Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File: xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier: puA8NvahLQ370emqRS32q51eGH8vs5o++LN2h+n47aY=
Subject key identifier: 8A:80:C2:58:82:E2:A1:5E:07:E0:1F:29:95:6C:CD:B7:1E:26:7C:F3
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer: /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial: 0522
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number: 0520
Signing time: Sun 16 Feb 2025 01:51:21 +0000
Manifest this update: Sun 16 Feb 2025 01:51:20 +0000
Manifest next update: Tue 18 Feb 2025 01:51:20 +0000
Files and hashes: 1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: qg5H+NTllW/La6rHJpvTGaJcypNNW2xrRgZ+xSPpUCA=)
2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3667885AF
Validity
Not Before: Feb 16 01:51:20 2025 GMT
Not After : Feb 18 01:51:20 2025 GMT
Subject: CN=67b14499-d6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7a:6f:22:86:74:da:a5:fd:05:91:0c:74:c9:
f1:60:e4:ba:47:82:bd:13:fc:a2:79:95:b7:e8:24:
83:c1:17:a7:52:cd:74:44:30:9a:c5:0f:07:17:a7:
3f:8a:45:38:81:cb:fc:dd:d5:aa:4b:c9:2f:4c:9b:
a5:9a:e7:1c:0c:96:f5:96:9c:f3:f5:90:27:b0:6c:
1e:85:3e:a2:cb:9d:3f:79:15:e2:03:0e:50:4c:59:
40:b5:57:28:05:38:25:96:fe:ad:0a:e9:19:17:c3:
f3:69:c4:1c:47:d7:30:91:60:76:c6:ea:f9:50:8c:
c5:13:e4:5a:0f:d3:a4:57:9c:14:2f:a2:5a:a5:c3:
3d:24:00:5e:2e:2c:02:98:3b:e5:0e:7d:bd:bb:82:
20:e7:ba:97:68:fc:9b:7e:05:55:0c:52:92:b8:aa:
0e:07:ff:61:d5:87:ab:0a:cc:f6:aa:69:a8:c5:d8:
0d:bb:e5:d8:28:13:60:bf:ca:6a:4d:90:5d:7e:53:
c1:2b:99:3c:25:0b:8e:0c:36:4e:ad:13:f4:5a:f5:
76:54:1b:73:0b:0f:87:cb:47:63:04:a0:f9:ce:c3:
6e:37:f4:29:7c:69:8e:c9:b0:5d:f3:4f:32:51:e2:
a8:95:fd:20:42:1a:b0:a1:9c:6d:16:68:a7:0e:35:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:C2:58:82:E2:A1:5E:07:E0:1F:29:95:6C:CD:B7:1E:26:7C:F3
X509v3 Authority Key Identifier:
keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3a:99:e5:91:86:a1:2f:49:b7:f4:0d:d7:8c:1d:35:3d:bb:
31:2a:4c:6e:80:9a:4c:1d:b0:8e:34:21:e0:9f:d8:94:db:74:
2c:e0:26:37:66:ba:d6:0c:03:1f:34:df:b8:a9:e6:d1:63:13:
f4:14:67:47:b4:e7:fe:fb:4c:50:98:59:30:f1:c3:0a:c9:17:
ac:b7:f5:bf:2b:b1:79:06:e4:e3:99:75:9c:5b:83:34:b8:aa:
a9:87:f7:e2:39:00:ef:b4:c5:1c:a1:13:37:bb:42:cf:df:a6:
bf:fe:2f:2e:06:96:bb:47:37:6b:44:b0:fb:70:e2:3b:26:79:
c9:8e:56:ff:bb:6f:1a:62:72:aa:f1:40:be:a5:93:72:04:f8:
3b:14:7d:64:57:9f:a8:0a:3b:88:e2:49:e0:e8:a6:df:9f:89:
e5:25:a2:39:c5:56:67:b6:97:ad:7b:41:e3:d0:5b:0f:3b:61:
28:89:36:0f:65:e6:11:c2:99:cb:a9:c0:a8:ac:b8:e3:1c:04:
27:86:1d:cc:da:89:5a:cd:d5:30:41:45:ea:fc:0b:75:3a:c5:
d7:fe:0c:5c:b5:d4:90:38:50:1b:6f:ee:91:6d:28:64:21:dd:
0a:50:b3:ab:ec:55:39:ad:f6:01:55:88:3f:cf:71:17:57:c9:
b8:44:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:23 2025 by rpki-client