Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File: LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier: ZySjnC0a9U11JljhZ86NV189EZc0YPDejKwlVRz+2HI=
Subject key identifier: 82:4B:9E:D2:EC:75:92:E7:F7:CB:6A:B5:27:6F:8F:BE:55:6F:6C:B7
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 01A4
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number: 019F
Signing time: Sun 06 Apr 2025 02:50:37 +0000
Manifest this update: Sun 06 Apr 2025 02:50:37 +0000
Manifest next update: Tue 08 Apr 2025 02:50:37 +0000
Files and hashes: 1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: uu3b5L6SV0NN3tfC535jCZRYWQQHyk+5iAUTokKp08E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR
Validity
Not Before: Apr 6 02:50:37 2025 GMT
Not After : Apr 8 02:50:37 2025 GMT
Subject: CN=67f1ebfd-4e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:5e:5e:d7:fa:a4:d4:65:3f:4d:30:46:b3:
6e:d7:4f:fb:bb:ed:0d:df:ea:31:85:33:e8:88:13:
5f:aa:cc:6b:cf:7b:2a:bf:67:e9:f8:7f:1d:7e:15:
25:66:96:3f:9e:5a:c9:2d:54:0c:2a:9b:b4:da:f9:
ee:fb:67:2e:15:bb:35:74:c3:97:d7:16:20:dc:0e:
e7:60:18:a2:48:e1:ab:d0:fe:9d:8f:e7:96:b8:d9:
7e:0b:c6:07:3d:2c:87:d2:44:3c:52:f2:96:81:04:
ce:d5:7b:c9:89:a4:d1:5d:c4:68:72:ef:68:e1:83:
09:78:e5:d5:14:ce:78:6b:7a:1d:8e:0e:e4:fb:fa:
62:7f:d9:91:c0:23:02:41:17:ca:bd:35:52:f7:35:
d2:2f:3b:92:64:d0:11:56:3e:74:53:a9:1d:e0:97:
a5:63:5e:08:9e:cc:85:a9:46:eb:df:3d:f9:71:6b:
9e:5d:c3:40:fc:b8:0b:61:7d:65:03:20:d8:0c:37:
cc:41:ec:2d:64:7a:36:3d:70:2f:a5:70:97:5c:ed:
7b:70:0f:0e:46:af:d1:d9:9f:f0:d7:ed:e4:58:3f:
55:ff:9a:b7:7a:13:3e:62:e9:4c:7c:81:e0:0f:72:
be:bc:f6:c1:cd:a4:10:ea:09:5d:4d:44:76:42:9c:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:9E:D2:EC:75:92:E7:F7:CB:6A:B5:27:6F:8F:BE:55:6F:6C:B7
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:9b:df:82:9d:08:56:3f:63:66:9f:5c:18:8d:e4:9c:35:57:
94:d6:80:95:83:65:42:72:df:aa:63:92:70:2e:61:af:ba:72:
91:07:df:f3:3d:72:29:14:61:ab:b2:f8:46:19:d5:7f:99:da:
42:a4:76:30:9a:34:0e:29:58:e1:e7:9f:96:44:f8:ca:16:1b:
4c:d9:bc:cd:f2:9a:bc:32:1f:35:03:5e:df:aa:be:42:4a:ee:
91:c4:27:45:6f:a9:cc:d4:13:02:48:60:84:c1:81:db:a9:06:
e6:69:bb:54:16:7b:88:a6:3f:4d:0f:2e:fb:78:8b:48:12:b7:
d9:dc:65:bc:ee:72:42:ea:d5:a7:e8:c8:75:38:0f:83:85:0f:
c5:b5:93:c2:26:c0:97:76:a3:54:9e:c9:50:7a:21:c2:ed:f8:
7d:82:8d:fe:cb:84:c2:cf:29:3f:c9:ab:4f:99:02:b5:a7:e9:
47:4d:7f:55:8f:1f:af:1e:db:18:1e:e3:e5:0f:df:19:0d:5f:
4d:fc:ae:25:cc:a7:f7:f9:5d:e0:a6:17:44:e0:76:22:3e:86:
f9:d4:f6:8f:fb:43:e1:61:a6:c6:e3:77:80:32:42:92:b5:8e:
9d:1a:4b:3e:1c:0f:fc:46:c0:ca:97:f2:6f:6d:75:e6:9f:3b:
8a:29:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:51 2025 by rpki-client