Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File: kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier: Jqk24kKPhwRsYcAwe1cUymjGQXhhT63oK124ydNPhB4=
Subject key identifier: 82:7C:3E:28:EF:CF:2B:F4:64:F5:93:09:04:6C:91:E6:94:A0:1F:EB
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer: /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial: 058A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number: 0588
Signing time: Sun 16 Feb 2025 01:42:50 +0000
Manifest this update: Sun 16 Feb 2025 01:42:49 +0000
Manifest next update: Tue 18 Feb 2025 01:42:49 +0000
Files and hashes: 1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: H7Qt5u4So7ZXI5B4ae4nivXkCJ+oAOvbih4tilMplBk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1418 (0x58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680E82AF
Validity
Not Before: Feb 16 01:42:49 2025 GMT
Not After : Feb 18 01:42:49 2025 GMT
Subject: CN=67b1429a-bf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:de:b6:e7:bf:3d:5e:43:17:42:63:46:f2:
07:3a:d1:80:10:f2:73:8e:f0:41:95:62:8b:9d:7c:
5b:af:52:e5:bd:bf:fc:0c:61:70:ae:60:2f:c2:d0:
61:3b:4b:82:36:0f:0c:89:c5:66:73:c1:3c:0e:75:
eb:27:60:e0:48:c3:05:e3:3a:08:91:5c:b9:cf:7b:
61:3f:b8:cf:d7:6d:90:c7:10:ea:fc:fb:a0:67:78:
f8:0c:1c:3a:4e:5b:4f:c9:b4:49:59:c3:0c:99:6a:
c6:d2:5c:24:bc:10:33:d1:ff:23:55:bc:04:24:b3:
ee:a1:69:a5:bb:2c:98:d3:48:46:67:e0:c5:03:96:
0b:5f:43:be:2a:b8:b4:13:6e:be:85:80:88:48:9a:
c5:bd:c5:25:85:c9:bd:0c:4f:f2:11:b3:43:52:a2:
bf:73:e2:c4:03:b5:0f:3c:84:0a:ea:a8:28:c1:ea:
1f:4e:78:7f:e4:93:bc:5f:a9:64:32:ab:74:f0:aa:
85:5c:c5:72:bc:25:a2:6d:25:ac:80:5f:b9:2b:a9:
cc:37:8f:84:6c:e2:93:4c:2c:75:30:a9:d7:4c:57:
9f:80:dc:e7:f2:b7:07:1d:c9:39:1b:80:04:0c:f5:
c0:6b:57:33:09:20:ad:8f:2f:4c:19:f0:d3:b7:26:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:3E:28:EF:CF:2B:F4:64:F5:93:09:04:6C:91:E6:94:A0:1F:EB
X509v3 Authority Key Identifier:
keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f1:cf:89:4b:94:12:17:db:33:67:2c:aa:31:e7:95:91:e5:
31:01:62:c6:23:12:0a:2c:b8:45:30:c6:37:fb:8c:19:ee:b3:
a8:77:f2:4e:ec:2f:f3:0b:c0:56:3f:c6:4d:98:4d:f1:b7:17:
cc:1c:52:a5:c3:ad:95:1f:c1:79:40:49:e0:4f:07:c7:35:31:
2d:dd:81:d1:86:bd:dc:33:e3:3f:06:90:85:41:76:82:4a:97:
d3:3d:47:c2:a5:c2:e0:d9:79:d6:f1:9d:07:cd:bd:0e:e6:2e:
78:2c:47:c4:13:04:e3:11:3c:29:e6:3c:b1:2f:a3:0c:d8:04:
b7:19:9a:3f:4b:0d:09:54:d1:ac:92:43:d8:65:a3:f5:bf:25:
22:b4:9a:54:1d:42:7d:3f:24:a6:04:de:99:26:74:cd:01:ea:
5c:7c:f9:01:ac:72:49:c5:bd:08:6b:db:a4:15:ea:1d:9c:7f:
32:3e:7e:c5:24:2c:2d:ba:41:28:2a:0f:09:be:cb:dd:fb:fc:
b2:54:ce:12:f3:06:22:24:08:c1:a4:3c:f6:2b:90:7c:00:7c:
73:6f:7d:85:63:c8:3b:7f:96:ca:df:a1:77:f4:99:eb:9a:89:
50:38:c4:2a:37:c9:55:32:7d:00:a4:47:a6:79:4f:2e:66:7e:
c6:ff:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:25 2025 by rpki-client