Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
File: 0CXaySkNvUCEbGSPrcyfxnGGtjI.mft (raw, json)
Hash identifier: f3YKsL40jTyV31nydo+bAZoV26FqRmrHNxOpXQ4/KIc=
Subject key identifier: DF:5E:67:E4:16:42:CF:71:16:1D:BC:AF:E4:8B:70:13:39:B3:4D:77
Authority key identifier: D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32
Certificate issuer: /CN=F367B3F2AF/serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
Certificate serial: 07E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
Manifest number: 07E2
Signing time: Sun 06 Apr 2025 01:21:59 +0000
Manifest this update: Sun 06 Apr 2025 01:21:58 +0000
Manifest next update: Tue 08 Apr 2025 01:21:58 +0000
Files and hashes: 1: 0CXaySkNvUCEbGSPrcyfxnGGtjI.crl (hash: T6WuPL0HoxGJDnxUjQ+t2/EaxeKLOf1ujHvnYOfqKAU=)
2: C0B60E1809D611EA8CC3F860F8AEA228.roa (hash: 90ECyuBdPNmxRJAqpaW1o3jdvLDow9bMz084syJod/o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B3F2AF
Validity
Not Before: Apr 6 01:21:58 2025 GMT
Not After : Apr 8 01:21:58 2025 GMT
Subject: CN=67f1d737-810e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:a8:b3:fa:fb:55:7b:08:0c:91:2f:47:e2:
64:96:8d:62:61:53:14:2a:4a:ca:f3:e6:79:5a:f8:
77:8d:41:e6:52:cb:87:52:11:9e:33:f7:97:93:f3:
cf:03:9f:b3:2f:a8:e0:e8:e1:68:20:5d:0d:09:93:
11:87:7a:d1:a1:f0:37:ab:d6:c1:f5:69:96:49:32:
2b:58:e5:ed:5e:85:f7:63:6b:a3:6c:a2:ef:25:97:
f8:19:e7:a4:42:21:1a:b2:8c:55:f6:14:32:97:e4:
45:0e:23:0b:a6:01:a6:75:37:fe:15:80:2d:ae:b3:
e3:64:f5:17:42:1c:46:d7:a2:39:a4:e2:63:5d:03:
1f:c5:2c:73:6b:96:54:a1:e4:da:bf:fe:7d:a0:7b:
57:a8:04:f8:71:99:a3:0c:a6:ce:3a:34:6b:45:ca:
28:22:e6:9c:fe:62:ce:9c:b5:ec:eb:fc:6c:63:21:
77:96:c3:87:65:58:8d:0c:64:f3:dd:0a:7f:5f:12:
eb:46:75:a4:48:d2:2a:4b:7b:45:09:91:3f:df:e3:
ac:d9:51:42:36:6c:3e:9b:c7:0e:0d:b4:1d:b0:54:
c0:8a:47:fd:eb:46:13:d9:c0:61:4a:ec:77:13:6c:
6b:b6:85:2a:1d:81:dc:8b:46:c4:6b:db:77:fc:5c:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:67:E4:16:42:CF:71:16:1D:BC:AF:E4:8B:70:13:39:B3:4D:77
X509v3 Authority Key Identifier:
keyid:D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:14:12:8d:98:e2:d7:d2:88:2e:06:d1:e1:29:d9:65:2f:54:
1e:ea:1f:c3:55:a1:49:a2:b8:9c:5f:e2:20:e8:68:1d:cf:9b:
91:9b:18:fb:c3:c0:b3:0b:40:a9:d9:2e:d2:6f:c6:58:7e:af:
ae:92:11:ab:f4:7b:b9:51:eb:26:e6:e8:de:c6:4f:b8:15:1b:
0f:1b:92:3e:58:87:87:12:ff:61:31:79:c9:59:b2:8f:ad:ad:
84:9a:a9:66:e0:09:83:d9:f4:37:7e:46:df:41:95:28:96:24:
fd:d2:a0:87:5b:ca:3a:43:11:93:18:4c:d0:2b:1a:fe:07:53:
d6:ba:f0:ba:07:cd:b6:19:0a:b2:f2:da:15:16:8c:4a:30:5c:
e3:07:e6:2c:b2:5a:b0:26:75:2f:24:13:68:84:37:8e:25:ec:
59:e0:95:c8:f2:97:08:5b:aa:8e:7f:8a:e3:65:5a:85:31:4b:
05:a7:ce:16:f6:95:2a:ad:43:2a:2a:22:f1:c6:5a:43:b7:43:
3c:a4:c4:b8:da:e2:ff:47:29:48:c7:10:04:d0:e3:f8:41:1d:
36:25:f2:24:72:3e:44:3b:07:44:68:ba:e6:5e:27:e7:17:af:
40:d2:5c:48:7f:d4:02:39:11:dd:5e:fa:73:39:5b:e1:d3:ad:
1a:e4:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:49:33 2025 by rpki-client