Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File: VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier: Ve+1Wlee/lykmHreSJObmhzUFHf4GRgoJtngdnq4/Jw=
Subject key identifier: EF:4B:AB:8B:09:78:2F:CC:B9:F7:6A:A4:9D:B6:63:21:50:15:25:7D
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer: /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial: 031B
Authority info access: rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number: 031A
Signing time: Sun 16 Feb 2025 02:21:18 +0000
Manifest this update: Sun 16 Feb 2025 02:21:17 +0000
Manifest next update: Tue 18 Feb 2025 02:21:17 +0000
Files and hashes: 1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: 2SmtbtxI0AH/oNmkYYlVBrhQkzFZhVQwFV6IiKubrHk=)
2: 4CEBE78CABC211ED80A4B483F1222468.roa (hash: RMWNA7CymMg9CNpy2XouqWvp370orj1H39/pzyyz1/Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DA9BAR
Validity
Not Before: Feb 16 02:21:17 2025 GMT
Not After : Feb 18 02:21:17 2025 GMT
Subject: CN=67b14b9e-bb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:5e:fc:8c:5e:e1:71:11:9a:e0:c5:aa:1e:
97:24:fb:60:1d:7b:96:b1:7c:26:7d:ef:c1:8f:4a:
f2:41:fa:ec:50:1b:47:83:a9:bc:86:10:1d:d5:6b:
6b:e8:c3:b3:92:e1:ae:8d:28:9f:56:d2:43:08:5d:
a6:84:3a:6c:f9:bd:24:d4:69:ea:99:c9:a4:00:d6:
26:f5:94:c2:00:2f:e5:3e:1d:2e:e5:96:8b:cc:4f:
1d:85:bb:8a:a9:d5:78:c0:b4:cc:0c:18:59:2b:d0:
24:1e:0d:30:07:2e:03:4d:b9:c2:22:70:d6:46:0f:
e9:0d:87:4c:dc:84:f5:0d:3d:39:14:41:89:d3:2f:
95:48:18:97:7c:b2:de:9e:0b:54:e0:fe:2a:57:55:
68:e9:3f:50:a4:0f:17:a8:2f:79:12:d3:c7:6f:3f:
30:e0:fb:66:0c:85:58:8b:f0:68:57:c2:c8:1e:20:
3b:63:ce:21:95:5b:0d:e2:50:ad:2e:f7:60:01:f3:
7e:43:7d:75:cf:98:8d:3c:22:17:ac:f5:62:b3:bc:
72:b2:35:af:a2:10:a1:a3:7a:30:ae:ef:7b:fa:d3:
49:3a:54:c9:4b:b1:a0:ea:c7:96:07:42:80:85:2c:
bf:d2:0c:37:85:b6:3d:b3:69:ae:1e:2d:62:7b:47:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:AB:8B:09:78:2F:CC:B9:F7:6A:A4:9D:B6:63:21:50:15:25:7D
X509v3 Authority Key Identifier:
keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:b9:7f:10:8c:94:04:2c:29:7f:21:0c:88:c4:65:72:4f:f3:
14:5c:cd:88:2b:e5:94:9b:99:9a:06:98:0e:46:93:8f:ea:6e:
84:33:a4:02:fc:97:f4:08:aa:10:55:81:9d:7a:75:38:43:47:
60:59:6e:76:3f:19:be:8b:55:69:9d:ab:2b:d2:15:35:6f:f2:
9d:c8:eb:9f:d7:20:d5:eb:7f:fc:16:bb:be:98:0d:d5:bf:61:
a9:20:72:b5:8b:11:37:bb:a3:ef:2f:28:88:15:3c:16:54:8d:
a7:08:0c:60:48:4e:78:bb:24:78:64:94:aa:49:4f:9e:88:65:
74:e3:52:19:95:d0:f6:0a:57:0e:82:e7:33:bc:76:f7:1d:60:
25:7b:13:fc:90:7a:63:7b:2e:90:b3:57:3c:39:39:17:39:9a:
35:68:f0:96:52:a0:8c:ec:e3:f9:df:d5:9b:1b:8f:08:20:f2:
f0:29:55:06:6d:cb:5c:20:89:66:5c:1d:51:e2:78:43:7f:b5:
06:b2:cf:0d:45:29:92:f8:ec:db:ef:f6:61:ef:e4:38:c8:4b:
d1:52:32:5d:e4:26:d4:b8:fc:fb:b4:45:72:46:9d:f2:ee:e6:
ba:01:9e:46:13:5f:8b:c6:d9:88:84:65:53:1c:64:f7:8b:f9:
01:07:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:47 2025 by rpki-client