Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
File: nHonja2J7WPpPiUhm0zaALEAYZM.mft (raw, json)
Hash identifier: h6NtU9eEhkM3+R59VF+hzTc09eJUHwqzHsSghkQ4vpE=
Subject key identifier: 64:02:27:F9:C7:C1:68:2B:C1:AB:D4:8A:41:35:CE:68:F2:1D:16:20
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Certificate issuer: /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial: 053D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
Manifest number: 053A
Signing time: Thu 03 Apr 2025 01:49:36 +0000
Manifest this update: Thu 03 Apr 2025 01:49:35 +0000
Manifest next update: Sat 05 Apr 2025 01:49:35 +0000
Files and hashes: 1: nHonja2J7WPpPiUhm0zaALEAYZM.crl (hash: +aY9xndRsgSgekC589DCrchaM3Dn9yUERXSvNPuwHaU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341 (0x53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36974EEAF
Validity
Not Before: Apr 3 01:49:35 2025 GMT
Not After : Apr 5 01:49:35 2025 GMT
Subject: CN=67ede930-4195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:38:42:29:1a:72:71:17:61:83:7c:e6:a9:
bd:bb:c4:f2:d5:bf:2c:a8:d8:90:ab:db:b5:91:53:
76:3a:dd:32:9a:6d:b7:24:ca:4e:bd:63:46:4b:96:
82:b1:fb:f2:fa:bc:0d:24:93:bf:f0:ea:5a:58:cb:
d7:c3:d9:af:30:21:52:63:0c:28:38:f5:f9:74:b2:
39:fa:7b:eb:80:e8:1a:ed:b1:19:d6:7b:99:e3:02:
38:65:41:da:e7:39:c5:a3:95:cb:ce:1c:73:0a:89:
73:19:b6:4e:c1:43:f7:3e:bf:5d:a4:04:b0:25:32:
e7:f6:1c:f5:9a:16:fa:95:bf:e9:47:9c:de:01:76:
7f:5c:75:87:e7:d0:ad:1a:ed:c4:a2:5c:7f:63:12:
8f:86:09:84:1f:20:4a:ee:47:80:17:96:8b:25:2b:
a6:12:0b:a2:cd:da:7b:d4:b5:23:cd:47:5b:4c:46:
64:ff:b7:29:8f:5b:0a:96:7c:ba:41:ff:ae:eb:2b:
8a:1b:dc:2c:74:7e:a8:02:af:f1:4d:6a:31:79:5b:
5e:60:05:3d:b6:f6:7f:66:bf:50:d1:9b:6e:93:d4:
28:6f:68:8b:b7:56:9f:d2:de:d9:ca:94:1f:e8:95:
82:9f:51:7c:7c:d0:1a:d2:be:10:7a:55:54:44:19:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:02:27:F9:C7:C1:68:2B:C1:AB:D4:8A:41:35:CE:68:F2:1D:16:20
X509v3 Authority Key Identifier:
keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:dc:8d:73:7f:d8:83:86:d4:e6:9b:66:84:4e:fd:a2:26:5f:
d2:1a:31:5d:5a:43:01:60:78:f0:dd:e1:bd:44:59:e3:a6:23:
a5:8f:70:5b:df:1d:60:93:7c:f9:c1:ff:1f:38:46:67:03:5e:
b5:c9:c7:f9:34:0f:56:64:b8:1b:1e:0d:53:dd:a6:14:ba:a2:
2c:9a:24:f5:5f:a9:ff:f6:34:df:87:7d:14:b2:d6:2d:97:da:
f0:c3:be:64:18:e4:65:d9:56:8a:e9:2d:38:ef:f6:91:87:92:
8e:99:9d:54:15:78:b2:f6:3c:e9:29:e5:df:98:2d:12:14:a1:
a7:b1:b9:02:68:22:ad:53:53:ab:43:a3:7f:2a:a6:73:3c:a0:
d6:be:6d:fc:d8:9d:13:9c:bb:fc:cc:81:55:80:3e:71:64:39:
a7:10:ca:c8:41:44:e5:1d:3c:f6:b6:6a:43:27:ee:79:77:65:
01:11:93:c9:1f:10:9a:b2:6a:ae:43:7d:30:64:8f:f7:23:16:
55:e0:37:84:7f:a9:de:b0:70:45:94:fb:cd:be:88:fb:66:28:
7c:fc:da:c3:27:6d:cc:c0:c2:f1:47:af:b6:42:b7:95:09:8f:
a6:41:6c:7c:29:f4:21:c2:d7:98:ba:84:d6:a2:eb:4f:c6:4c:
a2:53:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:35:37 2025 by rpki-client