Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File: lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier: 7zaDoj74YSm1V8K1lQ7Wy8Dr7FpH7b7RqbV6b73AkCA=
Subject key identifier: 9B:02:C2:6E:0F:A4:D8:58:14:7F:46:ED:43:BA:A4:3B:3D:5B:2F:10
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer: /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial: 02B9
Authority info access: rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number: 02B9
Signing time: Sat 19 Apr 2025 03:45:52 +0000
Manifest this update: Sat 19 Apr 2025 03:45:51 +0000
Manifest next update: Mon 21 Apr 2025 03:45:51 +0000
Files and hashes: 1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: gEwTksE5LXmE+dGssxUKPKvqILZf7ivnJLHGn6i443E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 21 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Validity
Not Before: Apr 19 03:45:51 2025 GMT
Not After : Apr 21 03:45:51 2025 GMT
Subject: CN=68031c70-603d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:dd:dd:1d:86:4f:87:d7:37:c3:61:ac:8d:
06:ee:3e:a3:0d:5c:61:21:e2:c6:e3:65:31:3d:85:
a2:30:04:35:d5:6c:15:df:d8:21:59:84:56:12:66:
1c:b5:61:12:72:0d:cc:32:20:31:1a:ea:ca:62:f7:
9f:76:e4:3a:59:09:01:c7:09:f8:3c:ce:f6:fc:51:
e5:2f:e2:61:65:c9:1b:e5:48:13:3a:84:aa:6b:7e:
3b:53:f8:ff:47:06:2e:bc:c2:fb:eb:32:3f:16:75:
f1:61:d5:b6:df:ad:3f:19:4a:56:ba:22:3d:a8:08:
32:ea:d5:ab:91:77:cf:20:58:9c:6d:3a:dd:60:d3:
c5:bc:9f:02:bd:76:8b:98:3d:a1:f2:7e:8d:81:96:
de:68:4c:b5:33:83:e9:44:4a:9a:c7:ec:65:45:95:
53:63:38:7e:b3:24:6c:b3:73:a8:24:59:52:9b:a6:
21:c0:2d:f4:96:4a:e1:a0:4f:69:e0:bf:16:fc:80:
c9:71:54:c6:2b:f8:75:25:66:48:13:be:2a:20:7e:
f3:44:b0:a2:a2:e6:60:95:3c:f9:c5:5e:65:ac:c1:
34:49:11:4f:35:3c:b9:ac:e8:98:33:89:ac:97:86:
f2:00:f4:7d:de:18:e1:c9:67:68:7f:0d:80:f1:f6:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:02:C2:6E:0F:A4:D8:58:14:7F:46:ED:43:BA:A4:3B:3D:5B:2F:10
X509v3 Authority Key Identifier:
keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c9:2a:bc:71:99:b4:fe:1a:d0:5a:59:c9:bf:b1:ff:c7:f7:
aa:af:1b:ff:90:7c:82:ce:fd:50:3a:30:8c:0d:f2:9d:f7:25:
3a:6d:e2:20:58:6e:2d:47:7f:d3:69:75:7e:92:9a:0a:39:d5:
e4:75:0e:e1:53:df:63:c8:4c:ad:cf:b0:94:c2:cf:06:45:70:
06:55:5c:c9:c9:1e:28:7f:e0:d8:6b:cc:af:2f:cc:45:61:e6:
01:e0:36:2a:4f:73:7e:4d:d9:2b:d6:32:ce:91:62:7b:ca:d3:
30:6b:ec:45:75:fd:c6:51:bf:0b:40:0e:bc:c9:4a:b7:5b:80:
1b:ef:cc:a3:d7:04:3d:22:fc:e6:59:49:b4:39:36:f0:26:1e:
c2:bf:8d:d9:de:6a:d1:e0:ca:a7:46:e5:03:f1:cc:77:5c:07:
33:d1:c8:b8:ca:a1:75:8a:77:92:55:01:df:e4:a4:01:8b:38:
60:fd:29:0a:fb:5f:e0:32:10:b0:71:53:fd:60:5b:65:29:46:
ae:14:1e:37:c5:be:ea:06:36:6d:37:b2:f1:2d:5f:8a:61:17:
bf:0a:d5:e3:00:1a:20:b7:e7:5e:20:f1:b2:d3:97:ac:ec:1c:
a1:03:a2:c3:2b:28:3c:0e:44:37:dd:56:bd:f3:2a:14:88:75:
66:c8:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:53 2025 by rpki-client