9c:04:19:20:2d:dd:d5:a5:
2a:eb:89:18:87:8e:03:2d:51:d0:a4:3a:bd:98:28:
d4:2e:cf:e1:74:3a:99:77:b6:7a:2f:4e:97:92:2a:
11:d3:8c:b9:9a:17:38:2a:6a:16:91:67:dc:78:a4:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:DB:F8:21:46:9B:67:78:99:96:D9:B1:C2:6C:DA:C9:F8:EB:13
X509v3 Authority Key Identifier:
keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:33:d2:13:fa:0b:29:16:b5:a3:3a:06:27:0e:ed:e0:46:9e:
49:49:75:07:2f:64:0e:47:6d:7c:62:4f:d7:3f:f6:18:f7:18:
c9:7d:17:e5:5b:c5:03:08:97:b2:0e:33:7f:20:27:87:c3:d2:
9f:f6:53:98:26:61:3c:e0:d7:b8:32:1d:61:0f:da:e0:66:55:
0b:ef:38:aa:bc:49:dd:62:61:5e:87:7e:4c:64:62:e6:55:f3:
9f:29:4a:d9:89:2b:a5:97:da:43:74:b2:7c:0b:55:e3:18:68:
f8:60:da:bb:6f:8e:76:55:bb:37:39:88:a2:93:ee:f9:65:db:
e2:f6:f5:ac:9d:c0:78:41:00:8d:c7:72:a8:43:83:14:5d:fd:
f9:9f:e2:8c:3b:c7:de:1d:35:d0:9b:2e:6f:9c:6b:15:08:44:
ee:66:0c:a9:3a:22:3d:f8:b2:6d:fa:f2:58:09:3f:8a:d6:a6:
3b:df:1c:9e:82:b8:5b:6b:48:1c:54:7d:17:ce:7d:cc:6f:1e:
c1:1f:c2:db:b2:9a:ad:05:90:01:d3:51:fd:5c:b2:e7:43:a1:
81:c9:e6:1d:03:a9:19:0c:51:d8:3c:91:82:8d:26:45:37:e6:
ec:f9:ea:ef:48:cc:53:93:ba:a8:1b:88:3c:20:1e:db:ec:2c:
c3:77:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:20 2025 by rpki-client