Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: +FsOOrN8cdWj30Zgmke3xva20g1pDQnP3HTU7q1RqWs=
Subject key identifier: FD:73:9A:68:E8:5C:34:DC:95:C5:23:5C:81:50:35:D8:3C:B6:68:34
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 025B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 025B
Signing time: Sun 16 Feb 2025 02:36:50 +0000
Manifest this update: Sun 16 Feb 2025 02:36:49 +0000
Manifest next update: Tue 18 Feb 2025 02:36:49 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: uF48x7p2ZuepeoEhx+x451SCTHJ5Jx4DeQVJpyGszqQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR
Validity
Not Before: Feb 16 02:36:49 2025 GMT
Not After : Feb 18 02:36:49 2025 GMT
Subject: CN=67b14f42-df32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:59:3a:a7:69:a1:c5:b8:8e:cd:07:2c:fb:
eb:02:c5:e3:58:56:a0:be:c5:ee:b2:8f:13:07:cf:
c9:17:95:83:58:72:2b:10:1e:12:cc:06:cc:18:b3:
c8:ea:a3:63:f5:f2:2b:89:fb:fd:c5:ce:2f:ec:5b:
80:fd:a9:ce:db:7e:b7:1c:11:51:36:d9:df:34:44:
37:83:86:79:4d:5b:ac:d9:d3:e7:d3:6b:8b:97:4d:
83:5b:d1:ba:d5:05:a2:8d:c2:32:9b:ae:a4:77:1e:
24:e8:17:36:6c:90:34:21:5d:31:3b:00:d8:37:2b:
e4:a4:74:26:82:00:ee:c1:37:74:48:93:7a:ea:c2:
11:f7:83:5a:c6:7f:32:9a:06:a5:3b:42:6b:a2:f9:
56:21:26:d5:b6:2e:ad:ad:3a:f0:f8:44:2c:96:71:
66:e4:ef:6e:75:f4:e8:72:f0:cb:c9:d1:7d:39:0b:
e6:03:0e:81:c4:9c:23:65:4d:80:cb:6b:58:7c:25:
56:ee:84:82:10:36:21:ff:96:4c:c2:4c:c9:69:d9:
60:20:a9:64:d8:50:3f:db:1b:52:d9:b6:c9:9f:5d:
a9:a9:e3:76:eb:db:54:e5:2c:80:d1:06:61:12:26:
e6:c0:3e:f6:92:2f:b0:0d:b3:00:79:70:7f:52:5d:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:73:9A:68:E8:5C:34:DC:95:C5:23:5C:81:50:35:D8:3C:B6:68:34
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:80:d7:42:d5:47:e6:43:99:83:74:83:f3:d4:8d:46:66:
b6:98:fb:8d:59:fa:26:78:c9:70:4b:3b:2a:b0:89:7d:07:cc:
75:96:51:1e:22:64:82:a3:df:18:3a:03:83:b0:06:3a:02:94:
8e:fd:61:62:94:2a:48:1e:41:8d:83:c6:c8:6d:8a:0e:62:32:
63:fe:18:78:c0:d4:a9:21:b1:e3:b8:5e:0c:94:c7:13:9e:20:
bb:75:99:aa:23:ef:0e:12:3b:3a:7f:32:1d:c7:7f:c8:a9:b7:
b5:85:f3:36:33:24:a2:3e:e4:49:09:12:f5:67:42:84:44:b4:
c0:e0:6f:bc:d9:17:7a:b7:57:59:5a:b3:2c:33:0c:aa:40:37:
4d:f7:8c:07:ac:bc:5c:ab:a9:a7:b9:d6:04:55:f2:36:d0:d2:
6a:b0:97:2a:2a:16:7d:6b:44:8b:24:be:1a:12:5c:8b:c9:18:
84:8e:80:c8:db:2d:0b:d3:31:ff:11:bb:20:e6:78:04:9d:26:
d9:bc:75:0d:d8:b7:b7:e2:a9:32:80:34:00:e0:0e:09:f0:ed:
f5:e9:76:9b:9f:55:ca:a8:c5:ad:1c:89:42:dd:56:f4:88:df:
75:47:31:83:87:c1:a8:64:93:d9:6a:13:8f:3b:03:4d:e6:c1:
55:32:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:48 2025 by rpki-client