Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File: KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier: 6+LcsuKeQr6GwFVCg+ivQ1HF/8rFn9gn1wN9Nf468LQ=
Subject key identifier: B3:52:9F:08:F7:C9:32:AC:D8:C4:5C:39:67:15:BE:03:6E:2D:23:A4
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer: /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial: 0CEF
Authority info access: rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number: 0CEF
Signing time: Sat 05 Apr 2025 00:56:34 +0000
Manifest this update: Sat 05 Apr 2025 00:56:33 +0000
Manifest next update: Mon 07 Apr 2025 00:56:33 +0000
Files and hashes: 1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: rIjH+r2osOZQdlq5CV5QkJzRB4/7gqOfkuUgycBtbHs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FARI
Validity
Not Before: Apr 5 00:56:33 2025 GMT
Not After : Apr 7 00:56:33 2025 GMT
Subject: CN=67f07fc2-e43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:c4:91:43:0f:da:e3:90:78:f8:84:b3:aa:
a9:a8:e1:69:b8:0b:b0:af:8e:35:ea:69:c7:9e:a1:
90:e7:c0:94:b3:4a:b7:73:ae:0a:0f:f2:ec:5e:83:
78:fe:2e:29:f2:52:73:fb:1b:7c:97:61:9a:2c:fa:
a2:7f:56:65:f4:65:b9:ee:03:d0:e1:32:7e:13:40:
55:37:9e:22:03:57:3f:ba:fa:ee:90:13:43:6c:d4:
7f:ff:9e:db:4d:f0:1b:5a:b8:3b:b5:ee:72:4d:3d:
f7:74:45:a8:1a:97:41:56:3e:b8:0b:a7:3d:1f:c3:
d6:91:ee:87:40:2f:15:50:7e:e9:b0:f9:3c:8c:45:
58:a8:f6:4f:9c:8c:95:35:54:46:01:c1:0a:88:dd:
8b:40:af:19:8e:1d:5b:25:45:9b:40:5f:56:be:3c:
fb:b7:bd:81:c7:f5:69:79:ab:fa:72:f7:b3:8c:58:
c9:0c:42:fa:0c:90:f5:94:a7:2b:2d:92:fb:5e:36:
11:51:2d:d0:16:8d:96:9e:c0:b2:ce:1e:36:8d:80:
e4:51:da:4a:13:91:bc:54:88:86:a2:37:8f:b4:81:
13:d5:5b:96:d2:bb:3c:aa:b8:ae:08:6c:0d:4d:bc:
52:49:da:38:14:88:31:eb:ef:62:2e:1f:16:50:d1:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:9F:08:F7:C9:32:AC:D8:C4:5C:39:67:15:BE:03:6E:2D:23:A4
X509v3 Authority Key Identifier:
keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:7f:09:27:95:9f:88:db:d9:59:e9:50:7d:75:85:f7:7f:fa:
23:3f:c1:5c:eb:0e:a8:18:02:b7:90:23:07:b3:1e:b6:e0:4d:
55:7f:a8:32:f5:fd:38:c7:9f:05:00:f8:51:48:cc:94:57:b4:
40:4c:34:32:78:8a:45:28:bb:69:b0:ea:a0:f1:ac:1b:eb:34:
f0:71:f8:ef:03:62:92:4a:71:49:54:fe:29:c1:bf:59:45:bd:
a0:68:43:08:27:43:94:b0:d1:e2:a3:9c:f7:73:b8:35:35:a6:
f8:ef:9c:db:57:e7:fa:a7:30:de:1d:3c:d8:06:95:dc:e9:41:
c7:2e:58:14:04:5b:99:70:a6:e2:be:ab:6a:4f:8e:e0:41:fa:
f9:68:f1:64:3a:58:68:af:13:cf:92:92:50:6c:fc:d3:6d:e0:
02:9c:11:16:e6:20:ce:95:35:47:08:d0:21:a9:89:59:0a:56:
52:e9:e1:eb:45:4b:8b:b0:93:a0:f9:e7:c7:5d:82:58:f0:cd:
54:ca:bd:cb:08:b9:2b:a8:41:f5:fb:17:6e:0e:5d:df:e3:92:
ad:3f:df:f9:52:fe:64:54:d9:5a:10:d1:95:ab:76:d0:a2:8d:
8b:ea:c8:06:1c:ef:f3:5a:c4:f3:fd:3c:39:2a:f7:ea:40:76:
ec:d9:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:16 2025 by rpki-client