Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File: GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier: NxTgKOV0UQkszg3XxOlhqgUYwVnSWRZz59okjzcNmDo=
Subject key identifier: 7B:2F:4F:1E:08:6D:C8:E3:C2:67:1F:04:6F:7C:1D:0B:67:1D:93:FA
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer: /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial: 0247
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number: 0245
Signing time: Sun 16 Feb 2025 02:39:49 +0000
Manifest this update: Sun 16 Feb 2025 02:39:49 +0000
Manifest next update: Tue 18 Feb 2025 02:39:49 +0000
Files and hashes: 1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: nlwJAALfInZRGFE//ylBgJJEP7oeo2a+BBGCj/rHzAM=)
2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683B5BAF
Validity
Not Before: Feb 16 02:39:49 2025 GMT
Not After : Feb 18 02:39:49 2025 GMT
Subject: CN=67b14ff5-1c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:88:7b:f2:84:b3:7c:58:bf:f8:b5:55:70:
41:33:be:d2:0f:1d:5c:76:8d:14:35:f9:3c:5e:93:
9e:7c:3d:46:4d:81:39:8b:14:75:ed:59:6f:8c:ee:
71:c0:2f:07:83:09:ef:80:8b:9e:cb:20:8b:2d:4c:
03:34:22:f9:bf:25:aa:94:40:1d:e9:c1:56:0c:c8:
2f:0a:47:e6:6b:b2:b2:42:12:9b:9c:aa:04:be:bd:
ee:52:75:d7:4e:f1:24:f0:0d:59:ba:58:39:89:28:
bb:15:4c:af:08:76:63:47:60:9b:e7:e7:67:67:1a:
be:33:5f:fa:64:1a:75:ae:f2:3d:49:4d:a3:49:19:
8b:dc:f8:54:ab:e1:30:b3:d1:f3:5c:00:59:12:36:
25:c8:84:b4:cb:a2:e3:77:90:5f:31:d9:f1:12:d1:
cc:0d:e8:9d:50:a7:24:0e:76:2a:c5:79:1b:d9:8a:
3e:5a:04:f5:60:9f:d2:86:62:ff:95:c2:4a:da:9a:
f3:74:02:76:58:f2:82:65:2d:e5:4c:d7:a8:0d:42:
fc:2b:10:f8:54:31:0a:27:91:c0:a6:9f:d6:e7:16:
ec:07:90:3a:f7:2c:1f:be:5e:85:a8:80:cd:be:44:
89:f8:d2:22:22:16:7b:82:6f:66:a9:60:d5:1a:e1:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:4F:1E:08:6D:C8:E3:C2:67:1F:04:6F:7C:1D:0B:67:1D:93:FA
X509v3 Authority Key Identifier:
keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:a2:4f:0a:14:f2:a7:82:8e:25:53:4a:03:10:00:ba:0e:
1b:31:53:e2:cb:dd:4d:e0:a4:d9:87:c9:e1:72:14:42:45:24:
ee:af:cb:75:ec:02:c3:d1:5e:a8:6a:fa:55:c5:63:b3:e3:8d:
5d:69:92:34:0e:58:0f:51:0c:0f:88:dd:10:98:a7:02:a6:bb:
6a:3a:8c:d6:60:88:59:40:3e:a9:23:75:e7:af:bf:a6:68:8e:
e1:0d:44:07:49:c6:7c:fb:56:e2:48:46:f6:13:03:fe:b9:fd:
d1:b5:1c:cf:5d:a2:4d:f1:38:d2:ab:76:4a:6e:70:f9:d3:7b:
03:91:f6:7d:8b:df:87:81:73:3d:c8:53:65:1c:28:98:e7:09:
1c:6b:07:27:c0:fe:a2:ee:e4:6d:99:4f:df:b2:f2:1e:d0:bf:
ca:2b:cd:31:97:a9:64:6e:57:50:ae:3b:89:8a:b3:ae:47:38:
d4:9d:d8:9b:5a:07:dd:47:30:4a:e1:8a:4b:b0:68:88:f1:f7:
f4:c6:fa:9a:b1:02:d2:d1:53:47:0a:33:e5:29:fc:8e:47:82:
dc:8f:7e:b2:1f:06:00:91:16:eb:2f:43:48:fd:71:32:ba:d3:
77:07:9c:55:a1:16:a8:e5:15:76:b3:e7:af:40:c1:8c:d5:ed:
c5:2f:db:28
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODNCNUJBRjExMC8GA1UEBRMoMTgzNTA3MkEyMkVGOUQ5QzdDQjhCNUEzNkM2OUU3
QzM5ODEzM0M2MTAeFw0yNTAyMTYwMjM5NDlaFw0yNTAyMTgwMjM5NDlaMBgxFjAU
BgNVBAMTDTY3YjE0ZmY1LTFjNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGKYh78oSzfFi/+LVVcEEzvtIPHVx2jRQ1+Txek558PUZNgTmLFHXtWW+M
7nHALweDCe+Ai57LIIstTAM0Ivm/JaqUQB3pwVYMyC8KR+ZrsrJCEpucqgS+ve5S
dddO8STwDVm6WDmJKLsVTK8IdmNHYJvn52dnGr4zX/pkGnWu8j1JTaNJGYvc+FSr
4TCz0fNcAFkSNiXIhLTLouN3kF8x2fES0cwN6J1QpyQOdirFeRvZij5aBPVgn9KG
Yv+VwkramvN0AnZY8oJlLeVM16gNQvwrEPhUMQonkcCmn9bnFuwHkDr3LB++XoWo
gM2+RIn40iIiFnuCb2apYNUa4UKRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUey9P
HghtyOPCZx8Eb3wdC2cdk/owHwYDVR0jBBgwFoAUGDUHKiLvnZx8uLWjbGnnw5gT
PGEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzQjVCLzdDM0JFRjA4MzVENTExRUU5Qzg5QzM0MzRBRDlFNkZDL0dEVUhL
aUx2blp4OHVMV2piR25udzVnVFBHRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dEVUhLaUx2blp4OHVMV2piR25udzVnVFBHRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODNCNUIvN0MzQkVGMDgzNUQ1MTFFRTlDODlDMzQzNEFE
OUU2RkMvR0RVSEtpTHZuWng4dUxXamJHbm53NWdUUEdFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgI6JPChTyp4KOJVNKAxAAug4bMVPi
y91N4KTZh8nhchRCRSTur8t17ALD0V6oavpVxWOz441daZI0DlgPUQwPiN0QmKcC
prtqOozWYIhZQD6pI3Xnr7+maI7hDUQHScZ8+1biSEb2EwP+uf3RtRzPXaJN8TjS
q3ZKbnD503sDkfZ9i9+HgXM9yFNlHCiY5wkcawcnwP6i7uRtmU/fsvIe0L/KK80x
l6lkbldQrjuJirOuRzjUndibWgfdRzBK4YpLsGiI8ff0xvqasQLS0VNHCjPlKfyO
R4Lcj36yHwYAkRbrL0NI/XEyutN3B5xVoRao5RV2s+evQMGM1e3FL9so
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:23 2025 by rpki-client