Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File: GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier: cHfA9cNbeJ+ysi7ZErWzhiQufR1pfCj54urhB2Zl5L8=
Subject key identifier: 08:45:BA:97:4B:2B:2C:D1:96:1F:EC:02:44:63:36:64:46:1B:4C:D5
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer: /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial: 0260
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number: 025E
Signing time: Thu 13 Mar 2025 02:36:57 +0000
Manifest this update: Thu 13 Mar 2025 02:36:56 +0000
Manifest next update: Sat 15 Mar 2025 02:36:56 +0000
Files and hashes: 1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: VS3OS6SiJPVbiXow915HHd0fYz3HCdPaFnD5gJsmaeU=)
2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683B5BAF
Validity
Not Before: Mar 13 02:36:56 2025 GMT
Not After : Mar 15 02:36:56 2025 GMT
Subject: CN=67d244c8-b207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:a5:5b:31:62:e7:45:d8:92:c1:07:54:47:
2e:3b:c4:01:29:f5:c5:48:b9:43:b7:7f:3b:c0:74:
4c:81:76:ea:fa:4d:8e:d2:94:37:43:66:1d:2c:e9:
25:b2:cd:93:a4:d8:a0:8f:89:8e:5a:7b:e1:d8:e0:
9b:fc:b1:14:d8:2a:e7:50:69:59:1a:0f:95:8b:f1:
a2:f2:10:94:f6:7f:7e:af:ba:dc:1d:a1:c2:36:d6:
17:b4:7b:41:1f:24:a4:88:49:6a:74:81:de:dd:b1:
9a:84:51:91:89:f5:60:b8:68:17:ac:50:86:db:2b:
06:a5:6c:0e:77:10:f1:64:04:ba:2b:50:d3:9d:51:
f8:5f:50:c5:32:c6:f0:78:36:99:08:c2:30:7d:ec:
ba:28:e4:e4:ba:1b:78:60:e6:6c:79:cf:ad:a4:50:
68:87:29:f6:bb:82:f0:fb:27:21:db:0d:bd:c0:33:
45:e4:bc:95:7e:0f:cc:e8:4e:f4:5f:20:6d:f6:86:
dd:b4:d6:d0:1b:bf:b6:9b:32:56:8f:6a:97:66:1a:
76:c5:4c:f3:f3:18:3f:6f:88:c0:d9:9c:6f:98:85:
c7:b2:dc:46:e6:60:3a:11:61:1f:8a:e6:f0:37:e5:
38:9c:17:9a:33:19:1f:7d:1f:f0:d1:b8:79:64:28:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:BA:97:4B:2B:2C:D1:96:1F:EC:02:44:63:36:64:46:1B:4C:D5
X509v3 Authority Key Identifier:
keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:22:be:d3:80:0f:db:84:a7:97:c8:21:75:e2:f7:3b:7f:e3:
da:92:d0:ef:0c:91:97:8c:e7:c0:5e:90:b1:65:83:2e:87:49:
f3:3f:55:e5:ea:86:d9:73:34:9e:09:8e:3b:8c:b2:1f:16:2e:
68:7f:a3:32:26:97:b8:e5:24:bd:0b:15:6f:34:fc:f8:c9:05:
d8:8a:87:92:38:63:11:7c:c8:3b:06:72:c8:3a:45:6b:40:f5:
b0:d7:e0:ee:ea:ee:b5:7f:24:1b:89:cb:8b:9f:c6:c2:51:09:
dd:80:c9:a4:ed:ac:90:dc:c6:90:69:24:dc:c7:a8:c9:68:55:
19:9b:74:bf:93:12:ad:07:78:82:2f:d2:89:89:e8:0e:0f:c0:
a2:2a:b4:09:81:82:18:36:49:e4:2b:99:f0:fe:c7:e9:1e:54:
3e:ed:05:92:0e:06:10:f8:f6:64:9e:11:0a:95:e8:e0:68:4d:
f8:2a:5a:a9:c2:92:c1:33:0e:fb:0f:a5:c1:bd:88:99:c2:43:
4b:7c:15:cb:83:48:3e:d8:d0:1b:c4:df:be:33:27:b2:c2:bf:
b0:aa:27:58:93:28:20:39:f5:9f:30:d0:2c:80:3b:83:ba:df:
73:f0:4d:b8:00:3c:00:a6:33:8d:07:a7:1f:ef:4c:aa:f7:71:
af:5c:27:c3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODNCNUJBRjExMC8GA1UEBRMoMTgzNTA3MkEyMkVGOUQ5QzdDQjhCNUEzNkM2OUU3
QzM5ODEzM0M2MTAeFw0yNTAzMTMwMjM2NTZaFw0yNTAzMTUwMjM2NTZaMBgxFjAU
BgNVBAMTDTY3ZDI0NGM4LWIyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsAqVbMWLnRdiSwQdURy47xAEp9cVIuUO3fzvAdEyBdur6TY7SlDdDZh0s
6SWyzZOk2KCPiY5ae+HY4Jv8sRTYKudQaVkaD5WL8aLyEJT2f36vutwdocI21he0
e0EfJKSISWp0gd7dsZqEUZGJ9WC4aBesUIbbKwalbA53EPFkBLorUNOdUfhfUMUy
xvB4NpkIwjB97Loo5OS6G3hg5mx5z62kUGiHKfa7gvD7JyHbDb3AM0XkvJV+D8zo
TvRfIG32ht201tAbv7abMlaPapdmGnbFTPPzGD9viMDZnG+Yhcey3EbmYDoRYR+K
5vA35TicF5ozGR99H/DRuHlkKGcrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCEW6
l0srLNGWH+wCRGM2ZEYbTNUwHwYDVR0jBBgwFoAUGDUHKiLvnZx8uLWjbGnnw5gT
PGEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzQjVCLzdDM0JFRjA4MzVENTExRUU5Qzg5QzM0MzRBRDlFNkZDL0dEVUhL
aUx2blp4OHVMV2piR25udzVnVFBHRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dEVUhLaUx2blp4OHVMV2piR25udzVnVFBHRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODNCNUIvN0MzQkVGMDgzNUQ1MTFFRTlDODlDMzQzNEFE
OUU2RkMvR0RVSEtpTHZuWng4dUxXamJHbm53NWdUUEdFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQIr7TgA/bhKeXyCF14vc7f+PaktDv
DJGXjOfAXpCxZYMuh0nzP1Xl6obZczSeCY47jLIfFi5of6MyJpe45SS9CxVvNPz4
yQXYioeSOGMRfMg7BnLIOkVrQPWw1+Du6u61fyQbicuLn8bCUQndgMmk7ayQ3MaQ
aSTcx6jJaFUZm3S/kxKtB3iCL9KJiegOD8CiKrQJgYIYNknkK5nw/sfpHlQ+7QWS
DgYQ+PZknhEKlejgaE34KlqpwpLBMw77D6XBvYiZwkNLfBXLg0g+2NAbxN++Myey
wr+wqidYkyggOfWfMNAsgDuDut9z8E24ADwApjONB6cf70yq93GvXCfD
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:15 2025 by rpki-client