Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
File: LWxhNdlQPaoy1mWGoi7WGSlcar8.mft (raw, json)
Hash identifier: uL43Bkli19vpReUSbnLzC5L1Pi0k35EZ5c51xW6U9DM=
Subject key identifier: CA:4D:7E:D0:BA:8E:1A:C9:2A:BD:92:0C:B7:27:B1:68:F8:05:47:31
Authority key identifier: 2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
Certificate issuer: /CN=F367FE62AF/serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
Certificate serial: 0534
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
Manifest number: 0533
Signing time: Sun 16 Feb 2025 01:50:07 +0000
Manifest this update: Sun 16 Feb 2025 01:50:07 +0000
Manifest next update: Tue 18 Feb 2025 01:50:07 +0000
Files and hashes: 1: LWxhNdlQPaoy1mWGoi7WGSlcar8.crl (hash: O2Vgkze9lFdgIh4EpmqSk5zV68qbvFe69/OYvn+SQHo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FE62AF
Validity
Not Before: Feb 16 01:50:07 2025 GMT
Not After : Feb 18 01:50:07 2025 GMT
Subject: CN=67b1444f-0419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:01:a2:96:f3:3f:91:d6:b8:bf:b5:91:4a:
05:c6:a2:05:9b:38:93:e1:7f:c6:32:a7:fc:25:0d:
e7:f2:ca:2b:8f:f2:fc:ac:c9:96:16:b9:f2:dd:ec:
1c:7a:63:82:68:65:19:12:1e:3c:84:8f:60:a2:8b:
7b:f3:32:1b:d4:c5:ce:e2:10:2d:2a:5b:12:83:0a:
fb:dd:1d:51:ff:d2:2d:3f:9b:8a:a0:49:70:e9:61:
7c:51:79:f6:41:24:31:f3:13:10:74:36:8c:86:2b:
7e:09:49:d7:d9:2d:08:6d:c2:2b:c6:04:85:ab:77:
08:5e:d9:28:f5:06:92:57:83:17:6b:b4:d4:76:0d:
ad:1a:31:bd:5d:24:bb:be:51:9c:06:fe:3d:74:df:
ea:a2:ab:9b:35:80:ed:d7:41:f7:29:a0:8b:ea:9c:
e6:44:5e:1d:1a:ca:98:06:31:c2:33:4e:57:86:eb:
54:2d:5a:d3:8c:2d:d2:0b:82:9c:71:ae:ad:85:be:
30:36:47:df:19:77:11:7c:6d:8a:ad:e9:3c:15:de:
37:8d:dc:3a:b1:b1:c3:e5:df:d8:72:e3:37:80:e9:
77:50:65:a0:87:80:9b:f8:42:01:81:12:bf:63:d6:
4b:e1:31:ea:17:29:fb:a1:ca:ed:df:a1:91:88:ff:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4D:7E:D0:BA:8E:1A:C9:2A:BD:92:0C:B7:27:B1:68:F8:05:47:31
X509v3 Authority Key Identifier:
keyid:2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:b7:d5:5d:9b:6f:fb:f7:f6:5b:a1:d7:60:48:1d:99:ec:
70:50:84:29:b0:b0:1e:d9:bc:5e:c2:04:d6:99:a9:d3:f1:f8:
40:54:cc:c3:56:6a:47:f6:dc:50:98:cd:f1:b7:a6:ca:c9:50:
2b:06:3f:fb:64:35:c7:68:12:95:c5:40:45:91:07:8b:8b:62:
ba:4b:8b:89:2d:3f:47:a7:c8:cd:7c:09:46:68:45:4b:8d:3d:
b1:87:d3:e6:31:53:c3:84:d2:0b:6a:83:dc:a2:8b:e6:18:0e:
04:53:74:3c:c1:75:b7:6c:c6:a4:12:7a:23:8b:06:41:69:f3:
2e:ac:e3:da:af:39:4a:65:fd:3d:63:12:a8:25:53:27:7e:09:
89:6c:66:f5:c1:37:df:66:c4:f9:20:3f:9c:64:4a:81:e6:d6:
52:f3:1b:ae:0e:66:29:21:14:03:f0:74:e0:a8:64:e8:1c:32:
23:49:f2:a8:98:fc:3c:c7:61:a0:55:e5:e8:a5:b8:41:9d:2c:
d5:45:cf:5c:15:04:66:1b:1b:74:b1:62:90:21:7e:c3:b6:62:
a7:d5:60:96:3b:02:b0:c7:1b:67:b5:34:d2:16:a5:29:bf:1b:
c6:85:b0:68:c1:8b:5e:a7:4b:14:66:a4:40:f2:b6:d0:a7:d9:
b7:96:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:03 2025 by rpki-client