Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File: dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier: FHsWZ6D7L62/tdSeR9mY4Al2wGzvf2AdR0ze1DJRyvQ=
Subject key identifier: B6:49:12:FE:67:39:09:2F:E2:E9:7B:63:6B:E3:B0:20:2F:0C:C3:F0
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer: /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial: 02BB
Authority info access: rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number: 02BA
Signing time: Sun 20 Apr 2025 03:46:11 +0000
Manifest this update: Sun 20 Apr 2025 03:46:11 +0000
Manifest next update: Tue 22 Apr 2025 03:46:11 +0000
Files and hashes: 1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: JNF2NOWnSRbX99Ynqd7iv+xXvb93REc9ZCZwlqNyE0A=)
2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Validity
Not Before: Apr 20 03:46:11 2025 GMT
Not After : Apr 22 03:46:11 2025 GMT
Subject: CN=68046e03-8608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3e:43:39:7b:81:51:23:8f:cd:4c:50:61:42:
da:e8:41:a2:90:03:66:cf:95:19:c2:62:50:83:92:
94:f6:a5:2a:fa:21:cb:7e:c6:b0:1e:b6:5f:ee:92:
2f:20:64:8b:44:30:e9:87:e3:43:36:1c:03:51:d1:
ae:1f:fe:4e:b2:e9:db:65:bd:23:3c:1b:5d:ce:6b:
02:44:57:9a:e1:c6:45:8e:c1:ce:bc:bf:b8:4b:cd:
88:70:c0:d4:0b:59:b7:f4:d5:d4:a9:c2:e3:b8:98:
67:8f:e2:32:1b:08:ad:a7:f3:35:e7:b7:32:d1:6b:
44:08:b6:80:eb:4c:53:ef:f8:6c:f5:73:a5:0b:96:
a6:5c:4a:04:71:25:69:14:69:0a:e9:95:85:d8:a7:
4c:7b:37:b6:f8:9c:2f:cf:7d:7d:a7:46:df:0d:9a:
61:e1:6c:d1:55:88:8f:e8:90:a1:c0:8d:10:de:18:
91:b4:e7:48:02:e4:6f:19:8c:f4:e1:d8:8e:fb:08:
e9:95:fb:7b:1b:47:d5:2c:f0:10:49:df:ca:8a:34:
8d:65:eb:b3:87:02:aa:cf:5f:48:31:31:69:ea:95:
af:23:aa:f3:8b:8d:6d:68:37:35:25:5e:56:71:81:
8e:bd:b0:95:ec:3e:af:1f:b4:81:7c:eb:62:f0:db:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:49:12:FE:67:39:09:2F:E2:E9:7B:63:6B:E3:B0:20:2F:0C:C3:F0
X509v3 Authority Key Identifier:
keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:a0:58:3a:72:dd:df:7d:09:42:fa:14:dc:f4:22:2a:5f:
cc:a2:15:ee:e9:4a:c5:e6:3c:80:52:22:23:18:f5:b0:c4:7a:
a7:e8:a2:91:04:b0:83:c1:01:c8:0a:e5:1f:ac:5c:40:b7:d4:
ea:31:54:31:8b:78:53:2e:9e:bf:21:e3:b3:56:a9:72:7e:53:
2e:dd:5c:d6:ae:55:b5:b9:c6:ac:7b:2e:ae:4d:16:88:cd:e5:
43:76:ad:b6:d1:49:44:99:ae:d5:2a:e0:18:0a:6b:40:fa:83:
fb:0f:d2:8d:ec:8e:b9:03:54:c6:42:e1:03:db:4e:58:27:65:
e8:92:4f:14:c2:03:82:66:2c:a5:84:72:c8:f6:11:cb:20:3c:
10:02:72:b5:ab:73:13:34:fb:14:29:24:3d:c1:58:dc:5f:f5:
dc:23:a1:64:ae:4e:50:19:30:7d:d1:df:46:48:97:1a:2b:71:
aa:da:b3:cc:88:50:bf:cd:09:b2:fe:d2:a5:6a:0b:10:01:2e:
1e:98:f1:42:7b:d4:cf:e6:3d:71:4f:34:8b:04:5e:2f:5e:2a:
15:44:52:06:57:0c:d5:f4:09:f9:6c:9d:0f:db:a4:af:8c:42:
2a:40:cd:d5:b3:c9:6a:50:92:6b:f0:b9:bc:d0:2f:1b:d8:cb:
2a:70:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:47:29 2025 by rpki-client