Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File: 165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier: drtz60WwEpGojByy88spVoaC71F5mt71+DImpnO6iAE=
Subject key identifier: 30:98:4A:D0:F9:4F:4C:43:78:B7:00:AE:82:D1:02:DB:34:C1:A0:2E
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer: /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial: 0553
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number: 0552
Signing time: Thu 03 Apr 2025 01:48:38 +0000
Manifest this update: Thu 03 Apr 2025 01:48:37 +0000
Manifest next update: Sat 05 Apr 2025 01:48:37 +0000
Files and hashes: 1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: JB9yh3FQEFdBjMs2V/69pbmbs5Vy0uIKyuHcEMI0ZTU=)
2: 2A3F25CA461211EDA2ED7DD4F1222468.roa (hash: lvPd6VTKcLMhU/3Nl8dyjCE5frGwG4hqXNXwJymfNBg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A9688AF
Validity
Not Before: Apr 3 01:48:37 2025 GMT
Not After : Apr 5 01:48:37 2025 GMT
Subject: CN=67ede8f6-e182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:6a:ee:38:71:6f:dd:bc:62:08:1b:6d:74:
54:3b:bb:24:d4:b1:54:bb:e8:4d:14:ba:79:3c:c4:
15:e2:56:0a:f4:2b:38:87:4d:b5:d0:de:4d:c1:49:
ea:28:bd:35:2c:4f:f7:f7:2e:53:56:ca:d1:35:e5:
ff:d8:b3:16:5a:76:20:a5:1a:e7:e7:7c:ac:ae:5f:
c1:60:28:dc:c8:df:5b:76:90:10:44:2c:4d:63:39:
21:ff:1b:cf:80:4f:90:d8:f7:0d:e7:9b:f0:64:00:
44:9e:c7:e0:7f:33:a7:9d:1c:b0:54:9d:f0:6c:21:
14:c1:97:41:2b:3d:0a:36:4c:7d:32:d2:b4:d7:1b:
82:bd:30:28:a7:d2:48:20:c1:ef:69:e0:bb:b6:6a:
be:ed:2c:f3:75:3e:05:7e:14:c1:d8:05:64:9e:c3:
1d:86:ca:6d:d7:c3:45:96:0f:82:e2:62:2d:2f:ce:
2f:89:49:aa:45:13:bc:9b:2a:ca:88:5c:c6:54:66:
03:5b:01:e0:b4:86:25:e9:d8:8f:fb:26:79:dc:04:
be:a3:c7:23:7e:9b:93:8b:3c:01:97:d1:73:1d:40:
c4:89:55:b3:e8:09:79:a3:8c:3b:11:3d:43:5f:a9:
8f:a8:79:e5:69:48:f5:f5:99:ae:e6:93:9c:e0:31:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:98:4A:D0:F9:4F:4C:43:78:B7:00:AE:82:D1:02:DB:34:C1:A0:2E
X509v3 Authority Key Identifier:
keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:28:b9:82:36:22:7f:e2:54:6a:07:24:3f:c8:a1:0f:2d:62:
76:0d:95:6a:47:31:40:9c:01:70:43:f6:36:da:e4:e3:5c:f2:
7e:8b:bd:1b:09:23:ff:43:51:ed:62:6a:3e:ac:41:9b:12:72:
8d:2f:41:e8:a9:ff:4b:88:5d:99:0a:1c:6c:d1:42:56:81:eb:
bc:4c:d5:ba:1a:f8:5c:64:e7:7a:10:2d:bb:dc:04:7e:3f:a2:
b5:3d:ad:4c:66:1b:8c:83:b5:79:80:01:88:d5:47:77:45:33:
51:14:3f:79:24:44:2a:1d:84:a8:ac:bc:e5:e6:78:33:f0:17:
0a:62:80:c1:10:26:7b:df:4a:81:d5:2a:2f:14:be:b5:a8:fd:
d3:79:b5:00:e9:cc:75:15:76:e4:c2:58:81:99:22:01:53:01:
96:f6:69:68:40:28:cf:2a:45:fc:f2:cd:db:79:11:2e:3d:40:
9f:4a:b8:0d:8e:f7:e9:9a:80:fa:e0:b8:33:a2:56:e4:0f:b1:
a2:52:17:9d:01:07:73:6c:a9:9d:e4:42:09:f7:d3:7d:5b:d5:
e6:70:7b:0f:09:5e:0a:7b:ce:69:c4:62:33:45:89:2d:a4:b3:
83:dd:54:97:6e:18:df:57:17:e7:88:cb:07:87:e2:fd:93:92:
0c:36:b0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:47:38 2025 by rpki-client