![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File: JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier: r0bJDNYPHIqMJN4oO67SUL5BP4JC9ZaINr1ZyL+o+GQ=
Subject key identifier: 9F:7E:90:BB:EE:80:74:4D:14:69:B7:B5:5A:C6:FE:3C:72:52:0D:15
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer: /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial: 043F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number: 043D
Signing time: Sun 16 Feb 2025 02:02:55 +0000
Manifest this update: Sun 16 Feb 2025 02:02:55 +0000
Manifest next update: Tue 18 Feb 2025 02:02:55 +0000
Files and hashes: 1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: 1c1v6r3XMU4c8csigWygigbYvKSxmwxS8IMTKnV7Xr0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFD9AF
Validity
Not Before: Feb 16 02:02:55 2025 GMT
Not After : Feb 18 02:02:55 2025 GMT
Subject: CN=67b1474f-7ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:c0:05:54:d6:a4:ef:63:a2:48:eb:fc:1f:
01:68:8e:e4:90:a7:8a:2c:82:e9:85:83:07:70:cd:
e0:70:46:71:fa:51:d0:8f:47:b9:f2:a8:12:1b:78:
5d:1d:33:12:34:9a:66:4d:a7:fd:cb:a3:dc:b6:29:
0d:98:63:24:1f:62:1f:be:93:3c:d4:ce:f5:34:d1:
a4:b4:d3:09:8f:16:76:6f:8d:25:cf:71:6e:e5:a1:
47:63:74:33:4d:be:36:a4:19:80:41:a7:d7:2d:4d:
24:c9:37:7a:a7:25:a6:31:9c:93:66:36:03:ef:a3:
93:e5:7e:6d:0b:b5:06:1b:5e:15:50:49:89:61:47:
a1:21:96:3d:aa:04:4f:bd:0d:18:ea:7f:95:3d:e0:
00:a1:12:0d:39:cb:60:66:73:51:5f:87:f1:e8:1f:
cf:ae:a6:86:08:83:c4:3f:35:56:34:12:87:d6:64:
6a:67:14:d7:4b:47:c1:92:1d:24:39:58:b0:37:14:
14:02:a6:64:86:01:20:29:ff:ef:dc:3e:d2:f3:c7:
47:f4:d8:b2:d9:7c:01:1f:49:12:34:42:41:1a:12:
64:66:dc:41:01:51:ee:44:66:93:99:ca:be:69:73:
1f:7b:93:04:1f:9a:f3:8f:cd:f9:8a:12:00:a3:73:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:90:BB:EE:80:74:4D:14:69:B7:B5:5A:C6:FE:3C:72:52:0D:15
X509v3 Authority Key Identifier:
keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:e6:de:f5:22:d8:b4:41:c7:75:cb:55:24:ca:50:34:c2:41:
89:9c:44:c6:f8:be:94:b3:b0:66:45:99:fa:52:70:59:b7:20:
3a:40:39:39:e7:f9:6e:ca:21:9a:14:3f:e7:5e:76:59:fa:f9:
93:ad:97:ad:05:58:97:16:6e:2e:74:59:e1:52:8c:3f:73:1d:
e5:bd:f9:97:63:48:f2:24:bf:1a:0f:13:f4:c9:d9:99:a1:7c:
63:d2:61:08:db:d8:a1:24:46:f1:d0:81:e6:c6:94:fc:c3:42:
a0:09:7a:20:bc:f3:ff:31:21:6d:f9:03:be:b1:da:62:1a:78:
b7:e0:f4:2c:bd:4c:6a:e7:21:3f:c8:53:fd:8d:65:0e:f6:4a:
aa:78:45:04:24:7d:b8:60:71:25:8d:f6:24:73:ed:87:95:ed:
02:e6:79:f4:0b:ec:4a:61:d0:a6:be:a3:ff:25:d3:c1:e7:92:
4b:dc:f6:7e:21:31:53:08:65:a7:e0:33:61:e1:f8:a3:6e:2b:
8f:af:03:47:c0:0e:0d:15:2b:96:63:ca:5b:4e:75:1a:ed:a8:
b5:15:0e:67:2b:14:ee:f6:4c:e3:01:6d:7a:cf:3f:5a:f0:3f:
66:ba:29:1e:c2:78:27:78:de:58:cf:df:f3:dc:8a:b0:e3:d9:
85:43:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:37 2025 by rpki-client