Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier: jq6R/vZRMnNyMo1ohPVZj3SrkU/GcvY20ieaklRpIyk=
Subject key identifier: 77:1C:6A:11:01:82:CA:60:42:6E:2D:EC:77:A2:14:E8:99:F9:AF:A3
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer: /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial: DD
Authority info access: rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number: DD
Signing time: Sat 29 Mar 2025 03:34:18 +0000
Manifest this update: Sat 29 Mar 2025 03:34:17 +0000
Manifest next update: Mon 31 Mar 2025 03:34:17 +0000
Files and hashes: 1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: 4oWL9eGJB+cKVxC2q/VLcCLW0IxGQSXZ2Xkkhinc9rM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367678FRI
Validity
Not Before: Mar 29 03:34:17 2025 GMT
Not After : Mar 31 03:34:17 2025 GMT
Subject: CN=67e76a3a-ad35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:37:19:27:b8:a1:f9:ff:b3:a2:e2:ff:b9:
47:dc:9a:93:2f:46:29:3d:fc:29:0d:c5:e6:9e:1e:
10:55:f0:75:5d:69:14:43:32:40:e2:61:e1:de:7a:
ef:4b:30:e5:78:d7:12:ba:db:c3:4a:a3:ab:6c:3b:
f4:9a:87:2c:ff:d9:9e:6a:e5:34:51:42:7c:50:6f:
8e:30:29:27:d1:04:fe:39:5e:16:2d:05:8e:8c:71:
44:3b:0b:e2:c6:26:fa:5c:22:77:b8:88:ab:b8:9f:
00:d8:c8:a6:94:70:98:bc:f8:ab:f1:d2:b0:9c:e9:
07:df:c8:78:f7:91:1e:34:b4:b8:af:48:2b:a3:a1:
47:73:c0:b2:5a:96:b8:41:fb:53:17:e2:e9:bb:77:
7c:72:a7:fa:21:0e:72:3b:a4:be:43:76:2b:b7:8a:
d2:e2:67:23:90:5c:17:b2:7b:52:44:d9:6c:87:31:
1c:2b:0f:9c:ce:35:e2:52:86:c8:ee:de:0f:6f:2c:
de:b6:24:72:28:f1:ee:62:e0:ec:52:25:a3:e6:52:
ed:27:8d:35:2d:41:75:98:aa:40:08:cb:95:59:74:
88:d3:66:e3:39:66:bc:c6:9b:53:d1:df:bf:bd:c3:
01:f1:83:1f:00:62:82:92:8a:a4:7f:ba:ff:e7:eb:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1C:6A:11:01:82:CA:60:42:6E:2D:EC:77:A2:14:E8:99:F9:AF:A3
X509v3 Authority Key Identifier:
keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a0:1e:0e:00:3d:05:a1:cc:8a:d8:2f:b5:9f:7e:d1:89:7f:
e8:19:6c:dd:28:a5:d3:f7:f1:29:cb:0a:46:14:fb:5e:0e:1f:
9d:75:d5:27:73:e1:0d:35:38:0e:59:52:43:d1:24:f0:ce:d7:
43:7c:0d:79:75:04:63:3e:a1:45:05:36:53:cf:80:31:a2:11:
2f:e3:76:5e:5d:8d:aa:32:aa:d9:40:60:2c:af:90:68:69:2e:
c1:71:b9:b2:fa:1c:e7:fa:a6:79:00:a1:34:ce:5a:37:e2:ee:
03:e2:c5:d8:e8:3a:b9:c9:b6:c5:e5:65:ec:68:0d:6d:04:37:
76:36:7e:c9:4b:9f:5d:38:09:f7:c2:68:f5:40:e8:bd:20:18:
b9:f6:96:a2:79:b4:84:40:81:27:a0:4d:66:ce:b1:53:ff:84:
ee:75:f5:2a:7e:75:e1:e1:48:89:61:64:ec:89:ed:b5:ff:51:
63:04:47:47:ea:47:5a:b9:3f:ca:5f:e7:c2:8a:4f:fc:3a:df:
e5:ea:2c:94:14:2e:20:31:53:55:f4:1b:04:c9:66:68:20:0e:
13:ab:62:b3:10:42:93:98:dc:d3:28:c2:af:b9:34:45:27:ca:
cc:14:ac:ed:54:73:1f:f3:5b:79:d4:d4:d6:d4:34:2d:af:df:
01:08:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:39 2025 by rpki-client