Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File: zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier: sCUeZwxxfNMr4t7VAqP42VEdZoVt3EStFga0X8LixEM=
Subject key identifier: EC:5A:2C:F5:F4:3F:1A:5B:4D:65:CC:65:05:CD:92:DA:E9:BA:59:D5
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer: /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial: 46
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number: 45
Signing time: Wed 05 Feb 2025 03:21:33 +0000
Manifest this update: Wed 05 Feb 2025 03:21:32 +0000
Manifest next update: Fri 07 Feb 2025 03:21:32 +0000
Files and hashes: 1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: +T6buxyQ1j1wOe6sGl2rTTEmn5mg2Em+o6TPRivYP88=)
2: 9D0722C8B24511EF879E88B5762E951A.roa (hash: re1+1WPfPmFof+DoUwQFqcaVy7veeKE2VogjJwa7xs8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BFA8AF
Validity
Not Before: Feb 5 03:21:32 2025 GMT
Not After : Feb 7 03:21:32 2025 GMT
Subject: CN=67a2d93c-96a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:c7:4e:c6:96:ea:55:14:34:27:0f:ab:e1:
1e:d3:33:c7:6d:fe:95:e6:dd:77:13:2c:ec:82:dd:
c4:03:93:1b:5a:05:16:11:5c:12:04:dc:bf:c1:24:
ec:04:ac:cd:43:8c:06:3b:b2:31:cb:81:99:33:74:
f3:5f:8f:8e:ac:78:33:2b:e6:bf:c7:f8:03:13:6e:
62:8a:2a:b5:9c:85:27:2d:52:56:fb:ec:ae:6a:13:
b5:f0:05:1f:b6:cd:ac:5d:ae:e1:34:6b:cc:52:65:
be:85:7f:68:7b:b2:fb:96:e2:eb:33:cd:24:01:ea:
bf:ff:35:0c:91:ca:69:70:df:18:48:14:94:14:da:
53:76:7c:db:53:a7:95:d9:a5:fa:81:14:f8:3d:19:
c8:06:88:e9:6f:4d:cd:eb:8c:ac:bc:75:c7:6b:55:
29:49:21:d9:f4:4c:23:a9:d3:eb:a9:42:d7:49:ba:
c8:fe:45:d0:f6:50:ac:de:47:92:0f:35:b0:39:9b:
70:29:ea:ca:87:76:ee:d8:72:03:c6:92:6f:9d:c1:
08:9c:0d:29:7c:2d:2f:d4:5e:37:2a:d9:cf:57:fa:
97:30:96:3c:ad:d7:ee:ab:ca:c1:82:59:28:66:aa:
d9:31:fd:26:77:79:17:e2:b1:9c:89:00:1c:8b:b5:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:2C:F5:F4:3F:1A:5B:4D:65:CC:65:05:CD:92:DA:E9:BA:59:D5
X509v3 Authority Key Identifier:
keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:42:96:88:7e:90:6e:45:e5:41:5e:b6:2d:39:6d:16:97:cf:
ba:9a:20:5c:37:f4:b0:67:17:19:25:c1:cd:1b:e2:c6:e9:13:
21:ef:1c:7a:17:27:cb:9d:20:e9:44:7a:12:39:1e:73:3f:f1:
2f:f1:85:2e:f5:c7:51:7e:c6:15:ee:76:fc:fe:6d:ce:1b:b0:
e4:4a:5c:c1:d9:b9:53:c6:8d:4f:d8:74:2c:e7:19:f3:59:49:
e1:c4:50:6e:e4:a8:c4:c1:c2:d8:94:62:ca:b3:81:25:f0:72:
db:63:3d:fc:38:d4:55:6c:0e:72:14:76:02:34:40:57:d0:e2:
b7:ca:98:c9:38:c0:44:f3:7e:66:9c:9f:4a:5d:f8:84:82:80:
b5:db:50:20:1b:bc:94:dc:e5:f0:32:69:f6:95:5e:34:23:68:
f5:cc:b4:16:f1:84:01:36:1f:fe:76:cc:47:48:94:40:f5:56:
e7:4c:52:dd:28:26:af:a7:48:bc:9a:df:4d:a6:f0:de:a7:0c:
90:28:c2:a2:55:4f:dd:e7:ad:9f:ee:82:04:98:e2:4f:bf:ca:
e2:88:c7:39:14:65:dd:5c:ac:c9:b4:5e:f5:a4:26:f0:ff:96:
6f:1d:2c:8a:a0:30:d1:03:0a:d3:07:3f:f4:9a:18:49:f4:2b:
02:79:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:00:16 2025 by rpki-client