Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
File: 5hfTT1TsLbm6WEBc2glDH9OB8xY.mft (raw, json)
Hash identifier: AdYDkjkZSmt6rgASn1nvqHNEmNTx9xf0ispsiDV6KHA=
Subject key identifier: 3E:39:94:F0:1E:20:1D:44:91:71:51:90:66:D0:AE:1B:51:CF:44:6F
Authority key identifier: E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
Certificate issuer: /CN=F3664674AF/serialNumber=E617D34F54EC2DB9BA58405CDA09431FD381F316
Certificate serial: 0621
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
Manifest number: 0620
Signing time: Thu 13 Mar 2025 01:34:47 +0000
Manifest this update: Thu 13 Mar 2025 01:34:46 +0000
Manifest next update: Sat 15 Mar 2025 01:34:46 +0000
Files and hashes: 1: 5hfTT1TsLbm6WEBc2glDH9OB8xY.crl (hash: wt7jH24S5jBJqcsWR4ZYh+NiwwCcMYknM9C+eehFFEc=)
2: DC07DCFC75A311EBA15FBF16F8AEA228.roa (hash: HzSupgDeIXHg7YvZFZX2CGPofAxurmulFBlW5Eaf4z0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664674AF
Validity
Not Before: Mar 13 01:34:46 2025 GMT
Not After : Mar 15 01:34:46 2025 GMT
Subject: CN=67d23637-af5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:72:83:f1:57:ba:a7:03:42:6d:e6:38:d2:
a1:f8:b5:a5:d5:b5:2b:c5:f4:b5:10:96:cf:ac:25:
42:f0:b9:1e:02:8a:89:38:78:d2:8e:ad:79:e0:b7:
2e:98:be:a8:68:6d:ce:15:bd:44:b1:37:df:c7:b6:
49:ea:ae:9b:c9:04:ce:ec:19:53:b9:c6:a2:bc:bf:
3f:c0:99:39:69:7c:6c:41:fe:5b:17:19:85:4e:bd:
92:e7:2c:38:91:c4:f9:5b:00:04:8a:f5:f4:9e:d9:
53:9d:a8:83:4e:2c:2c:ac:c0:4c:87:3b:23:3e:f2:
78:ce:db:11:99:a5:20:1a:21:6b:56:db:6f:66:92:
7d:f3:23:21:b6:a9:76:7c:bd:1c:d5:81:a1:5b:f9:
0c:e7:f3:85:a9:07:79:3c:ee:26:a7:f6:ef:20:11:
3b:cf:68:2e:76:fb:78:e2:ad:de:ae:0b:30:6c:6c:
54:6e:94:da:5a:68:3e:47:4e:ae:b2:28:12:06:57:
b9:89:76:6f:0c:e9:ed:a8:77:42:24:9c:85:0a:5a:
b1:ee:67:88:47:1b:0a:91:d0:18:f3:4e:84:8f:a9:
06:da:bf:7c:c1:4f:81:64:2e:b3:78:17:b8:02:e8:
fb:0a:24:9c:80:cb:b2:16:00:47:d9:fe:79:42:fb:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:94:F0:1E:20:1D:44:91:71:51:90:66:D0:AE:1B:51:CF:44:6F
X509v3 Authority Key Identifier:
keyid:E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:28:06:3f:42:2f:4b:aa:42:4d:54:36:d4:1e:90:82:c7:ac:
8b:0b:f0:53:a8:fc:40:bd:c1:bf:e6:b9:4c:43:e5:9b:3a:df:
f6:b6:e0:33:6a:fe:10:3d:36:20:81:28:b8:28:e0:92:5d:11:
0d:fe:6d:35:82:4a:29:fa:4f:0e:33:88:20:9d:76:4a:4f:b4:
a5:ed:22:43:38:e0:33:f4:cf:06:73:5c:9a:fe:25:f1:e8:fc:
d0:19:c3:3d:b5:b7:04:05:24:4e:3d:ef:2a:52:44:ae:b5:35:
98:1e:15:b7:c6:71:5c:7a:cd:77:76:91:78:f0:6b:07:e9:6f:
c7:d5:28:20:61:7a:82:55:12:9d:01:21:bc:46:39:4e:a6:b8:
7e:ac:1d:38:66:af:f4:a3:9e:df:41:37:e4:0c:9f:14:5c:df:
a2:a9:7f:a1:f0:da:70:a1:19:85:4a:16:88:51:55:1d:0b:a7:
a4:29:9f:6b:08:f7:6a:92:e4:d6:ad:89:5e:ea:6d:79:8e:be:
ca:0a:85:54:e5:d1:da:69:c8:f8:5c:4e:db:c3:d5:57:15:03:
d3:d1:05:88:eb:45:20:eb:12:d7:58:3e:d6:cb:ed:e4:3d:d6:
ae:90:86:b5:aa:25:24:db:67:91:2a:ff:61:f2:e6:9d:5f:05:
36:48:44:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:22 2025 by rpki-client