Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File: DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier: jsrBu89jCouDIqkGbGP+z2iIBW4+oN3i71IJ+eUKqKQ=
Subject key identifier: AB:AC:D3:35:E1:C8:39:24:AD:A6:5B:29:34:DA:7B:7B:E0:8A:F5:ED
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer: /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial: 01F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number: 01F7
Signing time: Thu 03 Apr 2025 02:45:07 +0000
Manifest this update: Thu 03 Apr 2025 02:45:06 +0000
Manifest next update: Sat 05 Apr 2025 02:45:06 +0000
Files and hashes: 1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: 4X0LvQIbNHzWVWoYBrSI0K2oBCojux7Clztnx+4+Rbg=)
2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369CA26AF
Validity
Not Before: Apr 3 02:45:06 2025 GMT
Not After : Apr 5 02:45:06 2025 GMT
Subject: CN=67edf632-622f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:ed:db:3d:30:16:8f:64:6e:de:69:68:56:
87:da:9b:1a:9b:a4:ee:01:05:5a:7f:34:c1:a8:c9:
81:20:26:52:66:a7:d7:99:f4:a0:62:b9:9a:e4:db:
cf:b2:1e:41:76:69:34:5d:5f:b6:c9:22:a9:08:f3:
04:39:d0:55:fd:0f:94:2e:61:0c:91:ec:9f:f4:5a:
e7:b0:d2:6a:bb:a7:df:1c:ce:c5:fe:50:7e:df:f3:
1b:82:76:f6:91:38:85:43:cc:51:fc:58:44:d5:09:
0a:0b:72:ad:f6:53:a3:b5:6f:2a:11:f7:82:98:c3:
7b:7b:c1:65:0a:51:68:36:20:c7:8d:82:69:94:51:
ee:98:30:f6:e5:7e:60:5e:1b:b0:cc:59:0e:2f:7c:
75:bc:fe:c8:f1:66:fc:19:fe:23:3a:87:0a:cb:50:
12:f5:4a:01:f5:ab:16:f8:5b:4a:67:a0:d8:c0:10:
a7:bf:49:ef:2f:1e:9d:e3:3a:f5:7e:d5:f3:dd:1d:
6a:ed:fa:41:bf:f4:7e:1a:3b:85:c1:ae:68:87:49:
b1:ac:1d:e2:17:46:4d:89:60:67:8a:7c:dc:ef:b2:
18:c9:a9:08:d2:63:e0:ea:68:1e:cc:49:53:54:46:
f7:b0:fd:f6:c1:a2:61:da:57:a6:2a:7c:79:39:05:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:D3:35:E1:C8:39:24:AD:A6:5B:29:34:DA:7B:7B:E0:8A:F5:ED
X509v3 Authority Key Identifier:
keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:88:ef:b1:46:06:e8:72:a1:0f:24:ab:a8:fc:fe:aa:62:95:
2b:0a:9a:f9:67:33:95:3a:3e:6a:6c:2b:f8:6e:2d:d8:7d:7a:
ab:ad:5c:24:c7:af:70:40:18:1e:3f:65:9e:4b:1c:96:69:16:
0e:37:9a:23:ea:19:a2:1b:1e:b7:3d:21:9d:f5:14:28:55:84:
ce:5a:22:79:15:c4:f7:b2:c5:2d:1e:d7:8f:df:0a:55:24:c9:
a9:4a:f8:96:39:87:89:02:14:68:9a:ad:5b:ef:ff:e8:cf:d7:
3c:44:81:e1:f1:d4:ea:60:6d:e8:a5:c6:df:40:42:74:39:8a:
b3:de:83:b1:9d:21:65:d1:da:22:55:67:06:24:98:1a:37:cb:
31:fe:84:dd:51:80:b2:42:15:65:10:8c:97:18:2f:ca:f3:43:
ed:9f:74:42:1e:7e:0c:ad:19:4a:df:ac:e9:a8:d1:85:f3:50:
be:4d:53:9c:99:00:87:a7:0b:6e:dd:4a:08:65:36:a0:3f:0e:
c3:7d:fe:fd:63:cb:06:45:a9:e3:9f:ff:14:92:94:9d:a6:75:
99:d0:5d:c6:88:ee:e9:e6:b9:f1:9c:96:67:76:29:e3:2d:72:
87:7d:e9:78:f0:04:39:c8:19:6d:e7:52:a3:44:5f:31:77:9a:
d9:cd:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:41:43 2025 by rpki-client