Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File: SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier: XTgXWjCgP5XuEj/KQfusSXCNoPoTKf/XOVv8EJwGcVk=
Subject key identifier: 09:99:41:2A:66:17:9E:EE:BF:F6:27:8A:03:50:2A:B9:C4:18:A1:A1
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer: /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial: 0358
Authority info access: rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number: 0356
Signing time: Sun 06 Apr 2025 02:17:01 +0000
Manifest this update: Sun 06 Apr 2025 02:17:01 +0000
Manifest next update: Tue 08 Apr 2025 02:17:01 +0000
Files and hashes: 1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: cbbeb6aODoQdjzSHoR6ApUX592RazJDFR0MNnBFuS4A=)
2: D17F6EEC902411ED9E7767D2F1222468.roa (hash: JO/7laMxt+UsHBnYsLId8OjP3XjZJzj6vEh7zTGEoAg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FRI
Validity
Not Before: Apr 6 02:17:01 2025 GMT
Not After : Apr 8 02:17:01 2025 GMT
Subject: CN=67f1e41d-e1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:bf:fd:8a:a3:7d:46:2a:84:96:9d:a2:9e:
23:5d:90:a4:94:31:45:a1:1c:6f:f0:7f:5b:66:1e:
a4:21:37:a8:f8:a6:43:0a:9b:99:14:be:7c:13:7c:
52:dc:f9:9c:67:27:87:f3:d0:e5:d7:fb:a1:f3:a6:
05:4a:d3:90:72:85:15:4c:9c:b8:ec:b5:db:88:51:
50:b4:02:6f:5e:ad:36:28:42:75:fa:b5:7c:6b:f3:
a9:e8:56:23:6a:46:43:45:83:d8:ea:e2:41:3e:44:
4a:b4:25:0f:b1:43:82:ba:ff:2a:c3:27:46:9b:d2:
09:82:51:64:28:7f:17:55:8f:37:09:62:b2:2c:c0:
3e:a7:4f:f8:a7:cb:32:73:16:4d:0c:ef:c0:40:d5:
40:ba:84:ca:38:f3:e9:43:d6:d4:7a:dd:e8:a1:6d:
55:0f:17:33:c6:66:1e:75:4c:32:84:e0:ad:e9:2d:
4b:c8:a9:7e:5e:59:f6:7b:f1:8e:7a:9c:e4:ac:e7:
fb:1a:52:aa:a9:2b:02:a3:95:3c:97:e2:31:3c:f6:
33:e6:aa:aa:75:0f:0f:dd:9c:4b:5b:3a:59:cc:49:
63:f8:bd:98:b5:fa:7b:45:7d:7c:7e:23:c9:37:d2:
9a:9f:0a:fd:05:92:0f:03:2e:40:46:70:81:82:1d:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:41:2A:66:17:9E:EE:BF:F6:27:8A:03:50:2A:B9:C4:18:A1:A1
X509v3 Authority Key Identifier:
keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:29:ef:4c:6d:a6:9c:30:2d:51:b2:4a:3a:b7:5c:71:03:
d7:fc:54:77:69:93:bc:a3:9e:46:c4:23:43:85:4f:ff:51:af:
44:8a:6c:e9:5c:15:e6:a8:b2:1f:97:04:78:bd:cb:21:18:15:
78:3e:5c:80:c3:bf:41:00:fe:40:31:06:fa:1e:50:7d:3a:66:
ba:2d:42:df:fe:e1:fd:37:4d:36:dc:67:55:18:6e:1e:38:a8:
ed:46:69:61:6f:55:40:50:2e:48:88:52:ff:53:08:22:65:2f:
5a:9f:c8:8d:eb:2f:70:35:86:da:11:cc:9e:97:b3:f0:06:91:
f3:71:f4:e5:63:94:1a:c5:5a:6f:a7:96:be:a5:c5:57:4d:4d:
96:96:16:cb:ee:4d:e4:29:14:c6:ff:cc:92:50:83:b0:8a:bd:
e8:1a:c3:2c:23:7b:19:2c:fd:ea:56:0c:1f:85:aa:91:65:1c:
c2:3e:83:73:c2:21:f1:19:2a:82:30:dc:cb:68:61:70:fd:ee:
5d:4d:00:7c:9e:65:39:0a:97:ab:26:5d:fd:fb:5b:52:d2:1b:
96:e8:bc:85:e8:cd:2f:1f:28:1e:f6:a0:1d:6d:32:24:90:e7:
38:c0:2d:31:02:a2:be:67:e8:8a:40:8a:79:f7:3f:da:57:33:
09:b2:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:36:25 2025 by rpki-client