Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
File: tKCUA2WAIUx9QccbjIZXpO4vQHI.mft (raw, json)
Hash identifier: ZyrbWaazCq6CiC7IJY4m7uZwEsJN2AVUXMqRcK3fhlI=
Subject key identifier: CD:59:27:DE:6F:77:5B:6E:88:DD:81:D6:A4:9F:C7:77:2B:B0:66:6B
Authority key identifier: B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Certificate issuer: /CN=F367678FAR/serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Certificate serial: DD
Authority info access: rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
Manifest number: DD
Signing time: Sat 29 Mar 2025 03:34:34 +0000
Manifest this update: Sat 29 Mar 2025 03:34:33 +0000
Manifest next update: Mon 31 Mar 2025 03:34:33 +0000
Files and hashes: 1: tKCUA2WAIUx9QccbjIZXpO4vQHI.crl (hash: T1qcOQ3yv8YpDPmLjLXRNBQtaTj0BgQ0WSxlS53SRRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367678FAR
Validity
Not Before: Mar 29 03:34:33 2025 GMT
Not After : Mar 31 03:34:33 2025 GMT
Subject: CN=67e76a4a-7d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:0e:99:f7:85:64:de:ce:f5:53:e7:8c:9d:
b4:1e:0d:05:f1:77:df:44:ba:af:25:f8:f0:d1:28:
af:68:d3:0e:f7:9c:0f:7a:d2:ba:91:22:74:35:64:
d5:fd:6f:65:08:eb:ca:d1:de:9f:6b:1b:3c:31:c9:
03:03:b9:46:47:d0:96:dc:e4:46:e6:55:f1:ef:5c:
a3:5a:9d:bc:f2:55:33:7c:aa:fa:65:ea:c8:31:43:
ba:cd:19:33:f1:0d:b6:dd:21:1a:8b:e4:e9:0b:65:
c0:49:0a:00:ea:7e:0f:13:6f:d6:d5:d3:7c:f1:c0:
34:4a:2d:6e:a8:03:6f:9e:c4:e8:9b:81:19:9a:e2:
a9:52:66:11:9d:a7:e7:dd:25:f5:8e:1f:e7:0f:99:
75:03:e0:e9:b8:aa:55:f8:f2:96:43:7f:bc:45:40:
97:28:a5:9d:fc:9d:b9:3d:7a:a3:62:44:84:fe:4d:
e4:88:12:71:d2:2a:cf:77:a1:58:82:2f:21:5d:a5:
5d:d7:75:3f:81:fd:2b:81:93:48:2a:72:1d:96:4d:
de:d4:69:e4:7f:52:57:19:67:d8:66:ee:d8:bd:99:
75:2d:c2:00:42:fd:46:92:e7:82:78:63:c0:9b:5b:
c4:ee:37:8c:2f:58:5b:0d:69:3f:2a:71:01:0c:a2:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:27:DE:6F:77:5B:6E:88:DD:81:D6:A4:9F:C7:77:2B:B0:66:6B
X509v3 Authority Key Identifier:
keyid:B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:50:ab:91:58:74:a9:54:df:f3:06:eb:04:e9:ad:e2:41:6e:
50:09:0e:c9:4b:1a:31:0c:e0:6e:e8:5b:05:be:36:36:ba:c6:
62:fa:24:29:88:b9:0f:07:51:8f:55:34:1c:1c:2d:a8:6c:9d:
5c:68:98:40:3d:19:d3:e6:08:0f:05:65:4c:07:26:be:2b:26:
97:39:93:4e:01:a3:66:e8:52:1d:89:b6:f5:99:07:6a:fa:32:
89:cf:f1:b9:c5:91:86:c0:3e:54:6e:03:b7:5a:28:47:d2:3f:
cb:a0:95:7b:2f:bc:31:d9:d7:c1:b5:b5:9a:ac:ea:d5:f3:f8:
db:0b:30:6d:8f:73:66:27:dc:5b:7f:bf:2d:24:8f:c3:ab:6d:
f8:2a:00:cc:ed:c4:2f:4d:38:b8:b3:4c:9c:d5:f8:f1:b1:3a:
bb:99:f8:6f:c0:1c:98:15:75:24:79:b6:3c:55:c5:2b:94:7f:
ef:bb:0d:14:c1:1a:ca:c9:16:e1:38:71:10:54:b2:f5:fd:e8:
2b:29:73:60:ea:c8:d5:15:ea:65:30:5e:d1:db:a5:f3:59:fb:
30:4e:a3:a9:58:15:14:62:8d:d9:99:8e:5f:05:94:cb:ee:9a:
01:34:bb:73:18:72:b8:91:9b:d9:7c:27:b4:ba:e7:c7:29:9e:
8f:2f:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:44:12 2025 by rpki-client