Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
File: HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft (raw, json)
Hash identifier: f9Nu0oDMK5fJF6ZH/xSrz7z23FJOc2x6F5pB67kj0yM=
Subject key identifier: E5:9F:F4:EF:F1:78:38:E2:E8:6C:03:36:65:AE:33:0B:F4:5C:9E:01
Authority key identifier: 1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
Certificate issuer: /CN=F36B13C7AF/serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
Certificate serial: 0761
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
Manifest number: 075C
Signing time: Sun 16 Feb 2025 01:24:48 +0000
Manifest this update: Sun 16 Feb 2025 01:24:47 +0000
Manifest next update: Tue 18 Feb 2025 01:24:47 +0000
Files and hashes: 1: HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl (hash: KGXMEVpYUNwZ1t84W4WvTXqEhggRQq8lf8x78Cc6wnc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B13C7AF
Validity
Not Before: Feb 16 01:24:47 2025 GMT
Not After : Feb 18 01:24:47 2025 GMT
Subject: CN=67b13e5f-ca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:9d:c7:81:7f:45:da:2c:9d:fd:22:95:55:
c5:10:ef:ba:6d:54:d7:a7:27:1c:6d:41:0e:36:7c:
ca:1c:59:54:d0:03:d8:ac:b5:7c:26:9d:c4:c6:89:
6d:62:69:eb:d8:72:99:47:40:16:69:2e:a8:5f:a5:
03:2e:63:84:93:88:28:6d:07:47:d3:f2:62:f0:e0:
a0:c6:84:0a:77:a8:1f:5a:8d:ff:f4:cb:a3:08:c0:
e8:e4:ef:5d:d9:65:d6:4e:11:7e:3c:fa:c4:8f:75:
6b:f0:35:6a:88:89:d1:b9:0b:a7:28:0f:c6:0d:55:
a7:2d:69:b0:c5:bb:f3:7b:60:72:3e:92:fd:18:75:
00:0f:c5:fd:50:6f:ca:a4:9d:50:90:e1:53:99:c5:
79:5c:32:37:55:9f:18:6b:ce:76:83:c0:1d:14:51:
b2:3b:0f:69:41:e0:cf:fb:c3:7a:bd:b4:db:95:17:
05:4b:d0:03:1c:d9:6f:e3:05:3f:50:ee:bf:86:21:
22:d8:0e:da:e7:cf:04:b7:d3:1c:46:43:47:82:64:
48:2c:5d:f8:ee:ca:74:a6:30:55:67:b1:74:e5:80:
b5:a9:b5:4b:32:d1:bd:64:52:a5:71:b2:40:0a:73:
38:57:cd:ca:3e:17:0f:29:c5:67:25:a1:3a:36:64:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:F4:EF:F1:78:38:E2:E8:6C:03:36:65:AE:33:0B:F4:5C:9E:01
X509v3 Authority Key Identifier:
keyid:1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:d8:91:fd:96:35:0e:6c:49:62:f5:92:c3:50:d6:22:46:19:
15:b1:e8:a1:06:c3:70:bf:de:aa:04:a5:36:ff:f9:77:c2:a2:
ba:bf:d8:72:20:db:07:2f:98:69:24:61:51:a9:36:7d:b0:76:
05:f0:2c:3e:2e:ff:85:0c:0c:c3:49:6e:d4:35:29:bd:e8:b7:
63:ea:60:83:c0:05:45:76:f7:b6:56:3d:47:b7:1e:0d:ba:b1:
d0:a8:5d:4e:41:e8:09:c7:7f:46:61:6e:9c:3c:8e:3a:39:e2:
c8:bc:67:a8:47:97:16:ee:99:90:a6:d4:9f:9d:48:c1:4f:76:
41:12:2c:48:94:2f:e9:b8:e2:34:0c:d0:9e:c1:e8:9b:40:a4:
72:0f:4b:ff:9e:15:e8:aa:18:d6:09:bf:bc:5a:dc:0a:b1:41:
00:7e:42:6c:94:a8:a3:ae:74:01:71:9b:d7:6c:2f:57:56:49:
7a:08:bd:77:b1:31:c0:98:6b:f7:32:2c:b2:50:1d:d2:7e:8a:
6c:04:28:de:90:e8:66:61:0d:41:f3:93:60:da:03:da:c6:a8:
f1:7a:7e:6b:a6:f5:0f:bf:e7:ab:73:f8:6a:90:b7:45:5b:2d:
e4:b2:96:9d:71:f8:61:b4:d5:12:ab:7a:28:f5:ca:b8:a6:a1:
9c:0b:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:55 2025 by rpki-client