Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File: u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier: 9hZnwky9B6Tzm+cnLxDSDkmu9tBUjx5Dp3uirWEEcqs=
Subject key identifier: 52:A1:DA:EE:EE:5C:A7:69:01:52:73:13:88:05:C7:2B:71:80:61:7A
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer: /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial: 04E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number: 04E1
Signing time: Sun 16 Feb 2025 01:56:18 +0000
Manifest this update: Sun 16 Feb 2025 01:56:18 +0000
Manifest next update: Tue 18 Feb 2025 01:56:18 +0000
Files and hashes: 1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: 4QQOvuB5X9SV/WC98mdRrbaH3Of2p/bq+Y9+xCFrHqE=)
2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369D48AAF
Validity
Not Before: Feb 16 01:56:18 2025 GMT
Not After : Feb 18 01:56:18 2025 GMT
Subject: CN=67b145c2-ba32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:e1:ef:58:46:ef:c3:9a:93:8f:68:a3:d6:
f6:de:1c:c4:e1:cc:77:31:11:6d:f1:e9:e9:d2:52:
35:d2:17:c4:6a:66:93:fe:89:7f:7b:4a:0b:c2:4a:
ef:54:86:b7:29:d9:32:63:f2:4d:4f:84:fe:e7:64:
45:99:6e:70:21:4d:ee:53:3d:1b:56:0f:aa:e6:78:
39:66:52:9a:28:59:67:62:8e:3c:a7:a7:ca:a4:3c:
9a:a8:bb:42:55:63:2e:ea:07:d0:ec:0c:81:00:ce:
1e:55:13:99:08:6b:7b:66:b6:2a:fd:70:86:a3:f3:
9f:d8:00:70:78:50:6e:fb:7e:e5:bc:e0:80:b5:be:
74:0f:a2:19:4f:a4:65:0c:a0:e4:62:19:f7:23:82:
35:42:e8:cd:5a:29:58:65:14:70:b3:d8:a0:4c:e9:
88:70:35:ea:14:18:7a:e0:48:3d:de:d4:6f:b5:d7:
2b:30:b4:04:fd:f3:f6:39:35:ad:5b:1b:3b:97:9d:
b7:9b:7d:61:af:af:33:83:85:12:e6:89:79:ff:49:
8f:72:88:e7:ef:3d:c8:eb:cb:11:a0:9e:18:ea:b3:
a2:72:2a:02:40:c7:96:1e:80:37:9b:2b:d3:28:6d:
ca:49:46:aa:7b:fb:3d:6e:a4:b3:a2:0f:c6:ab:de:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A1:DA:EE:EE:5C:A7:69:01:52:73:13:88:05:C7:2B:71:80:61:7A
X509v3 Authority Key Identifier:
keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:ce:b1:75:4c:46:78:ce:fa:32:ab:97:db:f9:1c:62:10:94:
de:f5:11:a4:36:43:17:1f:60:95:d9:c0:03:85:81:79:4e:1d:
f1:0f:35:22:6a:8f:f9:c6:64:ac:cc:6e:39:4f:84:1f:f5:9a:
b5:a5:d0:e0:c2:de:f1:fb:bc:2c:b9:0f:ee:dd:b9:8a:fb:97:
59:5f:cd:a4:f9:44:75:a9:7b:02:a5:71:1d:bf:48:82:b8:7b:
48:bc:50:b4:d1:6f:4b:0a:07:92:51:49:93:44:09:7c:1e:1a:
15:e7:1f:06:9c:b6:ef:e5:da:06:7e:0c:38:cf:18:08:07:77:
56:d9:60:13:a4:5b:b3:c0:e9:00:30:77:48:74:4a:69:76:9b:
65:5f:38:fb:9c:25:94:11:2f:22:00:14:85:a4:81:2c:e9:cf:
1f:1b:25:52:6f:ea:d3:85:52:2c:25:4a:ab:23:ff:9e:8f:b2:
53:e5:a8:56:1a:99:4b:f0:5c:db:1f:c9:98:30:43:d6:b6:a4:
fc:0f:c1:49:c3:ff:9f:fa:00:44:c3:82:7b:7c:aa:4a:cd:04:
b4:f4:97:07:54:5c:99:7a:86:73:1a:1c:3a:01:3a:e0:fa:ea:
cb:de:f4:1e:25:ed:e3:41:67:06:20:b6:a2:fa:ad:b8:13:6b:
c7:f8:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:34 2025 by rpki-client