
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
File: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft (raw, json)
Hash identifier: Hfu+vd6y+6Dp/vj3UbGmR+TrV8zVPgBP5UED8+nloCA=
Subject key identifier: 31:07:F4:A9:42:AE:3E:BC:FA:9E:1F:24:40:DD:41:62:65:28:B7:1D
Authority key identifier: 3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
Certificate issuer: /CN=F36AAA81AF/serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Certificate serial: FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
Manifest number: FE
Signing time: Thu 03 Apr 2025 03:08:47 +0000
Manifest this update: Thu 03 Apr 2025 03:08:46 +0000
Manifest next update: Sat 05 Apr 2025 03:08:46 +0000
Files and hashes: 1: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl (hash: be3Uafo3cxokLBc3gGtaC48C8R/TNt+QIWfKRAwMFOs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AAA81AF
Validity
Not Before: Apr 3 03:08:46 2025 GMT
Not After : Apr 5 03:08:46 2025 GMT
Subject: CN=67edfbbf-c403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:7d:a8:64:5b:14:72:e9:5b:59:ab:f4:5c:
8f:5a:0d:36:3a:27:2d:51:fe:83:fd:72:46:1b:5d:
3a:0d:90:17:5f:6d:97:94:62:ef:2a:b3:df:d4:23:
e5:9a:96:96:cb:92:e1:97:37:a1:66:06:da:6f:e7:
01:7e:2b:42:e3:c0:d5:c5:f7:47:44:23:64:9e:09:
97:6d:fc:04:57:a9:7a:33:00:b1:a7:8e:45:ef:76:
bf:6b:9c:5a:d3:3e:b2:d6:98:c0:ab:b2:d8:d2:e9:
99:55:a7:53:cb:b3:4b:10:4c:e0:e6:49:0d:a6:1e:
0d:e8:9c:0f:4d:d7:bd:7b:c7:60:e1:dd:7d:bb:58:
15:e9:d3:16:ad:7e:b0:41:92:66:a0:75:c1:69:32:
9f:c3:b3:14:c7:94:2e:98:9e:4d:07:de:d2:a6:5b:
95:cf:0c:eb:c4:5f:1f:be:70:3f:0f:ba:8b:20:6d:
b2:8d:93:b2:23:23:22:3c:fd:7a:b8:d4:69:12:17:
d4:ab:9d:c4:03:14:76:3b:40:4a:4c:ea:90:8a:5d:
40:74:48:42:91:ab:70:bc:a3:54:5e:87:7a:96:d1:
e0:c7:a9:34:7c:62:f2:e9:10:5b:ed:5f:ba:62:1f:
f3:87:45:58:9c:45:fd:02:b5:7d:79:9a:b2:5b:51:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:07:F4:A9:42:AE:3E:BC:FA:9E:1F:24:40:DD:41:62:65:28:B7:1D
X509v3 Authority Key Identifier:
keyid:3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:db:08:88:cc:4e:cc:f8:f6:d2:68:a0:74:6f:37:19:04:61:
95:4c:e6:df:aa:dc:82:5e:aa:98:bf:8e:ae:24:5d:a9:04:2c:
0a:51:62:a2:6d:73:17:61:f6:4a:59:af:43:e8:8b:52:d2:3e:
c6:cb:c3:c9:48:56:5d:28:b6:88:29:c1:28:5b:cf:92:1b:6d:
76:60:2b:16:d7:ae:a8:d1:f8:f1:b7:5d:9a:54:5f:6e:07:8e:
c8:ac:bb:1d:48:40:40:2e:81:06:cc:40:8c:78:ee:1b:6f:d3:
ed:54:c1:72:dc:88:a0:4a:39:1a:2f:51:de:2c:74:e1:24:6f:
f5:ed:35:4a:63:a0:e5:d0:fc:7a:59:c7:82:b8:12:d0:30:bb:
4d:a3:d2:d2:08:73:a5:94:1d:ed:56:66:31:5d:3b:bb:c6:50:
31:b7:27:7e:bb:49:79:80:44:49:45:53:19:71:24:48:05:92:
a7:88:48:d4:d8:aa:ab:8c:5d:34:09:ba:bb:e8:6d:7d:e4:56:
ec:54:54:1c:d1:8f:dc:1e:a3:08:42:75:eb:ca:c0:42:bc:bd:
38:98:2a:f6:0c:e2:45:2a:8d:b3:29:95:32:f9:f8:2c:5b:fb:
36:38:1a:9d:a6:f9:af:31:1d:82:3e:d6:a9:2f:dc:99:28:27:
d5:64:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:44:02 2025 by rpki-client