Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File: 3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier: GKkdMI+hy4zpPaZkFDsV6alP5dGYnTvKRV2/zDhi5N8=
Subject key identifier: 8D:EA:A9:5D:FD:87:9A:FA:69:D8:F9:84:25:2D:49:A0:63:25:82:EE
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer: /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial: 02A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number: 02A7
Signing time: Thu 03 Apr 2025 02:31:42 +0000
Manifest this update: Thu 03 Apr 2025 02:31:42 +0000
Manifest next update: Sat 05 Apr 2025 02:31:42 +0000
Files and hashes: 1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: dk2kRA1nkkdmO8n5EiBfIj9UEhPrva9qiSYW10nnum8=)
2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A39CEAF
Validity
Not Before: Apr 3 02:31:42 2025 GMT
Not After : Apr 5 02:31:42 2025 GMT
Subject: CN=67edf30e-6dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:c1:b2:c8:b0:fe:59:9b:af:88:71:e0:77:
55:ee:65:8b:9d:f4:72:dc:ad:46:65:9c:8d:73:7f:
26:a9:61:50:ea:f5:98:f4:30:7a:79:c0:ae:5a:25:
ec:ae:62:32:f3:af:7d:7c:ba:98:5a:dd:7d:91:8e:
51:07:cc:71:e6:de:f1:d3:45:65:7e:6d:51:da:ac:
1c:b8:9e:ab:d9:5a:cb:8d:8b:6f:6e:7d:83:3e:04:
2a:1a:ae:79:5a:05:b7:45:68:94:69:2c:18:53:c5:
cd:47:54:29:80:c8:a8:9f:79:a6:1b:f0:74:04:1c:
57:6c:a2:d2:a4:bc:dd:28:f1:db:20:45:97:12:92:
81:9c:45:d8:71:e0:98:21:3e:9b:d4:14:80:be:68:
1a:92:e4:86:6f:3c:68:f7:46:bb:16:ed:af:89:f0:
75:ce:58:2e:55:20:01:7a:d1:52:3a:00:2e:86:81:
8c:60:37:46:1c:e0:0a:f8:3c:a6:ac:94:3d:f2:ed:
19:37:38:d1:79:79:46:d3:56:5c:6b:f1:aa:ef:15:
06:24:a3:93:e1:6e:ca:40:71:69:92:4b:f9:55:59:
38:af:ff:67:e0:8b:b2:21:01:ba:6a:e7:e8:cf:41:
57:0c:70:f7:eb:fd:b7:97:34:6f:3a:40:fe:f0:56:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:A9:5D:FD:87:9A:FA:69:D8:F9:84:25:2D:49:A0:63:25:82:EE
X509v3 Authority Key Identifier:
keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:d0:de:5e:ff:03:f6:31:6c:b2:fa:0f:c8:eb:9e:f6:15:8a:
78:04:71:cf:36:b7:8c:50:a5:0d:9e:57:6e:ce:fe:35:64:b1:
c2:fd:1c:ed:bb:21:8d:f4:29:ff:8f:2e:de:b1:c1:c7:2f:0e:
f1:b7:1a:6d:ea:7d:6c:e3:8e:52:c5:89:a8:ca:31:af:32:6c:
b3:6e:18:7f:33:ef:08:b7:90:df:70:ef:ba:83:c2:eb:f9:5b:
fb:50:4d:b6:e4:e0:3d:48:1e:fb:2a:81:f3:85:22:63:af:77:
1c:ba:c2:34:fc:7d:c0:3d:b7:5e:a6:6d:5e:15:fc:95:4e:e8:
47:20:b0:33:f1:13:bf:63:7f:98:e6:35:91:10:41:d2:be:45:
c5:f1:2d:26:46:c2:ce:c3:61:57:9b:f5:f2:10:16:9e:b4:85:
a8:de:ca:f1:eb:b7:7b:42:d0:26:db:ba:76:9b:82:45:ae:2d:
7e:e3:c7:31:74:c4:be:d7:03:2c:71:bc:12:8a:a7:ce:6d:18:
16:5f:c6:8a:78:68:ff:f5:bd:59:97:1f:8c:8b:d1:61:bf:be:
83:fe:91:e9:ee:8b:4d:19:cc:77:4a:28:67:c1:20:59:f7:a8:
87:59:1e:1b:c4:b0:0e:24:3c:15:4c:95:bf:22:9d:c7:db:a9:
e9:6a:8c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:25:21 2025 by rpki-client