Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: KhtdNBACwt904/qGK63CAcAY+gJN6Mfxgf65ngEingk=
Subject key identifier: EC:9B:E5:3C:14:D1:44:5F:49:F0:D9:C0:5E:C2:07:AB:BC:00:9D:86
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 0571
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 0571
Signing time: Sun 16 Feb 2025 01:45:26 +0000
Manifest this update: Sun 16 Feb 2025 01:45:26 +0000
Manifest next update: Tue 18 Feb 2025 01:45:26 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: AuwKaGWLi5Y57b7Ob+L8IK8RxsDGzsxj+jPOz3dZKp8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF
Validity
Not Before: Feb 16 01:45:26 2025 GMT
Not After : Feb 18 01:45:26 2025 GMT
Subject: CN=67b14336-49e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:b5:1d:95:11:f2:c9:62:be:10:39:4d:c4:
5b:a5:b9:bc:57:00:79:3c:1c:78:3f:20:f6:33:c0:
a8:fb:1f:16:4f:f2:61:56:81:28:cf:9f:de:7f:ce:
98:d4:0e:4b:3b:62:08:c8:37:5f:48:72:b5:05:50:
8d:9b:90:7c:96:10:b4:2b:a6:04:48:ea:73:43:5f:
9c:c3:26:9f:77:bb:10:23:86:d6:0a:6c:39:23:dc:
83:fc:d8:40:49:81:7a:89:58:65:05:90:3a:90:39:
1a:f7:1f:01:02:8c:9f:60:f4:b6:3d:cb:df:18:22:
15:1b:ed:91:50:c2:1f:6b:05:e9:5c:2d:62:4a:f0:
95:8c:e8:21:99:19:dd:a0:3a:25:dc:e7:87:3b:f3:
36:9f:b7:57:ab:e0:2f:c7:b6:d5:7f:35:f5:c3:0b:
7b:1d:31:5c:15:95:80:26:34:13:2a:01:61:81:9b:
84:4c:0e:3c:15:81:9e:1e:29:22:73:4d:8b:6e:b2:
b1:8c:35:61:d6:aa:6f:61:ed:4d:fd:23:1e:06:87:
8f:98:d6:0b:ea:ac:c7:9f:f2:80:9d:7e:05:74:50:
e0:16:a3:f6:cb:40:71:b2:05:ce:9e:0c:1b:8a:50:
b6:9f:76:32:01:82:8e:f2:c5:3b:d9:ec:d5:96:cd:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:E5:3C:14:D1:44:5F:49:F0:D9:C0:5E:C2:07:AB:BC:00:9D:86
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f3:74:ee:ac:83:3f:9e:1a:a9:9c:84:31:df:5a:09:c8:6b:
24:09:36:06:12:1e:fc:89:41:f9:21:ec:a8:e9:ed:17:4d:b8:
ce:a0:01:a5:5d:75:0b:5b:38:2b:8d:9f:24:9c:e7:74:93:cf:
51:42:6c:fc:c6:5a:8d:f8:61:68:71:87:80:43:47:8f:39:df:
4a:3b:67:18:e4:ca:7f:c6:1d:2d:b4:ca:67:28:42:c1:b5:db:
7c:8b:00:d4:44:54:f5:cd:52:d8:be:13:19:cd:6c:90:22:78:
10:91:4a:31:4a:5f:9e:15:42:02:ab:d0:63:95:2f:ea:34:39:
95:5d:78:24:07:07:4e:c6:be:58:3b:79:48:ba:7d:fb:a4:76:
c7:e8:e1:11:a4:d2:5b:73:1a:e3:4d:ad:d7:41:a2:bc:c5:67:
98:36:11:3c:e4:ef:0d:45:87:f9:83:34:d7:62:c6:07:0d:b9:
f3:5c:e6:67:66:98:35:6a:ad:aa:41:ad:99:9a:ca:0d:e9:fa:
1c:b6:a5:d9:ec:b6:68:76:b4:5a:dc:fa:a2:1f:5b:e7:46:28:
b9:31:4c:9b:41:9c:fe:0a:87:f2:ee:8f:37:63:f6:19:73:1b:
3c:9f:d8:6b:08:73:4d:6a:e2:cc:33:5d:0e:d7:f2:9b:64:ba:
25:2e:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:28 2025 by rpki-client