Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
File: Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft (raw, json)
Hash identifier: ZFOtp/qwQQL+Jy3/0g7ownu8KQR/3+ZpiGlFej3ebRE=
Subject key identifier: B2:52:B9:1C:39:8B:1E:69:7A:B6:65:D5:F3:44:B6:BA:84:5E:19:BC
Authority key identifier: 1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C
Certificate issuer: /CN=F36AC9F1AF/serialNumber=1B2E71DA04AE09103945117F9076C7F8E199243C
Certificate serial: DA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
Manifest number: D9
Signing time: Sat 29 Mar 2025 03:34:51 +0000
Manifest this update: Sat 29 Mar 2025 03:34:51 +0000
Manifest next update: Mon 31 Mar 2025 03:34:51 +0000
Files and hashes: 1: Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl (hash: TcJHDizWgm9AT0fDMlYQajQxxcwiPMLtbsbMDPUr8xw=)
2: A30F3A50697C11EFB366DFAE762E951A.roa (hash: /ilQRqAkN9GV5Cf0rRJQg2G1MMpc0XTxcTekWiarM/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC9F1AF
Validity
Not Before: Mar 29 03:34:51 2025 GMT
Not After : Mar 31 03:34:51 2025 GMT
Subject: CN=67e76a5b-99a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:36:dd:90:74:e5:bf:bc:6c:a9:8a:48:dd:
57:c9:df:fa:ef:bf:c1:9f:db:70:e3:ef:dd:b2:08:
34:40:fb:e3:3a:cd:28:b3:38:56:9d:0b:81:27:93:
0e:c4:c2:e0:25:f6:40:d9:9d:d6:ef:8e:4f:9a:d2:
fc:e5:b4:d4:2e:5e:ee:ba:1c:7e:c7:f3:17:65:00:
dd:fa:ae:34:27:34:75:d2:9a:1d:3c:ee:f0:3b:71:
7d:e0:6c:ff:bf:18:a1:e6:03:e3:5b:b7:87:4d:07:
1f:56:fd:5c:64:1b:92:d7:fc:ea:7b:51:02:57:87:
00:4e:3c:59:32:52:bb:2f:62:f4:b2:08:1c:1c:a8:
5e:f5:15:b6:36:94:04:5b:48:7f:ec:2c:cc:8a:82:
24:dd:70:56:33:0e:64:c9:15:fd:60:36:41:ca:3b:
eb:97:44:36:ff:59:24:97:64:62:99:65:03:63:36:
d0:73:94:78:34:db:58:78:c7:5d:b6:69:05:e8:14:
a3:cb:6e:5d:b6:63:9d:e2:c2:69:50:98:bb:a0:43:
9c:13:99:c9:13:c6:e1:4e:d4:80:a3:57:cf:73:61:
7a:e7:c8:0b:65:72:44:e6:34:1b:06:4f:e9:4a:9b:
cb:b3:e1:bd:ee:6d:40:7b:c4:d0:55:b3:08:4f:49:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:B9:1C:39:8B:1E:69:7A:B6:65:D5:F3:44:B6:BA:84:5E:19:BC
X509v3 Authority Key Identifier:
keyid:1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:d7:99:6d:8c:70:60:1a:68:ab:72:4a:41:f1:e3:86:98:b0:
d4:21:2b:31:43:42:53:1d:f2:6d:79:fa:a8:13:1e:69:d1:b9:
4c:b5:85:c5:22:6d:e1:fb:5d:b0:48:e1:d0:29:f2:59:c1:45:
ba:0b:bb:a1:c4:5b:f2:43:aa:b7:1b:6e:39:e9:90:74:15:92:
70:27:d7:18:db:23:85:57:67:1a:aa:ac:9d:2e:26:04:f7:e0:
ae:dd:ea:e4:af:71:3f:0f:f1:70:95:4d:f8:79:5a:6d:77:bf:
11:a0:08:44:e3:48:00:00:45:22:97:95:70:cf:7a:92:af:d8:
b7:88:15:d2:47:bd:1b:1c:20:37:12:21:61:f3:e5:d4:64:e2:
1d:5e:81:7f:4f:b8:27:ea:8c:5c:e1:ab:a5:56:cb:73:e0:58:
ec:ee:4e:0c:bd:cc:44:9a:7a:66:6f:66:eb:27:68:4c:2d:a1:
e3:4a:a8:de:4f:23:fe:fa:ad:90:39:f3:57:68:fa:75:3a:41:
0c:b4:fd:ef:aa:6e:b1:87:6a:e6:75:85:56:5a:d1:52:66:82:
cd:49:b1:ee:48:58:de:c3:a0:71:b1:b6:60:2c:d9:84:ad:2e:
02:bd:72:47:92:54:c5:e5:04:56:20:96:76:29:39:57:7c:b3:
3e:b1:7c:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUM5RjFBRjExMC8GA1UEBRMoMUIyRTcxREEwNEFFMDkxMDM5NDUxMTdGOTA3NkM3
RjhFMTk5MjQzQzAeFw0yNTAzMjkwMzM0NTFaFw0yNTAzMzEwMzM0NTFaMBgxFjAU
BgNVBAMTDTY3ZTc2YTViLTk5YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDO8jbdkHTlv7xsqYpI3VfJ3/rvv8Gf23Dj792yCDRA++M6zSizOFadC4En
kw7EwuAl9kDZndbvjk+a0vzltNQuXu66HH7H8xdlAN36rjQnNHXSmh087vA7cX3g
bP+/GKHmA+Nbt4dNBx9W/VxkG5LX/Op7UQJXhwBOPFkyUrsvYvSyCBwcqF71FbY2
lARbSH/sLMyKgiTdcFYzDmTJFf1gNkHKO+uXRDb/WSSXZGKZZQNjNtBzlHg021h4
x122aQXoFKPLbl22Y53iwmlQmLugQ5wTmckTxuFO1ICjV89zYXrnyAtlckTmNBsG
T+lKm8uz4b3ubUB7xNBVswhPSXRvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUslK5
HDmLHml6tmXV80S2uoReGbwwHwYDVR0jBBgwFoAUGy5x2gSuCRA5RRF/kHbH+OGZ
JDwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFDOUYxLzkxRDI0MEE2Njk3MzExRUZBRkFDMjc3ODc2MkU5NTFBL0d5NXgy
Z1N1Q1JBNVJSRl9rSGJILU9HWkpEdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0d5NXgyZ1N1Q1JBNVJSRl9rSGJILU9HWkpEdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUM5RjEvOTFEMjQwQTY2OTczMTFFRkFGQUMyNzc4NzYy
RTk1MUEvR3k1eDJnU3VDUkE1UlJGX2tIYkgtT0daSkR3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ15ltjHBgGmirckpB8eOGmLDUISsx
Q0JTHfJtefqoEx5p0blMtYXFIm3h+12wSOHQKfJZwUW6C7uhxFvyQ6q3G2456ZB0
FZJwJ9cY2yOFV2caqqydLiYE9+Cu3erkr3E/D/FwlU34eVptd78RoAhE40gAAEUi
l5Vwz3qSr9i3iBXSR70bHCA3EiFh8+XUZOIdXoF/T7gn6oxc4aulVstz4Fjs7k4M
vcxEmnpmb2brJ2hMLaHjSqjeTyP++q2QOfNXaPp1OkEMtP3vqm6xh2rmdYVWWtFS
ZoLNSbHuSFjew6BxsbZgLNmErS4CvXJHklTF5QRWIJZ2KTlXfLM+sXyK
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:44:01 2025 by rpki-client