Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
File: jXM8lU5mTeBH--8DjdEt57DxtNY.mft (raw, json)
Hash identifier: 3sPuDsbcD3UrMzJqzKJXlD/cfcd6YgZt2d6PNB6xOak=
Subject key identifier: EE:0C:B0:B1:8B:CB:B5:E9:55:9B:1C:30:8A:AB:C3:7B:16:F5:31:62
Authority key identifier: 8D:73:3C:95:4E:66:4D:E0:47:FB:EF:03:8D:D1:2D:E7:B0:F1:B4:D6
Certificate issuer: /CN=F366C302AR/serialNumber=8D733C954E664DE047FBEF038DD12DE7B0F1B4D6
Certificate serial: 013E
Authority info access: rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
Manifest number: 013C
Signing time: Sun 16 Feb 2025 02:58:42 +0000
Manifest this update: Sun 16 Feb 2025 02:58:41 +0000
Manifest next update: Tue 18 Feb 2025 02:58:41 +0000
Files and hashes: 1: jXM8lU5mTeBH--8DjdEt57DxtNY.crl (hash: 7eaN7vaRiXtvGTo61VjXyD3/NTL2FE+8MTRMc4mOoQ0=)
2: 48815194FFF611EEB7B2CF0C017001B1.roa (hash: D4ZOtAC47VS1ZnE8gxDvuNgN/naFW3V/gpkFVCsnwIA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.crl
rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366C302AR
Validity
Not Before: Feb 16 02:58:41 2025 GMT
Not After : Feb 18 02:58:41 2025 GMT
Subject: CN=67b15461-cdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:a6:93:d1:59:49:35:e1:ea:30:b6:ea:9e:
02:0e:31:1e:0c:e4:28:5c:e4:7b:4b:32:c8:e8:07:
84:e8:f4:da:7f:57:7e:94:2c:66:91:aa:ee:6c:0e:
68:e8:13:73:61:27:b8:fb:c7:54:d5:51:1b:49:34:
00:4d:e0:78:55:5e:cb:76:4a:98:e1:f1:7c:e8:1c:
f3:de:9a:2b:75:1f:ef:fb:0c:55:e3:71:65:1b:b7:
cb:ca:ee:8d:4d:d1:c4:f1:e6:7e:fa:2f:03:a5:2a:
74:de:6d:46:8b:19:08:d2:87:9f:ff:58:ab:a4:fb:
55:8b:4e:71:0a:84:ba:57:1c:29:51:0a:80:78:af:
1d:60:e4:7b:72:f2:15:3b:46:d0:15:06:60:1c:e6:
67:38:73:d1:42:0f:37:68:de:5e:20:37:ae:43:0b:
e1:0e:54:0f:71:4d:a9:d5:a4:ce:c5:a3:65:ff:a6:
c5:f4:bb:fa:94:42:e2:0d:94:0f:29:3b:b4:02:2c:
eb:c6:fc:4e:47:91:3b:02:4a:01:d6:f1:e1:b3:42:
40:25:22:ca:44:5e:21:89:13:48:d8:c5:28:73:2b:
a9:6e:fd:6c:c5:1d:a1:43:f3:cf:50:1a:e1:1c:8b:
0a:af:7c:7a:c6:e1:bc:9d:7c:cd:eb:2f:01:5d:ec:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0C:B0:B1:8B:CB:B5:E9:55:9B:1C:30:8A:AB:C3:7B:16:F5:31:62
X509v3 Authority Key Identifier:
keyid:8D:73:3C:95:4E:66:4D:E0:47:FB:EF:03:8D:D1:2D:E7:B0:F1:B4:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4a:4a:f6:db:a4:01:f2:fb:46:2d:71:83:15:61:ce:a8:03:
8a:b1:bc:1f:a7:b6:43:64:45:98:c6:9a:fd:3d:f8:db:3b:b2:
d2:a1:46:68:d2:d8:87:27:c9:f7:a0:ce:40:c4:d8:97:1f:6b:
b0:ec:8b:39:27:08:64:55:17:7e:14:7d:58:36:5c:27:48:4c:
a1:31:7e:45:b2:5f:7b:71:3f:44:c9:82:7d:29:3f:b3:83:18:
1c:33:c3:d2:2d:7c:12:6e:a5:56:4f:e6:74:bb:b5:27:bc:fb:
a2:69:9f:8d:46:10:3f:64:9a:de:cf:3c:7f:35:07:4a:ec:a9:
8f:e6:00:bb:2d:6d:26:93:b4:dd:63:0b:35:ba:a8:c2:d9:a5:
0c:9f:fa:81:16:7b:23:26:cc:e3:b1:28:6f:e5:a5:b8:7b:85:
88:3b:25:a2:24:15:b0:8a:4e:93:cd:19:93:64:79:67:54:3c:
30:fd:13:46:0a:09:e8:6a:18:54:dd:71:31:5a:38:8a:64:66:
b7:f8:40:04:fe:17:bb:69:c5:c9:33:d9:ea:1b:35:de:b5:e7:
c8:0e:2b:3c:1d:20:74:92:c5:07:9e:48:e7:43:db:ab:44:e9:
42:0e:4c:b7:50:3c:2d:fa:bd:40:58:5d:a4:3a:f2:f0:30:1a:
bc:f0:39:93
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkMzMDJBUjExMC8GA1UEBRMoOEQ3MzNDOTU0RTY2NERFMDQ3RkJFRjAzOEREMTJE
RTdCMEYxQjRENjAeFw0yNTAyMTYwMjU4NDFaFw0yNTAyMTgwMjU4NDFaMBgxFjAU
BgNVBAMTDTY3YjE1NDYxLWNkY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqP6aT0VlJNeHqMLbqngIOMR4M5Chc5HtLMsjoB4To9Np/V36ULGaRqu5s
DmjoE3NhJ7j7x1TVURtJNABN4HhVXst2Spjh8XzoHPPemit1H+/7DFXjcWUbt8vK
7o1N0cTx5n76LwOlKnTebUaLGQjSh5//WKuk+1WLTnEKhLpXHClRCoB4rx1g5Hty
8hU7RtAVBmAc5mc4c9FCDzdo3l4gN65DC+EOVA9xTanVpM7Fo2X/psX0u/qUQuIN
lA8pO7QCLOvG/E5HkTsCSgHW8eGzQkAlIspEXiGJE0jYxShzK6lu/WzFHaFD889Q
GuEciwqvfHrG4bydfM3rLwFd7BfpAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU7gyw
sYvLtelVmxwwiqvDexb1MWIwHwYDVR0jBBgwFoAUjXM8lU5mTeBH++8DjdEt57Dx
tNYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDMzAyLzg3Qjk0NjM0RkVFNjExRUVCRTFFMzM2RDAxNzAwMUIxL2pYTThs
VTVtVGVCSC0tOERqZEV0NTdEeHROWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2pYTThsVTVtVGVCSC0tOERqZEV0NTdEeHROWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NkMzMDIvODdCOTQ2MzRGRUU2MTFFRUJFMUUzMzZEMDE3MDAx
QjEvalhNOGxVNW1UZUJILS04RGpkRXQ1N0R4dE5ZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqSkr226QB8vtGLXGDFWHOqAOKsbwfp7ZD
ZEWYxpr9PfjbO7LSoUZo0tiHJ8n3oM5AxNiXH2uw7Is5JwhkVRd+FH1YNlwnSEyh
MX5Fsl97cT9EyYJ9KT+zgxgcM8PSLXwSbqVWT+Z0u7UnvPuiaZ+NRhA/ZJrezzx/
NQdK7KmP5gC7LW0mk7TdYws1uqjC2aUMn/qBFnsjJszjsShv5aW4e4WIOyWiJBWw
ik6TzRmTZHlnVDww/RNGCgnoahhU3XExWjiKZGa3+EAE/he7acXJM9nqGzXetefI
Dis8HSB0ksUHnkjnQ9urROlCDky3UDwt+r1AWF2kOvLwMBq88DmT
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:39 2025 by rpki-client