Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
File: i_LUycasChgyjdPrbLWQRBc3zug.mft (raw, json)
Hash identifier: f69yzvJUy5W09NMWPDs9B0aJHqLoGLgznQRveAXMLBI=
Subject key identifier: 43:80:BA:1A:93:07:44:DC:58:3C:48:12:88:DB:C6:B6:F6:75:B7:F4
Authority key identifier: 8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8
Certificate issuer: /CN=F369442EAF/serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
Certificate serial: 0671
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
Manifest number: 0670
Signing time: Sun 06 Apr 2025 01:32:45 +0000
Manifest this update: Sun 06 Apr 2025 01:32:45 +0000
Manifest next update: Tue 08 Apr 2025 01:32:45 +0000
Files and hashes: 1: i_LUycasChgyjdPrbLWQRBc3zug.crl (hash: GPPe3up8XZd1IKbawelaaVvl5+S88fFggXmc3gOgAqs=)
2: CA4847F0260111EBACE81C12F8AEA228.roa (hash: wvHb/Kw9w+IZBIpt5st+Xz0N4A4tUwQJ6TE8L7LFn7U=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl
rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369442EAF
Validity
Not Before: Apr 6 01:32:45 2025 GMT
Not After : Apr 8 01:32:45 2025 GMT
Subject: CN=67f1d9bd-9310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:00:b9:d0:b4:ce:8d:00:02:c4:18:89:da:
bf:9d:c0:1c:68:c8:8b:1f:e1:cd:d2:34:e9:ee:49:
67:37:52:c0:80:b2:ef:16:c6:8f:ef:ca:84:89:33:
ad:37:31:28:47:2e:0a:4e:ea:85:a3:37:23:2f:74:
f1:15:23:a2:a7:fe:12:7b:e2:fb:6b:a1:54:74:00:
17:9e:2e:dd:de:19:52:c0:5b:04:83:49:6a:c3:a5:
4a:be:4a:f3:2d:b0:8e:f5:00:97:51:aa:22:9b:5b:
5c:a2:4b:8e:26:de:00:ac:5e:98:40:de:d4:00:1d:
20:f3:ff:39:5f:f2:ed:b1:4f:c1:c8:da:c0:e3:86:
6b:b5:fc:e4:4e:31:1c:89:9d:0c:73:57:73:fc:bf:
0b:b2:ee:2e:79:01:b1:28:44:9f:74:5a:60:45:be:
9d:78:6d:4f:d9:16:8d:2d:8b:16:59:9a:2a:81:17:
65:95:57:ab:63:24:2e:5b:84:26:27:c3:2a:cf:59:
7b:57:8b:7f:53:29:60:c3:13:19:ee:47:96:6a:44:
48:f1:47:19:30:f7:79:be:97:3c:ee:fa:a7:76:92:
b7:1f:0c:4a:6c:14:46:bb:90:90:3b:d5:db:1c:81:
5c:ef:fb:37:73:96:b1:f5:19:26:ad:bb:d7:1d:15:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:BA:1A:93:07:44:DC:58:3C:48:12:88:DB:C6:B6:F6:75:B7:F4
X509v3 Authority Key Identifier:
keyid:8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:d2:53:66:8e:36:b5:85:0d:6e:c3:22:4f:3d:1a:c7:b6:c1:
05:55:f2:fe:8a:f4:8d:47:7f:cd:d9:ea:b1:87:e9:6b:89:61:
9c:5a:ff:05:ae:e2:92:1f:55:b4:4f:ce:c4:67:26:ef:a6:1d:
11:92:db:29:64:db:d9:8e:cd:bf:7d:3f:73:92:26:10:7b:32:
b2:ef:a6:9d:2d:fa:4a:b0:95:85:54:62:54:04:aa:55:90:9f:
28:89:c9:d3:0e:43:3f:50:47:a3:57:9a:3e:86:e1:b1:67:4d:
06:e2:03:45:22:77:9b:f5:9c:b4:e3:eb:9d:aa:07:43:29:38:
9e:fe:64:70:f0:ab:0f:1c:3b:b0:b0:bf:5c:b1:b4:33:ef:14:
4b:ed:3d:40:ef:78:77:27:e7:70:c5:74:0e:88:89:2f:71:e9:
6f:50:32:08:04:cb:88:27:15:4a:92:95:4b:1b:8c:e6:08:3c:
2b:32:1a:9a:e4:2b:5a:1a:08:51:2b:a3:af:3a:32:78:ce:5e:
b5:2a:c7:bf:ee:f9:43:05:4c:0e:45:cc:a1:8e:e1:ac:e8:43:
61:c2:54:cc:01:30:9a:8c:b0:21:bf:ba:4a:92:11:bb:0e:84:
ea:5f:0d:f7:0c:d8:f7:fa:1a:cc:27:9a:96:50:90:f9:af:3e:
0e:bf:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:52:58 2025 by rpki-client