Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: tIravgu31t4PTulGNid/reokE5P8TRsyXp/kj9A5WAo=
Subject key identifier: ED:4D:8D:43:5D:ED:65:55:B8:91:B2:9E:28:17:4B:85:16:46:4A:75
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 0691
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 0691
Signing time: Fri 22 Nov 2024 01:16:37 +0000
Manifest this update: Fri 22 Nov 2024 01:16:37 +0000
Manifest next update: Sun 24 Nov 2024 01:16:37 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: Kjw9ZKpSbgOWPmN9DBpjSa+2IkYQbjho7j1krbxMVNM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Nov 22 01:16:37 2024 GMT
Not After : Nov 24 01:16:37 2024 GMT
Subject: CN=673fdb75-d298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:92:86:3f:95:44:24:d5:1e:f1:8c:02:0b:
e7:e5:43:66:23:c9:84:fc:df:a0:0c:a6:7b:1f:14:
72:42:4e:c8:a4:2d:72:ba:78:59:ce:78:7d:93:60:
3b:5f:f7:ef:62:f9:9d:8d:69:a7:79:31:b0:12:02:
72:00:bd:b4:08:6e:27:3c:79:7e:8c:34:bf:13:d0:
27:6e:97:f9:de:03:a8:b9:ee:18:1c:e4:fd:e2:3f:
17:43:22:13:69:21:cb:61:a4:15:46:8a:2f:83:6c:
df:3a:a3:98:5b:7d:07:e5:39:d9:5b:0a:b7:8b:c6:
66:92:c3:d9:f5:76:a7:45:f1:80:c8:eb:a5:0f:04:
74:ef:da:d6:cc:13:10:f6:c4:de:56:fc:d1:7e:0b:
ba:6d:12:6a:9b:f6:83:ca:35:64:1f:4f:ad:82:d2:
74:1e:4d:05:ef:ac:60:36:23:57:ce:df:7f:7d:ce:
14:49:05:e1:38:7a:c5:09:11:10:7d:cf:26:0a:72:
93:de:84:4d:6e:bc:85:ba:ab:52:3f:41:64:11:62:
56:dc:81:cc:e3:92:e0:40:34:a2:f1:27:81:aa:0f:
ee:50:68:37:c6:22:9d:16:2f:f0:a2:0d:08:60:75:
bf:ec:f2:ef:ea:f8:81:2c:79:8d:6a:90:ce:00:b1:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:8D:43:5D:ED:65:55:B8:91:B2:9E:28:17:4B:85:16:46:4A:75
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:98:5f:f3:1e:37:91:c1:ab:c3:72:32:cf:4b:f9:19:d4:
69:95:7e:14:cb:b8:56:46:a5:40:17:54:cb:29:2e:8d:b9:62:
89:26:24:02:b9:c0:8e:09:8d:6f:f1:05:d1:b2:23:32:e8:27:
24:9c:ef:cc:16:48:11:9b:90:ee:6f:73:e7:ea:2a:63:bf:d9:
2e:5f:78:45:88:6c:45:94:a0:71:ba:b8:0d:8f:e8:ea:71:cc:
30:14:32:47:2e:bf:9d:09:59:bf:6c:a5:8c:46:7e:22:09:db:
5a:0e:28:85:cf:15:a5:89:6a:b7:cb:d0:c9:f6:8a:61:71:66:
26:d8:90:28:93:54:b3:2e:89:e6:21:1c:a9:e5:17:28:33:40:
74:ee:ab:1c:8e:2e:84:98:b8:48:e1:84:1b:fa:7c:ac:87:49:
ca:e5:06:e6:4a:ac:7f:c4:4d:5a:7e:c4:b0:55:7c:e5:8d:de:
25:db:00:39:b4:25:29:28:96:98:9d:0a:d7:cf:50:3f:71:01:
62:27:26:43:a0:cc:14:ac:90:83:00:d2:c5:7e:da:8b:35:7f:
da:06:5f:46:b3:19:57:fa:20:78:65:aa:06:da:33:d1:fd:c3:
d0:d3:75:f2:c7:6a:c6:79:d2:40:49:5e:1e:b0:79:db:85:98:
26:16:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org