Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File: NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier: hqtOhpNOwbivMJqtqm5jJvEGuhoxigtW2f6pQHvY9KU=
Subject key identifier: 99:15:19:EF:B2:BA:53:09:43:CE:F9:35:C5:EA:F1:B1:8A:8F:60:82
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer: /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial: 048A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number: 0488
Signing time: Thu 03 Apr 2025 01:59:17 +0000
Manifest this update: Thu 03 Apr 2025 01:59:16 +0000
Manifest next update: Sat 05 Apr 2025 01:59:16 +0000
Files and hashes: 1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: +de7CYfpPlBg/luGyLMhxUMwZ2uyrHtMOHM0GEJm8vg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666101AF
Validity
Not Before: Apr 3 01:59:16 2025 GMT
Not After : Apr 5 01:59:16 2025 GMT
Subject: CN=67edeb75-a29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:74:e3:59:2a:d3:70:93:02:a8:40:1a:49:
c7:1e:d8:a8:62:46:6a:ff:57:6e:38:1f:67:b4:13:
53:60:f3:8c:33:53:72:23:a5:9e:97:51:4b:93:11:
2a:1c:b4:e5:27:0f:f9:f3:e4:a6:5d:d1:43:38:44:
e2:c1:e3:b1:4a:ca:05:a8:9a:dd:bb:22:ac:58:67:
d9:55:28:eb:5f:d4:96:ba:9c:19:d2:3b:fd:9c:72:
b5:bc:d5:b8:15:da:7e:29:93:cf:a3:98:1f:12:d7:
c6:c0:0f:49:30:f4:2a:67:0c:c4:d6:14:ca:a5:21:
6b:ef:a0:16:2e:bc:13:98:48:7f:12:89:09:c5:ec:
86:4b:0a:41:12:1f:8d:2e:d1:78:03:69:da:75:b3:
c1:d4:82:27:f4:66:6e:82:63:d8:e5:a3:c5:d0:36:
43:d1:3a:29:f4:e2:84:cb:e2:32:e1:40:f7:68:db:
05:a3:50:6c:f5:36:d7:40:96:d7:16:ea:2c:78:49:
b0:05:8d:14:91:18:6d:b2:8e:ae:56:b4:b2:c3:a7:
23:5d:59:06:0e:e4:be:ed:23:17:46:50:da:60:74:
dd:e8:99:c6:71:b1:cb:2d:ac:84:40:98:73:28:35:
3b:26:86:38:50:ba:54:ed:78:7a:91:09:67:64:74:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:19:EF:B2:BA:53:09:43:CE:F9:35:C5:EA:F1:B1:8A:8F:60:82
X509v3 Authority Key Identifier:
keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:55:7d:71:0f:2c:97:9d:af:69:3b:69:c2:85:d6:c2:7a:72:
f4:c8:05:fa:f7:b9:3b:27:02:be:33:b9:fd:e0:50:eb:e5:7f:
b4:6e:e4:1b:e6:5e:24:ed:17:33:17:8c:e6:60:aa:45:5d:4f:
10:2e:bf:30:22:a6:59:df:0b:f3:50:ad:6c:ae:d4:a0:8c:cd:
83:50:fb:01:52:66:39:e3:a0:6f:c4:8f:20:b3:7b:82:17:02:
ad:d7:43:05:a0:b0:d1:c5:45:54:77:e1:ea:6b:27:ff:c7:d8:
40:1f:2e:22:b3:f5:91:5c:c3:ae:3b:ac:63:8f:a8:d8:00:e9:
d0:c1:4d:b2:c1:22:41:65:aa:01:84:f8:49:46:5d:bb:2c:21:
fc:66:7c:63:11:8d:0e:ce:1d:8d:a0:77:41:68:9a:ed:25:96:
be:48:3b:a6:0b:1e:cc:12:4f:fa:f6:58:35:7f:69:fe:99:c1:
c6:2e:8b:b0:3f:81:c4:96:94:fb:65:f1:a6:a7:64:3b:7d:ce:
b3:2e:35:8e:34:37:e9:37:85:53:8f:d6:cb:57:7f:a3:16:da:
a3:1d:16:d6:b4:4d:8f:5d:7a:36:42:e8:f3:ed:f0:ff:44:5b:
e4:b5:04:39:51:4b:1a:d9:28:ad:38:7b:60:f3:4f:53:c8:ce:
74:14:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:24:31 2025 by rpki-client