Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File: HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier: xCSCOc5GyuOU0WWFtiF0vjYcOrhUpBTkFdGs02Oyesg=
Subject key identifier: 58:26:09:08:E6:3B:80:19:75:4A:8F:46:33:78:1A:1F:76:80:E8:58
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer: /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial: 0787
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number: 0781
Signing time: Sun 06 Apr 2025 01:23:54 +0000
Manifest this update: Sun 06 Apr 2025 01:23:53 +0000
Manifest next update: Tue 08 Apr 2025 01:23:53 +0000
Files and hashes: 1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: r9j1PNo9lUaxi9P6PzJF5DCiZWgKgSKF1bQ5/GLDuuM=)
2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E2BDAF
Validity
Not Before: Apr 6 01:23:53 2025 GMT
Not After : Apr 8 01:23:53 2025 GMT
Subject: CN=67f1d7aa-7318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:7c:a4:b8:c3:52:6a:1b:34:f7:3b:15:d8:
24:8c:2e:cb:d7:29:d1:48:69:fa:c4:b0:a3:9f:1b:
70:cd:ca:df:cd:61:ca:f8:3c:9f:21:9e:16:ba:bb:
0e:9a:cb:6c:50:67:62:49:cd:2e:7e:c1:57:87:51:
24:66:81:92:19:f8:ed:52:76:9b:e0:fe:54:8b:b5:
3b:88:d6:f9:10:92:4e:2c:17:5f:cc:5a:90:11:07:
5e:33:27:d1:9c:0e:96:ac:ec:ac:d4:e1:7f:47:c0:
cf:ff:6f:19:68:54:72:e1:3b:19:e8:17:2d:ba:22:
ef:e4:5c:51:64:e2:22:f8:11:dc:a3:3a:7c:dc:d2:
3a:41:e9:e9:ca:0b:0b:44:07:52:06:ee:d3:d5:d9:
5e:1e:84:f6:c5:0e:1c:d6:df:8c:20:c7:cb:59:0a:
78:88:6a:58:15:d9:57:e6:20:c0:56:3a:31:2c:50:
19:7c:9b:6e:a1:66:41:ed:0b:3e:f1:ea:c9:ab:db:
67:0a:d7:53:70:07:61:3d:40:9e:4a:c7:ee:8b:08:
db:b8:70:50:63:19:60:bb:12:2a:80:4a:a0:5d:db:
89:8f:73:1d:89:48:82:56:95:11:43:f0:85:5a:18:
95:bb:2d:19:04:a9:90:7d:06:3d:33:cf:68:4a:46:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:09:08:E6:3B:80:19:75:4A:8F:46:33:78:1A:1F:76:80:E8:58
X509v3 Authority Key Identifier:
keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:f4:66:21:36:29:55:ef:95:1e:0f:a2:48:bd:0f:7c:d2:ed:
86:a5:85:b6:61:06:17:67:0a:62:5d:8d:13:e5:8c:fe:9e:ce:
6f:1c:7b:f9:02:84:c8:21:ff:8f:6e:c2:8a:69:78:3d:0b:66:
57:44:fa:ca:ef:bf:90:6b:f2:7a:b2:10:00:dd:0e:01:07:86:
8f:10:64:11:a9:66:b3:6a:8c:73:73:4c:44:01:9b:2c:7f:39:
c8:e4:45:6c:6b:0d:b8:f5:54:2f:ec:cd:ea:bd:24:0c:72:97:
46:ae:9c:d4:54:7c:4d:48:3b:91:a2:5e:92:9d:ea:00:83:10:
43:9b:3c:ff:a6:74:96:78:79:70:a9:a0:0b:ef:21:9e:07:25:
e6:43:f1:a9:c8:ef:51:08:97:dd:ad:65:59:1c:a7:d3:c3:5f:
65:9f:c7:bd:3e:74:f2:60:7f:18:f2:0a:22:fd:cf:a9:7f:e0:
57:93:17:c9:ee:73:88:12:15:0f:c5:11:f4:e2:f6:50:c3:84:
28:a2:07:b9:95:27:37:77:1d:dd:5a:b4:7d:3f:2a:62:80:07:
fd:b7:27:94:42:93:c8:91:e2:3d:84:46:2f:9e:1f:2c:38:11:
c0:3a:c5:a2:85:17:91:a4:01:5a:47:3c:4a:a4:40:78:55:80:
d5:13:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:06:10 2025 by rpki-client