
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
File: rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft (raw, json)
Hash identifier: o8k/Ru5iATV0jcCkeli0ek/GUUwlSBNnUulQ2+RSNew=
Subject key identifier: D5:B7:09:E0:0E:5A:6D:CF:18:8B:47:65:27:B2:C0:22:6B:7D:82:7B
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Certificate issuer: /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial: 0614
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
Manifest number: 060E
Signing time: Sat 29 Mar 2025 02:01:35 +0000
Manifest this update: Sat 29 Mar 2025 02:01:34 +0000
Manifest next update: Mon 31 Mar 2025 02:01:34 +0000
Files and hashes: 1: rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl (hash: MaAYCUWXbnROgpKH3T15+SfshlSfihug1Gn5Jo1HdYY=)
2: BABA0216CDB011EDAD89A0C6F1222468.roa (hash: luxr+QNwcQO4iv8H9JMZsFbjB/B4eY0ANzOBLeZGQ7s=)
3: BCAF9294702811EB8791AD25F8AEA228.roa (hash: AT0o7ug7v2ZBAyMdgUq3SD/St9P0mYCt+1mdlQ+38qg=)
4: 9D82CD40CDB011ED812241C6F1222468.roa (hash: qsqlB1DyQeEjQRpQD9Kt6opY0oeDRgR3OAxfv/Yfba8=)
5: 1C83F7F2CCA011ED9FBDAF90F1222468.roa (hash: 34j16EfLKBboBdu4W8orVCqv2BpWRoneipEfOF9Vyhs=)
6: A0FB2C7A702811EBBEEF8C25F8AEA228.roa (hash: WRA7vUkmweseystfPnsoSmxUQdjwHDtXfkHr1rmgxF8=)
7: 365FE0469DF411EB9F82B84AF8AEA228.roa (hash: Ws8N8X7YiONJc56TyVAJKcp66X/6QscYInYVrETeq+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1556 (0x614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368A3D1AF
Validity
Not Before: Mar 29 02:01:34 2025 GMT
Not After : Mar 31 02:01:34 2025 GMT
Subject: CN=67e7547f-deaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:98:6c:bf:d6:55:88:23:8e:fb:c6:f0:7e:
11:33:73:53:3f:7c:78:ea:4d:7e:bb:b5:90:04:6a:
cf:11:8c:75:7a:76:55:62:bc:da:ce:f8:ed:f5:c1:
07:87:20:f6:d0:71:51:4d:e5:45:22:eb:93:3a:de:
67:d3:a6:c3:b9:15:57:5b:ef:69:c4:b8:de:f0:81:
d1:e1:a3:05:8f:a5:4b:8b:cf:b8:2f:79:25:65:e1:
a2:b1:7d:0a:b2:61:a7:44:4c:61:57:37:e9:f3:52:
be:36:15:a8:7b:53:cd:de:41:6e:b2:9c:c4:a5:bf:
ef:29:96:59:ac:4a:1f:f9:b7:5e:49:8d:a6:9c:99:
c9:73:61:ac:b7:eb:5a:d1:b4:07:f0:36:04:d2:4a:
d2:93:b7:68:4e:a0:71:d5:f5:2d:e6:26:5e:53:64:
ea:0c:f1:3c:9b:e9:e4:2b:0c:ee:cb:40:8e:37:df:
2f:ef:60:c2:8e:86:6f:80:41:1c:53:71:33:06:ed:
c5:6c:a6:23:b8:a3:98:2a:ac:6a:f1:62:9d:ef:18:
69:73:60:b6:90:9f:69:e6:0a:87:a9:80:79:25:54:
a7:44:20:95:c7:cb:4f:bf:51:3a:f4:65:82:6d:b5:
c9:54:e8:77:0a:d8:68:d4:b2:fa:6e:12:4c:53:1b:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B7:09:E0:0E:5A:6D:CF:18:8B:47:65:27:B2:C0:22:6B:7D:82:7B
X509v3 Authority Key Identifier:
keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:72:21:f0:97:ea:82:12:4c:9e:25:f7:93:90:5a:bb:67:bd:
8d:25:c2:34:43:60:8c:64:27:7c:50:d2:f7:de:69:43:87:dc:
dc:62:19:15:9a:60:26:89:c0:df:f6:c8:b3:5c:fc:a6:25:c7:
ae:07:a0:8f:c1:4e:0d:bb:f2:85:11:7b:38:ab:1e:8b:b6:a4:
3c:bc:71:fb:db:d2:dc:47:97:9b:bd:4c:76:ee:a3:61:93:d6:
27:3c:9a:cd:d8:83:6c:a7:4a:7a:f2:c5:c1:77:21:08:35:12:
4b:49:9f:53:35:78:04:b0:b9:46:1a:d9:f2:9b:aa:df:c7:d3:
4b:36:d7:e8:89:47:3d:9e:b0:35:6c:36:07:07:aa:07:e5:da:
b4:24:cf:a6:1f:24:96:7a:fd:67:71:2b:12:a7:3f:46:3f:d5:
33:e1:12:01:e9:16:94:e8:14:93:3a:ce:0d:55:0f:cf:25:0a:
58:6b:f3:58:56:e1:e9:da:b8:2e:e4:47:55:31:8e:5d:8e:ee:
f3:24:e0:08:08:a6:f7:59:32:69:ad:9a:a6:f7:b5:de:3e:c4:
42:10:e2:24:13:fe:27:02:2b:4b:78:f3:07:fd:17:53:d6:05:
6e:60:02:0c:17:ba:54:ad:94:0f:94:39:67:4e:75:11:ae:b4:
83:bd:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:19:45 2025 by rpki-client