Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File: DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier: QnBQ1OgKSpBsVpZ8eESIRdivWDQr5qJnDhyJ1JsnqC8=
Subject key identifier: DE:87:44:11:1D:47:04:EB:68:B8:37:5A:6A:04:37:83:1E:28:54:9D
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer: /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial: 0171
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number: 0170
Signing time: Sun 24 Nov 2024 02:30:44 +0000
Manifest this update: Sun 24 Nov 2024 02:30:44 +0000
Manifest next update: Tue 26 Nov 2024 02:30:44 +0000
Files and hashes: 1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: jNtfUm5FLF7HKSvJlE0/EtnooaVAfdsPucJMWCasLx4=)
2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Validity
Not Before: Nov 24 02:30:44 2024 GMT
Not After : Nov 26 02:30:44 2024 GMT
Subject: CN=67428fd4-b0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:2d:4a:be:27:18:8e:7c:4a:e1:8a:45:4d:
63:ed:21:a0:03:63:d7:a2:e7:f6:8a:3c:e5:5f:f2:
5c:e4:ab:ef:82:fb:69:2b:c6:a8:b0:ff:63:4e:1a:
db:3c:17:f0:66:ae:42:f5:a8:34:ed:0e:59:14:56:
32:aa:43:26:46:7e:fe:20:6d:cf:96:18:a5:96:df:
92:58:a3:be:ba:c5:12:83:44:0e:69:4a:fd:3c:93:
12:67:d6:b6:e5:11:ec:3a:7e:df:1b:50:c3:10:fc:
8d:da:b9:23:b4:04:fb:75:ee:63:76:4e:20:71:81:
50:dc:63:dc:61:9a:31:f4:20:a6:35:45:0d:eb:4c:
d8:e2:fc:43:72:9d:ed:ed:85:15:f7:20:d1:30:4b:
76:2c:09:2d:6a:1f:23:ca:59:8e:ad:e3:2b:50:c3:
a4:21:17:6a:1e:9e:f1:e6:99:45:39:ca:78:36:2f:
71:26:9b:b4:d5:7b:16:e8:34:b5:68:05:ed:bb:70:
88:bb:76:49:49:b1:c1:50:2d:17:22:d1:e4:a1:71:
b1:7e:2f:f9:b6:fd:85:e7:3c:b7:45:4f:a0:65:b8:
0e:2f:66:22:f2:b4:3c:fc:47:64:60:5e:94:90:fa:
91:c1:88:59:88:62:eb:2d:85:1f:6e:68:6d:ef:0e:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:44:11:1D:47:04:EB:68:B8:37:5A:6A:04:37:83:1E:28:54:9D
X509v3 Authority Key Identifier:
keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f4:7d:a3:d4:2b:1d:77:37:aa:b1:9f:0f:9d:45:70:2d:69:
5c:1b:f4:6f:a8:e0:77:2c:3a:39:d9:66:da:3e:78:dc:b4:d5:
95:0e:9c:f3:33:bc:04:51:98:f1:96:bf:92:e7:f7:ed:d6:4d:
a3:5f:ec:be:a3:d7:47:c0:4d:df:36:01:96:06:71:dc:21:ec:
09:f7:66:3c:65:90:f2:32:25:1e:0a:41:36:6d:4d:4d:b4:fd:
bd:5b:a3:e9:73:91:ce:cb:8c:84:28:12:05:07:9f:9a:d6:78:
ff:37:96:33:21:0b:d0:8b:00:56:28:69:1d:ad:f4:e7:ac:fe:
bf:bd:d5:c2:85:74:b9:26:e6:90:2c:fc:6b:24:eb:a5:3b:aa:
f6:85:f6:63:8c:c9:c4:71:cf:39:05:0c:4d:bb:34:aa:44:8a:
aa:7f:76:d8:d1:10:42:ec:8f:d2:fe:e4:33:bd:fc:b0:45:4d:
71:4f:af:48:9e:da:e2:5e:e3:9d:54:4d:ff:37:c5:11:98:22:
86:33:94:a5:38:4d:83:29:e7:29:cb:c6:b7:02:87:43:d8:ea:
e9:b0:90:1e:87:01:84:60:13:da:98:9f:b3:0b:23:6f:a9:15:
e5:51:09:d7:a3:09:e4:30:a7:cf:cf:a1:ee:56:cb:5e:5f:3d:
15:26:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:37 2024 by rpki-client on console-ams.rpki-client.org