Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
File: wD_daU9RquOPBRRWEBYXxW_YnEo.mft (raw, json)
Hash identifier: vrjkBJSMve2n3RVuj0zFBKRk5SlBxb2KBAo2bfRt4Ro=
Subject key identifier: 49:26:93:A7:C0:68:08:B0:B7:0C:AA:0E:29:82:3E:F9:29:CB:84:27
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Certificate issuer: /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial: 039C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
Manifest number: 0391
Signing time: Sat 29 Mar 2025 02:43:11 +0000
Manifest this update: Sat 29 Mar 2025 02:43:10 +0000
Manifest next update: Mon 31 Mar 2025 02:43:10 +0000
Files and hashes: 1: wD_daU9RquOPBRRWEBYXxW_YnEo.crl (hash: MVxfO4B+agmA+vFa/JmJagM5kwP00qYQ+CshdEQncio=)
2: 2258DA46D9E611ED9991A6FC2F6D8C1D.roa (hash: zJWQpnOJZG73raUB2XV36ffD+zWbugbvO1hLTY3gu00=)
3: F998A4B4A68111EF83490D8F762E951A.roa (hash: gRJbn7TUJdVqzLN1VGDb0fJr1Lg413PCOuxRtaJJTFU=)
4: 7E60CCBE817511EDBB60FBE8F1222468.roa (hash: 3botBW7CxliYrIkkF4AkSGZ+nyL0LTvgw3z56nnf7ps=)
5: 6069E9FA190611EFAAC79456017001B1.roa (hash: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=)
6: E621A12E190511EF8A909B51017001B1.roa (hash: /esz7AIhM5t30ub8s0aOAXHtnxsPkykRU/r4aTbVw0Y=)
7: 6DC5038018FE11EF8B80B516017001B1.roa (hash: prIb+/59lGAY5m7ee/w0QfgAEg0BFXE2ZtOJctQ1wsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924 (0x39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698DD0AF
Validity
Not Before: Mar 29 02:43:10 2025 GMT
Not After : Mar 31 02:43:10 2025 GMT
Subject: CN=67e75e3e-5658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:f4:6a:56:48:1f:ba:56:26:c4:e9:55:46:
6e:27:e7:6f:8c:ef:86:fc:1a:e5:d6:d0:81:aa:34:
61:80:cb:d3:15:d3:ed:ed:64:e1:79:33:66:ac:bb:
61:ab:82:d3:03:e5:45:09:c3:06:38:95:fb:8e:da:
41:0c:41:4e:09:04:4d:98:a3:61:27:d5:e6:4d:8b:
73:f9:83:c1:e0:10:58:2d:fe:27:a0:1d:09:0d:eb:
9b:ba:7b:7b:ea:3d:d3:eb:0d:9e:8b:3e:d7:38:0a:
23:cd:74:85:26:ca:47:92:96:e8:c8:bd:31:c8:08:
a0:be:f4:c6:13:67:01:11:77:c1:cc:8c:e6:3a:0e:
7a:94:ac:0f:e7:df:56:1c:91:0a:2f:9f:e5:34:3b:
e0:6d:ff:3e:b6:cd:bb:b5:20:4a:b0:5f:9f:78:dc:
10:43:5a:94:8b:ad:16:71:64:e1:11:4c:38:67:b2:
97:2f:25:41:ab:7d:f0:42:e8:b5:79:ff:a4:70:95:
fb:fc:52:8d:9b:ee:0e:71:d2:69:e1:9d:3c:25:70:
76:29:84:fb:e5:27:27:8b:3d:6c:1b:12:3f:12:85:
69:c0:5a:6d:59:50:0c:ec:1e:67:1a:21:8c:7a:64:
49:4c:1f:bb:72:9f:ce:8b:87:3e:72:61:31:86:01:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:26:93:A7:C0:68:08:B0:B7:0C:AA:0E:29:82:3E:F9:29:CB:84:27
X509v3 Authority Key Identifier:
keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:29:6c:06:e7:10:ff:82:9f:08:38:ee:54:a9:e3:bd:a3:
d1:b4:f6:06:98:ba:0b:60:d4:d0:3e:97:fd:3a:20:a7:d7:31:
4d:56:56:f2:4f:9e:de:b9:57:5d:23:aa:15:90:a2:cc:3f:99:
24:70:f7:f4:08:46:0f:14:db:1f:23:07:42:56:68:62:44:d4:
5a:bc:79:be:de:77:cb:25:9a:d1:7a:1e:6a:1b:17:48:4a:1d:
fd:cb:7f:a6:ac:10:2e:cf:0f:0f:89:b5:fc:0b:4b:bd:39:66:
20:ec:a9:58:08:a8:fa:48:9c:df:cb:59:1d:27:0a:6e:6f:c1:
9f:ed:db:97:be:33:95:54:d6:5a:d5:63:62:ce:0b:b1:9f:6a:
ff:cc:ae:62:08:00:7e:c1:04:31:16:83:a5:6f:90:05:c8:1b:
10:22:11:05:b3:d8:32:51:8b:b1:54:76:11:69:80:4b:ef:bd:
74:38:a1:99:61:69:e9:de:2d:7e:1b:d2:39:e1:cb:39:54:fd:
51:dc:78:fb:30:9b:d2:a3:cc:03:62:5a:bb:35:3c:14:36:2a:
e0:e3:85:14:35:28:12:c1:16:94:e6:84:86:02:94:a9:8d:93:
ac:3b:8c:24:e9:ac:4e:92:6c:c9:59:69:ef:ce:b5:a0:17:c7:
87:7e:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:45:30 2025 by rpki-client