Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier: 7rvRDRYMAaeczdmCNfCFDr3SicNjfjKZGRAJI7lkIOU=
Subject key identifier: 19:58:5F:B5:C9:05:FF:58:46:03:45:B3:51:79:BA:1D:9D:13:A0:00
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer: /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial: 06C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number: 06C1
Signing time: Thu 13 Mar 2025 01:31:08 +0000
Manifest this update: Thu 13 Mar 2025 01:31:08 +0000
Manifest next update: Sat 15 Mar 2025 01:31:08 +0000
Files and hashes: 1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: 4bT1wim+3zHyYMyZ9D69JkdRIAKcA1+lrICF+YyQ/cw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366828BAF
Validity
Not Before: Mar 13 01:31:08 2025 GMT
Not After : Mar 15 01:31:08 2025 GMT
Subject: CN=67d2355c-a014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:68:36:2b:89:97:c1:92:20:31:85:0e:a4:
25:bf:1d:7e:fb:03:d9:81:22:3b:23:60:a2:f5:ad:
91:6e:b3:84:e7:f3:ba:ab:bc:1a:6b:55:fc:59:74:
43:0d:5f:72:ae:4d:eb:f8:bf:d5:a3:e0:d6:81:54:
3a:37:80:0a:31:69:ee:b7:64:fc:2c:4b:b2:94:dd:
5c:64:a0:25:3d:6a:03:96:5a:e2:98:ad:90:59:cb:
36:d1:f3:b0:41:fa:62:00:08:50:01:9d:22:d4:a1:
f4:c0:9d:5b:40:35:f6:04:84:29:1f:bd:8a:dd:04:
45:67:68:a7:60:2c:6b:6d:47:c4:c1:42:1c:d2:c6:
00:28:75:6d:20:2f:ea:23:23:e1:29:73:25:02:96:
b1:fa:1b:4e:3c:fa:d6:6b:2b:36:4d:cd:40:3c:43:
70:39:f5:57:b3:6f:49:73:7b:9d:3d:d6:6d:72:05:
ab:b7:29:e9:44:9f:21:2e:d0:19:17:d1:8d:f7:ae:
e3:33:59:cd:ff:67:29:2c:20:cf:c7:04:6a:c7:4e:
77:41:e2:a8:3d:b9:a7:40:43:aa:a0:d2:84:56:4f:
d0:04:1c:7d:0e:05:aa:20:5f:f9:04:9d:1b:49:0a:
af:f2:c2:2f:8d:72:04:98:6b:f5:7e:9d:f6:c1:df:
0d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:5F:B5:C9:05:FF:58:46:03:45:B3:51:79:BA:1D:9D:13:A0:00
X509v3 Authority Key Identifier:
keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:8e:a6:4b:41:ad:66:20:67:58:db:10:ec:a6:f1:46:b1:1f:
8a:dc:6d:dd:16:a2:0e:8c:ac:d2:af:b6:92:35:f5:f8:9d:74:
9f:4d:be:7f:60:9c:83:f3:48:ca:e0:cd:8b:f9:29:44:15:1f:
a2:bb:d7:b9:31:f2:47:e7:42:1f:5b:c5:fe:5e:4a:b2:f6:04:
04:69:29:a0:ce:25:c1:28:6c:ab:81:e0:f2:af:2a:13:c7:b6:
b4:8e:f7:6d:28:d0:30:c5:01:2a:e0:cd:1f:d0:84:af:93:6b:
b3:0c:93:c9:81:1a:67:59:39:a2:34:f5:e8:76:58:ab:b0:a5:
d5:fa:51:45:61:a1:72:ec:9f:13:54:63:67:ff:b9:e1:9e:e3:
fa:e0:13:37:a1:37:21:ef:87:1e:17:39:52:30:bb:d9:98:6f:
17:9d:41:c0:d8:df:a1:dc:3c:6d:0e:4e:73:10:48:b5:34:0d:
9d:09:62:7d:a8:f3:50:5d:b2:21:87:63:e1:42:6e:8f:12:69:
4d:7a:53:72:4c:fd:c9:2b:50:bc:84:09:5b:91:c0:89:49:f5:
0a:2c:38:6d:24:c4:01:37:77:19:5f:f6:82:ce:96:74:84:0a:
b6:49:69:2b:d5:5e:7a:0e:88:13:45:11:eb:67:c2:f1:45:e2:
e8:d8:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:46:44 2025 by rpki-client