Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File: u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier: MViFi9ut1PnUElO26jhWILP9GvPZ+y5s1xrmVhTPwQk=
Subject key identifier: 8D:F0:0D:67:88:3F:7C:79:0A:62:57:C7:6C:36:65:BA:91:46:F1:B5
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer: /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial: 04FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number: 04FA
Signing time: Thu 13 Mar 2025 01:54:43 +0000
Manifest this update: Thu 13 Mar 2025 01:54:42 +0000
Manifest next update: Sat 15 Mar 2025 01:54:42 +0000
Files and hashes: 1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: DBf5HczC+meIO1UWCPu5LqkqZ23EKSvw7dAHzl2NpGQ=)
2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369D48AAF
Validity
Not Before: Mar 13 01:54:42 2025 GMT
Not After : Mar 15 01:54:42 2025 GMT
Subject: CN=67d23ae3-aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:65:e6:28:02:0b:0d:12:6c:22:03:b0:15:
d1:3a:43:c4:98:5c:d5:a8:95:5e:ad:83:7e:0a:95:
43:e9:3a:d9:3b:6b:52:93:68:eb:3b:2e:77:89:a7:
b9:85:ff:c8:1a:d1:9a:cb:f4:5f:d3:61:7d:f7:f0:
bb:bf:23:fd:0d:bc:2e:df:f2:e9:74:9e:75:4b:16:
e9:76:71:4a:4a:39:18:69:cf:86:31:7c:65:03:dd:
53:ee:63:0e:42:d9:aa:e0:4e:50:69:9c:f6:bb:df:
46:b8:5b:08:2f:4c:f3:84:f1:cc:6b:5b:b9:42:87:
9b:34:7f:69:79:a0:20:9e:11:9f:f1:13:34:b6:b8:
60:bd:f7:88:8f:81:58:0b:46:6d:10:d3:27:e5:fc:
74:4f:46:c7:99:46:e2:da:5b:9d:c1:13:ed:fe:d2:
ca:0c:e8:2f:94:64:88:ec:7b:0c:6b:e0:5d:b7:02:
a8:60:8b:43:6a:d7:34:c2:67:c5:4d:49:e1:47:e8:
bf:2a:b2:d9:0e:74:b3:39:04:b5:32:10:96:2b:e8:
a9:4c:d5:10:1d:57:5b:c9:60:64:a7:fc:0c:56:d9:
de:49:da:cf:e7:d4:c9:51:34:42:ed:c4:79:71:be:
72:76:fc:10:8b:3e:74:d1:2b:9e:1d:2d:42:46:bb:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F0:0D:67:88:3F:7C:79:0A:62:57:C7:6C:36:65:BA:91:46:F1:B5
X509v3 Authority Key Identifier:
keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:87:b7:43:14:a2:36:27:4c:70:aa:94:ea:69:ae:d9:9c:c7:
fc:a0:b6:74:30:9b:f7:e1:c8:27:a1:54:35:3f:78:0f:c5:33:
0c:ee:3a:a2:3b:eb:42:59:2f:06:bd:46:78:c2:51:01:f7:9f:
d6:23:f2:f6:e2:9b:d7:6f:b5:0c:bf:86:b6:7c:d0:bb:bf:b9:
60:04:9b:89:5d:9b:99:a8:28:fb:39:d5:d5:1d:2a:02:19:b9:
fc:58:a2:86:a2:ad:82:ca:ef:20:1b:f9:22:b7:e4:0d:5f:12:
6d:37:0e:78:44:b9:30:ef:5d:ff:41:d8:4f:ea:46:4c:58:b9:
18:51:2b:e0:ef:57:c7:c7:dd:c3:2a:84:4e:dd:13:3f:20:4a:
73:72:92:2e:26:51:7a:80:80:e6:96:48:01:44:e5:33:d7:55:
2d:f0:d0:79:b3:37:2f:95:58:8f:f6:41:c8:9f:c5:a2:45:d1:
e6:61:4e:ec:b4:e3:dc:dd:bf:d6:15:10:eb:66:e1:0c:65:9c:
34:3a:19:7f:f6:74:aa:66:a2:d0:19:27:a6:d0:cd:6c:20:83:
0e:91:86:83:22:2e:2c:a6:1e:eb:9b:2f:35:eb:9c:da:d4:be:
2b:d7:80:97:8d:f4:88:0f:e2:0c:60:94:1d:87:04:f6:b4:fe:
6c:75:37:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:35:08 2025 by rpki-client