Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
File: _fBwBNUH4xafjwTMLtjgu_Sq38Y.mft (raw, json)
Hash identifier: jXK2Waj5TzZweNY5ZRAl5ptmBYQYkWQaYee+onfxxEw=
Subject key identifier: 1B:42:83:34:08:82:EF:7A:55:8B:EA:3B:09:41:0E:AD:55:F3:5B:9C
Authority key identifier: FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
Certificate issuer: /CN=F36B1BD7AF/serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
Certificate serial: 40
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
Manifest number: 3D
Signing time: Thu 03 Apr 2025 03:24:38 +0000
Manifest this update: Thu 03 Apr 2025 03:24:37 +0000
Manifest next update: Sat 05 Apr 2025 03:24:37 +0000
Files and hashes: 1: _fBwBNUH4xafjwTMLtjgu_Sq38Y.crl (hash: iS0ZCu+R96hAsVpnU+c72fACjUXUN327jNA4qwkqMMk=)
2: 58A4F560E54E11EF908E0F81762E951A.roa (hash: RGKTeSXUz+Sp60GwrTqbGbFazRAHGX0bbtXYfxY2Mws=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1BD7AF
Validity
Not Before: Apr 3 03:24:37 2025 GMT
Not After : Apr 5 03:24:37 2025 GMT
Subject: CN=67edff76-8433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:2a:b3:09:52:53:7f:99:55:a8:fa:ef:33:
93:81:97:b6:41:3a:c2:0b:98:f7:b4:94:e1:27:32:
09:17:94:f5:a1:aa:27:9c:f8:00:52:96:00:27:d7:
a1:4c:ba:8c:0b:cb:72:cd:f2:e8:dd:66:b8:3b:ad:
39:d9:2f:92:1e:75:b4:ef:03:61:77:03:48:11:96:
bc:8b:3e:b6:a9:b6:12:ad:b2:30:aa:bd:f4:e6:27:
df:c8:52:6d:fb:18:d8:79:ab:ca:82:d7:f7:84:76:
82:d2:73:00:93:d7:50:36:ee:47:2a:27:1c:da:b2:
49:17:7f:e7:9b:69:ea:7e:20:be:cb:c3:e4:71:1e:
67:92:41:75:02:d6:eb:d3:9c:71:70:89:38:98:50:
8c:7e:6f:78:16:54:ee:cf:ec:f5:f1:81:d9:07:d6:
c6:52:ee:99:72:76:9b:dc:14:23:9d:95:a8:de:56:
c9:6c:69:04:1c:e7:aa:e4:f0:59:31:dd:1f:42:e3:
7e:91:2e:53:dc:ce:09:62:60:5f:aa:67:f1:e1:3b:
da:e2:84:10:03:b2:1f:7c:c3:8f:b7:86:e1:0d:6f:
e1:34:36:1a:80:be:db:82:e4:8a:7a:62:3e:6c:ec:
b5:14:a7:d5:04:3d:bb:90:59:7c:4b:5a:ab:aa:5c:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:42:83:34:08:82:EF:7A:55:8B:EA:3B:09:41:0E:AD:55:F3:5B:9C
X509v3 Authority Key Identifier:
keyid:FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:04:97:f2:41:e0:87:8f:ff:16:8b:59:71:df:d5:4f:e8:5e:
a5:de:81:52:f9:1e:6e:75:de:d1:78:94:d1:3a:00:26:3c:98:
79:f6:84:0d:7e:89:27:02:87:04:60:6e:b4:7f:59:ed:23:78:
52:6e:73:00:8e:d0:e6:5b:28:82:7d:b0:aa:7d:5a:81:8e:a3:
2e:ca:3f:3f:9d:96:e2:da:bb:84:c3:7e:32:2c:eb:a8:e3:6c:
97:51:8d:1e:cc:f1:d9:3c:9a:6f:c0:0c:b1:4f:1d:c1:88:4b:
b3:7b:31:97:75:b5:8a:91:4a:09:d4:5a:18:21:5b:00:8e:60:
f8:be:d9:e4:e4:dd:e9:67:a8:c7:7c:5a:12:5f:22:9e:ef:78:
af:43:66:9f:55:9e:d7:a3:1a:5d:dc:01:ff:5f:1f:99:24:e0:
d8:da:2d:9f:5d:ea:3c:92:29:28:ac:c0:c9:89:1c:94:09:35:
13:7b:fe:f9:eb:27:bb:55:6b:62:22:3a:11:ed:c9:c1:e1:d8:
8e:f4:39:75:15:c5:c1:fc:f8:bd:79:fa:77:1e:3a:f0:6a:eb:
9d:eb:90:e5:0a:62:8f:7f:61:65:7f:ce:95:e7:de:36:e1:41:
93:df:5e:96:2d:02:97:44:32:43:1c:e8:58:2c:35:a2:50:3b:
ac:69:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:23:43 2025 by rpki-client