Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
File: 5hfTT1TsLbm6WEBc2glDH9OB8xY.mft (raw, json)
Hash identifier: zyNrgpoQnaTuSJ759iMr1fAobHBQEx7ueG6qi2CPqwQ=
Subject key identifier: AB:59:F2:57:CB:D5:D0:C0:C9:43:4F:14:87:EE:C1:54:F3:18:D0:C2
Authority key identifier: E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
Certificate issuer: /CN=F3664674AF/serialNumber=E617D34F54EC2DB9BA58405CDA09431FD381F316
Certificate serial: 0608
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
Manifest number: 0607
Signing time: Sun 16 Feb 2025 01:36:04 +0000
Manifest this update: Sun 16 Feb 2025 01:36:04 +0000
Manifest next update: Tue 18 Feb 2025 01:36:04 +0000
Files and hashes: 1: 5hfTT1TsLbm6WEBc2glDH9OB8xY.crl (hash: FfMrH24VBM3I6FVIAkD9WyT3za5F7C06P+IUZJaOLxg=)
2: DC07DCFC75A311EBA15FBF16F8AEA228.roa (hash: HzSupgDeIXHg7YvZFZX2CGPofAxurmulFBlW5Eaf4z0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1544 (0x608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664674AF
Validity
Not Before: Feb 16 01:36:04 2025 GMT
Not After : Feb 18 01:36:04 2025 GMT
Subject: CN=67b14104-d247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:6a:06:25:86:b5:9a:77:c4:65:3d:02:30:
c4:76:86:a9:5d:0f:60:f2:ef:ec:ac:6b:bf:93:40:
26:64:8a:bf:aa:cb:1b:25:d7:90:4f:8c:83:e2:b5:
76:15:32:df:24:ea:b3:77:35:9d:b2:91:55:b9:6d:
99:2e:6d:0a:1d:27:d4:36:bf:e6:43:0f:8b:eb:9b:
af:bb:c4:2e:f8:78:59:2b:8b:ab:bb:08:f0:30:0d:
13:b3:93:46:36:33:98:f1:2c:55:33:06:14:5c:9a:
91:7d:9f:e0:1a:61:06:e3:f7:3a:f8:2f:f1:de:0e:
be:94:7a:08:d7:72:8d:50:88:39:8c:f4:bc:7f:9e:
b4:0f:7f:2a:9e:e9:e7:2f:fd:91:c1:f8:99:91:b8:
30:63:cf:22:d5:71:52:d9:79:75:b5:90:10:9f:9d:
a0:06:20:c8:8e:d9:7a:e9:58:8d:6d:3f:fe:1c:e7:
d9:25:14:72:99:20:3e:4f:93:f5:d7:78:cd:9f:01:
4d:38:d8:66:a5:a2:e3:20:6a:cb:96:40:92:36:14:
38:82:0c:73:b7:57:89:51:6c:4c:c8:7e:a6:82:ec:
cc:e2:9e:18:96:43:3c:18:11:9f:05:8d:4b:4f:4e:
15:d2:7d:cc:24:bc:86:71:91:64:4a:24:68:ba:d5:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:F2:57:CB:D5:D0:C0:C9:43:4F:14:87:EE:C1:54:F3:18:D0:C2
X509v3 Authority Key Identifier:
keyid:E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:49:9c:70:24:5f:4d:72:a2:ba:4d:9c:33:b1:14:11:ea:5e:
11:d2:58:ad:15:15:ad:8f:41:f2:91:da:29:cd:67:eb:3f:85:
e0:5e:94:a2:1b:c5:7e:8e:2a:a3:5b:c7:ac:97:64:6a:68:44:
b2:3f:63:0e:ae:aa:9a:48:2c:c0:6c:e2:02:53:19:dc:84:84:
12:75:b1:21:c9:2c:67:ac:92:69:2b:f0:78:2a:1f:e2:f3:71:
9d:b4:37:ce:6c:28:47:d9:7b:8a:d2:89:52:dc:b5:d4:bb:9b:
c7:c8:37:4d:af:12:98:5c:3b:8f:18:56:20:06:83:51:fd:15:
ab:3d:f8:46:5e:07:1a:1c:ed:a1:6c:ea:16:b7:23:c5:6e:ea:
11:65:20:20:e0:46:07:fd:11:25:d9:d3:29:9a:74:0a:f6:ad:
d2:80:b6:18:1e:cd:48:72:6e:9e:bc:9e:17:d3:81:e1:c3:1b:
a7:ae:2f:ee:b6:76:7a:45:f4:98:81:26:fa:b6:aa:af:39:14:
c5:ad:64:36:62:17:a2:8b:da:da:a7:c8:43:35:b8:09:3a:b2:
ac:1c:54:ff:49:8c:08:18:6e:62:c2:5f:fc:88:9d:e5:21:e7:
80:e1:9f:07:a7:68:dd:0b:e1:05:4e:47:29:40:49:8d:34:25:
d4:e4:69:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:57 2025 by rpki-client