Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier: NikIYlckFhZ+J1Q/yi4rSp6yO38XCjHpK6AwRiuTdMk=
Subject key identifier: AD:DC:91:14:46:A0:E7:41:AC:06:3A:F6:E1:E2:FD:3B:8D:10:15:00
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer: /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial: 085F
Authority info access: rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number: 085E
Signing time: Sun 16 Feb 2025 01:15:15 +0000
Manifest this update: Sun 16 Feb 2025 01:15:14 +0000
Manifest next update: Tue 18 Feb 2025 01:15:14 +0000
Files and hashes: 1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: J9mm6sTTNj8441sv12rEmxefFEYjAivYR02H4U6UWWk=)
2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA888AR
Validity
Not Before: Feb 16 01:15:14 2025 GMT
Not After : Feb 18 01:15:14 2025 GMT
Subject: CN=67b13c23-8935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:f2:b7:5c:6c:94:47:bc:a5:4a:94:8b:ff:
54:34:f4:db:32:84:41:2b:ef:37:89:76:27:99:ca:
27:52:95:71:ef:e9:37:4e:88:f0:a5:6f:2a:ff:43:
79:7e:d6:d5:db:b2:7d:93:53:a2:39:c9:b8:e5:83:
1d:01:bb:b9:37:cf:e7:84:5c:8a:15:4a:40:20:68:
3c:65:f6:f9:3c:86:2b:a3:f4:d9:85:9c:e7:1d:45:
a4:0e:b6:d0:e0:a8:04:4b:22:af:1a:58:25:ea:c3:
a2:2a:77:ea:73:46:ea:98:4f:76:35:b2:68:2b:e5:
8b:87:55:e7:77:05:5a:2a:34:dd:ed:23:6c:c2:6c:
24:72:6f:54:f8:f0:e8:13:48:ec:da:0b:6f:7a:c6:
1c:f9:f0:43:71:2f:04:42:8b:06:39:1c:6d:f2:22:
01:8b:b4:c9:42:69:29:8f:57:d1:c4:55:a7:18:a6:
d7:95:ce:06:cb:c6:be:06:1f:38:ac:60:1c:c8:11:
aa:e3:76:68:23:8a:db:6b:75:8d:76:d6:08:e7:9b:
39:b6:a8:69:ed:db:33:b8:07:3a:be:60:e0:aa:cc:
ed:e2:e4:72:be:a1:19:c8:60:09:13:b1:6f:40:21:
90:34:04:67:eb:fc:09:e3:49:ed:db:1b:99:10:1a:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:91:14:46:A0:E7:41:AC:06:3A:F6:E1:E2:FD:3B:8D:10:15:00
X509v3 Authority Key Identifier:
keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:4c:47:e9:95:78:81:8b:7a:0e:3c:24:49:03:a0:8b:80:
e4:5d:4f:04:e9:8d:3b:b3:cf:5a:b1:c5:b5:2f:a2:e4:c7:74:
63:c7:87:7d:b2:bf:ae:e6:b6:de:9f:00:f3:af:02:d5:dc:1e:
e9:33:7f:41:6e:3f:c4:8d:45:09:5b:57:75:3b:1d:e9:61:5c:
83:e7:73:d1:f4:bc:34:6c:32:9a:17:b7:79:fa:ae:85:36:8a:
97:28:ba:01:3c:a5:e4:5c:2e:3c:f3:d4:20:b0:61:de:d9:93:
82:e8:cc:a1:3c:d0:cc:15:d6:de:b9:50:fb:1b:a7:b5:7c:5c:
bf:f0:bf:63:25:ea:5f:4e:ff:bf:89:28:b8:ce:77:51:e2:72:
0d:e2:12:72:8f:a9:d0:12:a6:0e:a9:e3:e0:d6:26:56:2b:73:
d6:b9:fa:0d:64:ef:d9:e8:c3:2e:4a:dd:45:1f:4f:33:75:f0:
61:90:a1:f4:dd:6a:16:35:cc:e7:3c:07:59:b4:c8:a8:97:95:
d3:08:27:9b:f0:19:ad:d7:46:27:2b:3f:dc:75:bb:41:e2:19:
f2:de:31:9c:0d:0d:1f:aa:dd:93:7b:0d:dd:bc:4e:0b:31:a2:
6e:00:28:e4:e4:ad:fc:1e:dc:94:30:a2:ab:b4:ee:94:9f:4a:
92:36:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:16 2025 by rpki-client