Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File: KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier: TMwbWy1fPpev4GeO6e84foKlZ9ms0OwJ5ubR+ah0BtE=
Subject key identifier: CB:1E:74:EE:47:42:43:16:5F:D0:7B:85:EB:DA:86:D5:24:BF:BA:0B
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer: /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial: 0124
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number: 0123
Signing time: Sat 29 Mar 2025 03:27:29 +0000
Manifest this update: Sat 29 Mar 2025 03:27:28 +0000
Manifest next update: Mon 31 Mar 2025 03:27:28 +0000
Files and hashes: 1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: jS0GLK5tKdVpRJ1orbEkvFtNw64lA9DUsnV58bBrcA0=)
2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3689F69AF
Validity
Not Before: Mar 29 03:27:28 2025 GMT
Not After : Mar 31 03:27:28 2025 GMT
Subject: CN=67e768a1-a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:ce:8b:cb:f9:fa:03:10:58:e7:b8:65:ff:
d8:83:3b:14:46:94:fd:bb:1c:0a:fc:a3:b3:98:58:
bd:f0:ed:d4:58:78:82:fb:8e:e3:f7:28:a5:df:8d:
71:ff:2e:44:be:ab:e5:a9:2a:23:8b:88:cb:a8:80:
92:21:6c:ad:ff:64:e4:f6:e4:6d:71:1f:61:87:e6:
24:ca:c7:89:bc:19:a5:93:9c:76:bc:96:1f:1a:42:
02:bf:f1:67:bd:33:29:d6:79:34:ba:85:12:30:83:
0f:40:ae:e1:1f:58:d5:20:70:84:82:62:d2:40:a0:
04:9a:3e:a8:e5:75:e8:02:3b:70:db:2c:1a:c4:57:
3f:d8:66:49:21:c1:04:3d:f8:70:a4:9e:89:3d:ee:
80:fa:bb:4b:46:9c:e9:12:85:87:5c:45:5b:a3:e0:
2d:7d:17:03:37:ae:33:c1:2b:0a:32:a1:41:78:ed:
c5:e1:df:a0:ed:84:ee:0c:58:0e:52:21:78:69:b4:
2d:ac:5a:7a:a5:64:e8:ef:84:ae:8c:5c:66:a9:16:
56:bb:d1:89:85:10:22:a5:b1:d5:29:d3:9e:e9:69:
00:56:b7:cb:0b:14:3a:b1:7e:56:1c:22:d3:09:3f:
11:df:49:dc:76:27:09:b7:c3:00:cc:cc:50:6e:60:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:74:EE:47:42:43:16:5F:D0:7B:85:EB:DA:86:D5:24:BF:BA:0B
X509v3 Authority Key Identifier:
keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:3d:ae:1c:c5:6c:c2:9f:00:eb:76:6a:ff:8a:45:06:4a:
e4:86:d1:92:96:c4:90:3b:ea:3c:f1:e8:15:16:4a:a6:06:33:
28:93:9f:b2:c0:6c:7c:8b:c5:3c:e5:bb:02:6f:cf:86:55:ca:
c3:fc:df:19:ef:38:ca:03:3c:ab:ce:c4:52:19:34:a3:fd:a4:
6a:4d:31:7e:8a:07:94:3d:ee:9d:70:0d:ea:97:71:5b:51:b6:
fc:0c:b0:20:2d:dd:04:04:40:74:dc:29:32:83:35:91:c5:9a:
3a:e4:84:55:9e:12:bc:7a:9f:77:20:53:ad:e9:d9:01:5e:ba:
2f:46:56:fa:a6:b9:8a:51:73:15:70:7f:cf:f1:59:26:dd:73:
52:fb:b5:ef:ff:ae:b1:09:c8:95:cb:ff:fc:6b:4f:c8:20:7b:
90:97:0d:2c:b1:f2:2e:03:3d:5f:04:89:61:34:f3:28:ea:cf:
e6:b9:36:0b:34:27:4e:0d:8d:59:a3:b4:33:a5:2d:9b:a8:76:
c4:c9:72:6d:ba:d5:05:a7:4f:da:39:c4:19:87:9b:35:36:64:
9d:7e:8c:97:10:20:b2:88:f4:d2:c1:7f:b4:ce:e2:85:99:9d:
86:a9:e8:94:95:fd:28:88:0f:5b:19:e3:d9:db:35:be:64:6a:
38:09:fb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:06 2025 by rpki-client