Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
File: vbHIMkQqFwa_d_xOxDcYGbo_waY.mft (raw, json)
Hash identifier: Jl4if/G5WQUrESUoo+3EdzZALO6drbzdZBicLJB+UcQ=
Subject key identifier: 74:5C:4E:8F:2E:22:23:18:1E:2E:73:93:62:23:6D:1E:22:83:16:0D
Authority key identifier: BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
Certificate issuer: /CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Certificate serial: 01BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
Manifest number: 01B9
Signing time: Sun 16 Feb 2025 02:50:10 +0000
Manifest this update: Sun 16 Feb 2025 02:50:10 +0000
Manifest next update: Tue 18 Feb 2025 02:50:10 +0000
Files and hashes: 1: vbHIMkQqFwa_d_xOxDcYGbo_waY.crl (hash: SFBfw03eUpvNWtch9DzeDKT4khfjaehLhQqvr0octGc=)
2: E2C1EE3A9E5311EEAAC0551CD25BE465.roa (hash: a/6txB+MVfLWSEULkMJVclmn38cp7SIU8WSE2UEIKek=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A8AA3AF
Validity
Not Before: Feb 16 02:50:10 2025 GMT
Not After : Feb 18 02:50:10 2025 GMT
Subject: CN=67b15262-1add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:53:2f:8f:da:77:f3:46:ea:fd:39:c1:54:
53:92:d3:09:b0:19:79:fe:b8:45:02:5f:13:ff:ed:
86:39:17:8e:a0:a1:ae:96:84:9d:6f:e0:34:16:b0:
ee:a4:ad:5a:01:b3:11:f8:2c:f6:aa:64:6f:dc:ce:
c3:e7:04:3a:ca:7e:b1:c7:65:86:7b:65:27:62:f6:
ec:49:a1:91:24:d2:d6:b9:16:b1:b9:5e:e6:87:b3:
b6:55:40:65:94:17:01:be:a1:1c:02:a1:04:eb:d8:
c6:90:9b:9e:df:30:7b:c8:29:1f:5a:60:25:e6:d4:
a2:13:72:65:05:45:de:00:99:1e:11:d9:81:42:cd:
bc:c5:e8:df:a5:34:c4:db:1f:1a:d9:34:75:89:97:
75:6b:68:5f:fd:3b:f2:cd:af:2a:b0:56:05:fe:43:
37:9d:a4:0b:6e:01:2a:06:38:8a:c3:41:dc:fa:ca:
16:29:68:cb:c2:2f:06:2d:c6:61:70:8c:00:8d:51:
d1:fd:10:d0:9a:cf:88:94:ae:ca:43:90:0e:8e:20:
50:05:eb:f5:50:3e:03:f9:dd:9a:48:cc:4f:53:f7:
e5:f9:5e:a9:13:57:c1:4f:90:3c:27:34:31:34:df:
6e:d5:4a:86:7f:44:87:55:2e:cf:56:71:e3:96:27:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5C:4E:8F:2E:22:23:18:1E:2E:73:93:62:23:6D:1E:22:83:16:0D
X509v3 Authority Key Identifier:
keyid:BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:c4:bc:fc:1a:62:22:23:6d:7e:d8:f8:a5:51:6f:6a:5b:98:
d0:4a:eb:7d:b9:a8:47:8d:6a:42:11:b0:e2:45:b8:21:7e:97:
bd:cb:26:87:d8:f1:a9:61:84:95:2c:b5:5d:0a:77:99:c8:cd:
2c:15:20:28:70:5b:77:91:b0:c1:db:06:e6:24:3d:c1:6f:14:
a5:4f:38:81:17:e9:26:48:b7:c0:67:09:fc:4e:b5:8d:ac:f8:
5b:86:7c:e3:3f:1b:bb:5c:4c:87:db:40:fc:ca:43:12:c7:67:
06:b1:e4:9f:cf:a2:79:63:a5:fc:02:79:5c:43:34:7c:98:1d:
de:af:97:1a:84:28:5b:57:ea:0f:f1:9e:c2:67:fd:1b:3b:a5:
ef:35:91:6d:e4:8b:2e:9a:a5:5b:25:f5:06:7b:7b:4a:2b:c6:
b7:09:96:b8:50:d5:7e:3e:81:52:63:44:8b:34:ba:7f:14:12:
17:e3:1d:fe:3b:7e:b9:b0:62:4b:61:e2:17:f2:48:8a:f0:96:
9b:eb:a4:bf:e6:7d:97:e7:f9:ca:54:3f:33:e1:6e:85:ee:cb:
5f:15:4e:9b:26:9c:35:c9:90:31:ec:14:b0:a0:d5:52:49:a3:
b6:70:1b:9f:4d:ae:73:12:07:7b:ea:ff:68:65:7f:84:44:80:
f7:93:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:07 2025 by rpki-client