Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier: nTxkYC3l3CX2dWy7iE/uoCSYDGtXjvoHKRzDG0hUtJg=
Subject key identifier: 67:13:20:DB:E2:91:F8:D5:34:D7:62:BC:A1:61:8E:03:BE:7A:44:70
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 068A
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number: 0685
Signing time: Sat 05 Apr 2025 01:31:32 +0000
Manifest this update: Sat 05 Apr 2025 01:31:32 +0000
Manifest next update: Mon 07 Apr 2025 01:31:32 +0000
Files and hashes: 1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: g2GccDzdJrFxH+e+5A8W3zzbr1CW00ito1PAKg/G00k=)
2: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (hash: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI
Validity
Not Before: Apr 5 01:31:32 2025 GMT
Not After : Apr 7 01:31:32 2025 GMT
Subject: CN=67f087f4-a783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:61:27:1c:08:3d:e3:43:7f:bf:84:e1:65:
8d:b2:2d:74:72:2b:0a:b5:a4:f0:58:7e:32:5a:bd:
e4:9a:8f:15:a0:b9:0f:7b:3f:34:c4:f6:89:41:86:
66:9d:f4:9a:f3:5f:92:09:dd:16:73:58:63:75:74:
12:d3:87:01:7a:de:6c:5c:22:9a:c7:1c:73:31:ee:
44:9c:23:ea:39:a7:1c:e1:79:67:af:36:53:2a:e1:
49:c0:cf:c7:52:28:1c:b0:0b:b8:6c:f6:e4:53:2d:
ed:f4:3a:24:3a:bc:d6:58:44:c6:33:9a:ec:14:c7:
36:f7:57:a5:75:e1:08:06:c6:05:eb:e7:1e:97:ff:
a2:1c:f0:f4:88:69:67:4e:5c:f9:8c:fa:4e:6b:16:
05:4f:4e:da:eb:3c:79:ed:bc:9e:14:63:74:ee:53:
37:c2:6f:de:5e:70:da:60:43:ad:27:cb:53:9e:83:
c3:03:b7:4c:dc:6d:47:7e:f7:c0:fc:c6:20:f1:ba:
1c:01:2a:a0:2d:e4:ef:41:de:0f:ad:50:5d:51:88:
33:58:8e:1d:82:a5:b4:fd:f8:fd:2a:16:48:13:ac:
72:fe:8b:4f:f7:60:79:e2:31:a4:82:74:27:03:ea:
a0:f1:bc:46:b9:eb:15:b6:9a:8e:61:4b:cf:6a:00:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:13:20:DB:E2:91:F8:D5:34:D7:62:BC:A1:61:8E:03:BE:7A:44:70
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:fb:b4:47:59:24:3d:77:5d:55:f6:82:1f:2e:ee:31:85:1e:
f0:c8:e2:a9:ac:7e:44:1b:83:b0:6f:9c:1b:84:ee:5d:1c:3f:
36:74:62:40:fa:c0:85:0d:5b:5b:9c:51:a6:fc:c2:9a:35:06:
bc:98:ee:a9:af:0a:d2:af:81:12:0b:d9:12:1d:69:f9:75:27:
69:40:07:74:cc:52:13:28:92:1e:af:12:52:77:17:22:91:86:
46:4a:b0:bb:6b:80:81:3d:3c:74:f5:bc:db:95:96:ab:ba:23:
67:ab:a1:a2:3b:20:91:72:ba:ef:19:1b:8d:61:3b:53:08:f6:
a3:82:95:2f:b2:10:be:fe:44:9d:14:f2:16:ab:1e:6a:89:9c:
dd:31:b1:de:c4:35:5c:6a:26:2b:ed:05:fd:8e:6a:a6:cd:3d:
57:60:c1:7f:62:e8:a2:05:19:f8:4f:ea:78:b8:38:c0:59:1f:
85:b4:2a:45:30:35:b4:25:95:a3:bf:f8:39:3f:22:62:64:5b:
f4:b6:b6:f8:c4:66:f4:31:8f:ab:c5:48:83:ac:e8:36:b8:f6:
f5:90:2b:bd:27:aa:e8:6c:0b:f8:bd:bf:62:9a:1b:f4:09:d8:
bd:b1:58:26:51:49:e1:55:71:4b:45:a4:1c:35:5b:f1:c0:b1:
97:3f:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:41 2025 by rpki-client