Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File: xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier: vFKsqII3FxHTq/QSR0Buig8aJ391u7TBFmTBHVtYN+E=
Subject key identifier: 11:9A:B3:7D:A9:2E:03:DE:5B:09:43:3D:EB:AE:FE:6F:32:9F:CC:D8
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer: /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial: 0CE7
Authority info access: rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number: 0CE7
Signing time: Sat 29 Mar 2025 01:17:39 +0000
Manifest this update: Sat 29 Mar 2025 01:17:38 +0000
Manifest next update: Mon 31 Mar 2025 01:17:38 +0000
Files and hashes: 1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: rMSFPSdKmU1Hn6Ni8JK7wpEEynRhA4uuolRtbFKc8c8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FAAR
Validity
Not Before: Mar 29 01:17:38 2025 GMT
Not After : Mar 31 01:17:38 2025 GMT
Subject: CN=67e74a33-b9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:94:cc:bd:64:f2:31:b4:a8:62:82:26:a0:
53:70:ec:8f:ce:82:ac:f7:c4:46:6b:dd:ce:a6:d0:
21:06:cb:87:6a:a6:34:a9:e0:a2:61:97:6d:b4:33:
b5:2b:87:09:0b:f9:6a:0f:9b:0c:0d:fb:b7:38:47:
31:a5:ea:33:6d:c7:c9:a2:a7:fd:a8:c5:43:96:7d:
a1:1b:5e:4a:91:ed:86:09:2b:55:de:a2:59:f4:bb:
a3:93:cf:64:0f:3e:05:24:57:8d:3c:57:f2:cf:3e:
9c:3e:ec:28:ce:89:45:f9:6b:ff:47:68:45:20:00:
0b:32:40:08:eb:07:95:3f:8c:be:e5:fc:db:40:82:
1e:cc:47:fb:d6:46:e3:42:a9:72:19:8b:8f:4f:0b:
6d:ae:72:67:4e:cf:67:ff:2f:17:69:29:49:b9:58:
71:18:91:24:b7:ba:55:8b:51:56:f0:86:67:c2:ee:
e8:ad:72:3d:f6:bb:55:d9:46:1a:01:44:bd:54:db:
a1:d8:41:63:1e:b2:28:b6:d2:fb:61:b9:c9:b8:dc:
88:f8:56:db:0a:dc:7b:e1:b7:50:82:c1:5f:a4:22:
4b:41:f7:3f:01:20:ca:63:ce:c2:11:2b:ef:75:b6:
1e:b7:4b:de:e7:54:f4:86:81:d3:51:9c:a5:83:57:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9A:B3:7D:A9:2E:03:DE:5B:09:43:3D:EB:AE:FE:6F:32:9F:CC:D8
X509v3 Authority Key Identifier:
keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:04:99:36:74:98:ba:65:b7:14:bc:7e:02:0b:7c:f3:29:77:
1d:6d:57:84:c2:a2:0f:21:2e:56:2b:1e:c7:19:82:a1:31:78:
1c:08:3d:e6:18:4f:36:0c:33:90:98:a0:69:c8:40:45:38:b0:
33:a7:7f:90:9a:51:24:fe:ea:a2:88:7f:65:bd:71:4e:17:a7:
b2:ff:8c:36:d9:80:b1:a1:87:65:ea:b2:e3:3d:0d:be:de:b4:
f5:e7:2d:f5:8b:d1:72:ea:23:3f:c4:db:e3:a6:76:68:39:3a:
99:a8:76:03:4f:58:0c:5a:a1:0d:7c:c2:db:1c:3e:51:67:3f:
a5:8f:38:dc:c8:80:9b:04:09:68:ff:e8:b4:d1:c6:4d:3d:fa:
0c:e5:07:70:54:31:70:00:e1:fe:3e:ac:9a:32:c1:22:ec:af:
a7:04:6c:76:64:45:22:54:af:01:ea:93:dc:95:dc:05:06:89:
f8:63:99:eb:13:87:70:3e:1e:22:b6:ea:1b:6b:44:43:3f:b9:
bd:71:6d:16:d1:9a:23:a0:94:85:8a:4a:ee:ee:ca:6f:57:35:
af:76:ef:f3:0a:d9:cc:1f:0c:dd:c6:03:5a:45:22:70:27:8d:
65:eb:41:ef:bf:48:0b:f0:9e:fe:60:9a:91:93:86:56:d7:b5:
c1:82:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:18 2025 by rpki-client