Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
File: TFQzRWcaPQxAiChKkfx3-2zGsGg.mft (raw, json)
Hash identifier: as9EAZ7GeItvyvIscTxbRKpG9F27+//eCae/xUzq2Hg=
Subject key identifier: 1D:D9:C8:6A:78:6F:D7:9F:33:15:6E:E6:EC:6F:8F:1E:95:A9:B4:5C
Authority key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
Certificate issuer: /CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Certificate serial: 0B12
Authority info access: rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
Manifest number: 0B11
Signing time: Sun 16 Feb 2025 01:01:35 +0000
Manifest this update: Sun 16 Feb 2025 01:01:34 +0000
Manifest next update: Tue 18 Feb 2025 01:01:34 +0000
Files and hashes: 1: TFQzRWcaPQxAiChKkfx3-2zGsGg.crl (hash: QhtB3xigrlqrRlje5JoXNV5qTAqhzVA1hnn2pkEDqME=)
2: DA08B89A6B8E11E7952D2166F8AEA228.roa (hash: rve7QOec9FqmRJKLI6WNqhqnq4CSIGF+XgPlE64aa9A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2834 (0xb12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668231AR
Validity
Not Before: Feb 16 01:01:34 2025 GMT
Not After : Feb 18 01:01:34 2025 GMT
Subject: CN=67b138ee-69c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:ac:e8:23:3d:07:58:59:91:a7:1e:70:44:
26:0e:c9:01:a1:4b:d4:5f:9d:76:f2:be:5d:d0:65:
38:13:ef:0b:a7:97:2e:3b:3c:39:53:b0:10:6f:ee:
38:83:4f:d5:23:e2:34:98:b0:89:7b:7b:8e:c4:4b:
4c:d2:de:b7:b7:74:40:ee:e8:10:aa:5a:56:7b:ec:
72:4d:05:35:dc:37:d1:8d:3d:28:fc:54:c5:18:a1:
db:9c:90:f0:c1:62:d9:22:da:cd:93:ec:0b:5c:fb:
63:de:58:4a:96:1d:76:f1:d3:e4:d2:3a:88:a2:9a:
d5:b1:0c:95:d8:5a:c6:c2:62:98:03:f4:0a:9a:85:
19:61:ab:60:ca:4f:db:0e:b3:b5:53:0a:7e:35:81:
8e:85:50:f0:7e:2f:10:82:ea:d0:46:7a:8e:92:2d:
c0:f9:77:fd:80:5d:a5:de:97:93:84:b3:da:23:a6:
49:8c:dc:3d:7c:97:38:ec:36:6a:9e:79:0a:63:eb:
62:9c:05:c2:3b:9c:84:7f:54:e4:f6:b9:f9:22:0c:
45:74:f3:b9:9f:7f:4b:a2:ac:f2:28:5b:ee:97:93:
5c:63:56:31:cc:33:b5:0c:02:f6:e9:04:4f:a4:4e:
bd:63:0b:6d:00:9f:2b:7b:51:06:4f:83:fa:0d:f4:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:C8:6A:78:6F:D7:9F:33:15:6E:E6:EC:6F:8F:1E:95:A9:B4:5C
X509v3 Authority Key Identifier:
keyid:4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:42:62:d9:3e:99:37:3d:04:c8:80:a7:da:4d:95:c2:00:
78:36:8e:41:bc:9c:23:f0:8b:cf:ed:54:cf:a2:ec:05:8d:6c:
ab:7a:42:51:a9:3a:00:57:90:50:4a:f7:4d:07:be:62:d5:ea:
82:97:97:00:97:c9:9c:bc:4e:3c:c1:94:30:cd:5f:ec:fa:27:
f7:23:7f:72:74:87:3f:9d:77:d5:67:f6:e7:51:e1:c8:b2:26:
f2:2e:7b:7b:f3:41:d7:28:d3:97:9e:a6:2a:05:4f:2f:63:2e:
13:b4:00:16:99:a5:f4:a2:1f:ea:77:36:ac:80:92:a6:56:90:
02:1f:e3:b1:8a:e5:06:d9:f9:dd:9a:9f:7c:02:ff:ad:29:9d:
0d:75:cb:d3:5d:89:e0:ed:56:0c:3a:16:26:f8:2d:41:44:b2:
f4:22:d1:33:32:9a:c5:b4:68:70:83:26:86:0e:4b:20:c1:f0:
c0:ff:24:40:21:98:f7:25:56:25:a3:df:2f:4b:ee:ed:dd:1e:
11:95:ea:31:61:d1:a5:5c:2d:03:07:34:98:53:3f:ff:00:06:
2b:ee:48:9e:4b:a7:26:19:51:3a:f4:fd:d8:68:44:a3:21:25:
05:08:ce:8b:28:66:4f:7a:d3:da:d4:b6:14:1f:6d:67:e6:bf:
43:2b:38:9a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjgyMzFBUjExMC8GA1UEBRMoNEM1NDMzNDU2NzFBM0QwQzQwODgyODRBOTFGQzc3
RkI2Q0M2QjA2ODAeFw0yNTAyMTYwMTAxMzRaFw0yNTAyMTgwMTAxMzRaMBgxFjAU
BgNVBAMTDTY3YjEzOGVlLTY5YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqDKzoIz0HWFmRpx5wRCYOyQGhS9RfnXbyvl3QZTgT7wunly47PDlTsBBv
7jiDT9Uj4jSYsIl7e47ES0zS3re3dEDu6BCqWlZ77HJNBTXcN9GNPSj8VMUYoduc
kPDBYtki2s2T7Atc+2PeWEqWHXbx0+TSOoiimtWxDJXYWsbCYpgD9AqahRlhq2DK
T9sOs7VTCn41gY6FUPB+LxCC6tBGeo6SLcD5d/2AXaXel5OEs9ojpkmM3D18lzjs
NmqeeQpj62KcBcI7nIR/VOT2ufkiDEV087mff0uirPIoW+6Xk1xjVjHMM7UMAvbp
BE+kTr1jC20Anyt7UQZPg/oN9IwNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUHdnI
anhv158zFW7m7G+PHpWptFwwHwYDVR0jBBgwFoAUTFQzRWcaPQxAiChKkfx3+2zG
sGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4MjMxLzcwMDJBM0FDNkI4RTExRTc5QzIwRUM2NUY4QUVBMjI4L1RGUXpS
V2NhUFF4QWlDaEtrZngzLTJ6R3NHZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1RGUXpSV2NhUFF4QWlDaEtrZngzLTJ6R3NHZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjgyMzEvNzAwMkEzQUM2QjhFMTFFNzlDMjBFQzY1RjhBRUEy
MjgvVEZRelJXY2FQUXhBaUNoS2tmeDMtMnpHc0dnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAe5UJi2T6ZNz0EyICn2k2VwgB4No5BvJwj
8IvP7VTPouwFjWyrekJRqToAV5BQSvdNB75i1eqCl5cAl8mcvE48wZQwzV/s+if3
I39ydIc/nXfVZ/bnUeHIsibyLnt780HXKNOXnqYqBU8vYy4TtAAWmaX0oh/qdzas
gJKmVpACH+OxiuUG2fndmp98Av+tKZ0NdcvTXYng7VYMOhYm+C1BRLL0ItEzMprF
tGhwgyaGDksgwfDA/yRAIZj3JVYlo98vS+7t3R4RleoxYdGlXC0DBzSYUz//AAYr
7kieS6cmGVE69P3YaESjISUFCM6LKGZPetPa1LYUH21n5r9DKzia
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:51 2025 by rpki-client