Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File: KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier: e8jfbRZBKc7qraJoUuxDXTwsNkDk6sQm9AO4Y0+E7QQ=
Subject key identifier: 28:E1:8B:95:38:F2:C0:8D:95:DC:B1:77:5F:1E:62:6A:9C:A8:48:F9
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer: /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial: 04DA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number: 04D9
Signing time: Thu 03 Apr 2025 01:56:12 +0000
Manifest this update: Thu 03 Apr 2025 01:56:11 +0000
Manifest next update: Sat 05 Apr 2025 01:56:11 +0000
Files and hashes: 1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: UAEOgw1WSqGFzxVv3OcncI+sJGER2sCtOTSAW0ahTFM=)
2: 0755AE8C5E4911EC910446DF5A40D577.roa (hash: AItjzWPSlit+SXvmdCFmobWIhqJxwMx7F/NvBd+HRhQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36746EBAF
Validity
Not Before: Apr 3 01:56:11 2025 GMT
Not After : Apr 5 01:56:11 2025 GMT
Subject: CN=67edeabc-30d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:1d:c8:1e:2b:b9:09:20:af:42:71:eb:39:
0f:4d:5d:2f:c2:42:e3:6b:92:dd:fe:dd:dd:34:e0:
d2:88:6a:57:24:aa:e6:5e:84:73:48:6b:c0:bd:6f:
c5:b3:13:08:50:e8:25:9a:f5:6d:92:f9:c1:ec:4b:
3e:48:fe:3e:25:65:c6:03:ff:d7:66:e4:f5:d9:71:
57:d1:ed:47:68:8a:ba:63:22:64:21:e5:31:d4:73:
e4:de:6a:40:53:5f:cf:91:b4:df:b6:c7:19:7d:93:
23:60:51:d5:f6:80:fe:a5:70:6d:74:c7:ee:ca:08:
2a:45:90:8c:d6:21:78:79:52:f4:40:20:58:26:8f:
c9:42:02:50:79:03:45:41:71:e4:fc:e9:80:6e:5e:
17:19:3d:56:44:78:a1:d9:dd:fc:6e:fe:a8:23:b2:
e8:9a:b1:64:9b:fb:b9:d7:a6:0d:b6:7d:1a:15:a6:
46:59:bc:6c:cf:b0:08:b5:18:1e:42:4f:01:da:37:
40:ab:d8:b4:40:41:03:d9:7a:56:d4:f3:24:69:a8:
5f:0e:5b:2e:29:12:aa:ca:4b:26:b5:29:d7:85:25:
a2:f9:7f:7c:36:fa:a6:73:fd:2b:ca:79:39:07:db:
9e:63:e2:c0:57:06:66:d2:58:94:89:fb:45:63:0f:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:8B:95:38:F2:C0:8D:95:DC:B1:77:5F:1E:62:6A:9C:A8:48:F9
X509v3 Authority Key Identifier:
keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a8:59:a5:85:4c:14:b0:97:ae:69:c1:2e:dc:06:17:61:98:
dc:88:fa:67:75:bd:81:4c:91:e9:11:25:ad:d9:37:11:78:98:
fb:cc:85:fc:35:88:b6:78:ba:d3:01:ba:4b:8e:71:d3:ad:65:
7b:1c:36:ee:62:79:f3:20:07:60:7f:53:26:ec:9d:8c:42:a2:
50:b9:ac:e4:07:bc:56:cc:68:a1:ad:32:92:9b:31:52:aa:9b:
e2:0e:34:99:a7:85:90:1b:3a:62:6b:53:d0:4d:47:d7:7d:7e:
83:cf:39:25:d3:8e:35:de:57:3a:26:09:29:4d:a0:45:70:05:
dc:32:8c:69:a6:4e:d4:60:52:a8:c5:70:96:d7:4a:ba:e0:97:
0a:4f:2c:cd:40:0e:93:59:3c:a5:b8:9b:1c:cc:a2:18:dc:5e:
29:03:88:63:03:00:52:94:d3:aa:d9:bd:8c:44:a8:77:34:9f:
bc:34:6b:73:29:58:f1:9a:09:36:5f:8a:90:52:f7:d1:c0:bc:
57:91:f9:e7:7c:d3:f3:d5:37:aa:ea:b6:bf:c8:9e:be:44:bf:
30:ae:83:f9:76:32:3e:b5:cd:e4:cd:0d:11:02:f0:a5:fa:27:
74:ad:d6:10:1a:97:19:61:0d:fc:7d:c3:ed:e9:cc:72:d3:8f:
5c:a2:a6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:33:00 2025 by rpki-client