Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
File: nZEfOSNannHK5JlXppouUkKg3TU.mft (raw, json)
Hash identifier: mvv9yNEFJ3qR+lXfMwwiSeBnwEiIyTrxVXLEsTESCdo=
Subject key identifier: 2A:43:F7:3A:F1:66:0B:3D:52:3C:94:EA:5C:5E:BA:ED:55:72:2B:79
Authority key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
Certificate issuer: /CN=F36B4CC8AF/serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Certificate serial: 01BE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
Manifest number: 01BC
Signing time: Sun 16 Feb 2025 02:50:03 +0000
Manifest this update: Sun 16 Feb 2025 02:50:03 +0000
Manifest next update: Tue 18 Feb 2025 02:50:03 +0000
Files and hashes: 1: nZEfOSNannHK5JlXppouUkKg3TU.crl (hash: RlWmjGJq5LD6a457V+7SMyU3ktlCGhRcnNLJUI7ZkIE=)
2: 6B19BD749DA711EE8B40AC5ED25BE465.roa (hash: NgzSPsDLZHTS8GcIuQL4M+RUtb2W4HialOJ/KKr08S4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B4CC8AF
Validity
Not Before: Feb 16 02:50:03 2025 GMT
Not After : Feb 18 02:50:03 2025 GMT
Subject: CN=67b1525b-bcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:17:87:2c:22:f4:4c:17:32:64:48:b6:46:
60:2d:bb:d9:72:3e:4a:4e:20:87:d5:05:f1:99:70:
4b:b1:38:1c:e1:f8:a9:9c:4c:40:ae:b1:61:c8:5e:
8a:aa:56:40:1f:de:26:26:22:31:7f:28:a1:dd:39:
56:d5:1e:dc:23:4f:8d:5b:93:d5:25:a2:7d:2e:a6:
ac:19:37:4b:91:4e:7d:ba:b5:e4:2a:e0:29:0d:3e:
b7:1c:9f:33:d4:5a:0d:4a:65:0a:70:c7:7b:bd:c0:
14:19:b1:75:04:16:3f:f6:42:b5:23:bf:85:64:f2:
68:f3:9b:da:e9:91:60:81:ea:93:b7:47:68:b7:9a:
c7:cf:49:16:c3:f2:7c:f0:8e:9f:01:68:2e:2f:19:
98:45:61:73:c3:99:1c:e2:f0:fa:8e:ed:70:05:98:
bf:8d:8c:f2:2d:78:c3:7c:b4:73:59:35:4e:0f:5d:
a6:e9:37:76:79:62:bd:3a:dc:1f:1c:2e:75:e5:a7:
a8:2d:72:e7:48:0f:f6:3d:96:74:38:50:3a:19:ee:
05:b1:46:27:b8:e0:d8:1e:7a:cb:52:39:43:b4:c5:
31:b0:68:34:6c:78:e2:43:69:49:03:01:99:fd:2f:
cc:32:ea:0f:bf:f6:d2:dc:5b:6b:39:d7:d6:8e:58:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:F7:3A:F1:66:0B:3D:52:3C:94:EA:5C:5E:BA:ED:55:72:2B:79
X509v3 Authority Key Identifier:
keyid:9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:f8:2d:17:18:db:62:03:09:55:10:b5:42:31:cd:fa:57:
35:6a:09:4f:6e:31:ca:26:c9:eb:eb:de:00:79:14:20:06:46:
45:c8:28:c8:ed:73:f7:ed:50:1e:23:9f:09:b2:11:67:ce:97:
b7:d2:33:40:26:a5:a0:e4:d3:19:88:30:d6:8f:3c:e0:8e:cb:
6c:6b:35:e8:a2:84:48:ac:69:b9:53:29:a5:43:8c:06:6c:59:
e2:47:11:01:68:cd:2f:84:22:e4:82:1b:ed:5d:89:2f:65:7a:
75:a4:2f:a3:a0:d0:9b:4b:14:a6:c1:db:4d:54:ae:60:ba:a9:
a5:22:e5:23:0e:a9:7e:72:4c:6a:0d:4b:59:3e:23:37:6c:8f:
91:d1:b8:77:f9:a9:6f:2f:06:44:24:31:83:4d:5e:38:1a:c0:
e4:e3:e9:c5:b6:ca:74:3f:3f:cc:44:f0:d1:0e:4b:a9:d4:45:
18:de:b0:48:91:95:47:4b:42:a1:31:eb:50:3f:1b:3c:1f:a3:
85:ac:5c:69:a0:f6:af:d1:cb:61:03:84:06:58:0e:aa:fe:d2:
1b:ba:17:5d:02:5f:17:02:52:f0:7d:6b:ed:d0:4d:c2:51:ae:
31:e4:fe:6f:9d:4e:21:dd:18:01:6d:88:2d:3a:24:fa:9b:61:
db:8e:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:09 2025 by rpki-client