Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
File: v2DdGbZCZae1tFPwFbi4pgtCmM8.mft (raw, json)
Hash identifier: XBJHGbVrWne8ugYJ5f9Hcy4TW0OPy4eGVry+coR8TmQ=
Subject key identifier: 20:BC:F6:DD:8E:74:D8:3E:49:DE:4C:FB:62:08:F9:7F:10:5B:C4:EB
Authority key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Certificate issuer: /CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Certificate serial: 0169
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
Manifest number: 0164
Signing time: Thu 03 Apr 2025 03:01:54 +0000
Manifest this update: Thu 03 Apr 2025 03:01:54 +0000
Manifest next update: Sat 05 Apr 2025 03:01:54 +0000
Files and hashes: 1: v2DdGbZCZae1tFPwFbi4pgtCmM8.crl (hash: OYjq52QpnD0Wk6Z69Q5/rVm2QuTcgO6gCDEtWwQ9+Mo=)
2: 641ADEEC093411EFBC62A76A017001B1.roa (hash: 7RofrytqiAZkC8olZeL24JXarKRiHHpszoxgshTtLtE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B86D4AF
Validity
Not Before: Apr 3 03:01:54 2025 GMT
Not After : Apr 5 03:01:54 2025 GMT
Subject: CN=67edfa22-e041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:9b:51:fc:66:52:6d:72:1d:22:02:7c:7d:
bb:1d:63:9a:88:d8:ba:51:b9:84:79:44:c8:40:22:
f1:8a:78:b4:2c:ef:1d:46:0f:78:82:0e:9e:95:14:
8d:f0:87:88:bf:f8:76:69:02:32:bc:4c:af:f4:2b:
fc:1f:4b:bd:3b:9e:11:91:46:37:6f:79:79:73:36:
68:1a:f1:4e:71:e8:3f:22:5f:7e:84:39:b0:20:e5:
3d:29:65:e8:20:3f:1d:e3:26:27:5e:40:9d:36:0a:
99:bb:d1:38:d0:91:2e:87:d7:61:6c:5e:04:36:d0:
18:15:e5:fd:16:e5:5f:6e:e9:c7:71:ac:36:a5:eb:
f5:4e:46:73:90:e2:05:10:ba:2a:16:c1:de:af:55:
38:a9:f4:5e:11:0d:19:42:17:74:f9:69:da:6b:51:
c8:1c:a2:0f:76:bc:97:7d:d7:6a:8e:05:10:a7:0d:
30:aa:9a:a7:81:cf:db:62:80:95:cf:f1:be:29:5b:
81:f9:d5:d8:08:8f:e7:c2:96:8a:6e:09:49:bf:cc:
a5:fd:6d:4c:79:09:22:1d:8e:90:5c:96:d0:fb:33:
18:b9:e8:76:c8:f5:aa:4e:63:60:2f:20:bf:d2:89:
43:b7:69:34:c7:bd:6f:e0:b4:9b:84:e7:c2:b2:68:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BC:F6:DD:8E:74:D8:3E:49:DE:4C:FB:62:08:F9:7F:10:5B:C4:EB
X509v3 Authority Key Identifier:
keyid:BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:80:c4:b9:81:2c:17:5c:4e:23:5f:90:52:79:da:57:0a:38:
00:aa:82:29:82:94:b3:c7:2a:9d:59:cf:54:41:75:54:f6:8b:
11:f1:43:08:eb:07:91:2a:b8:99:72:fa:3a:2e:b2:54:83:f9:
e0:8a:a5:74:09:88:7c:d3:40:f1:8f:fc:03:c8:42:48:e1:67:
53:45:67:84:d7:ed:61:67:23:71:95:e5:79:93:d2:5d:6d:d9:
46:a0:86:b9:1f:f0:f3:e3:6e:30:45:78:cc:37:9d:fa:a4:76:
b5:c2:1c:97:29:43:b0:cc:f4:d9:c3:64:e1:9d:a3:b3:f4:71:
c1:d7:e2:39:fd:be:ec:c4:67:d4:95:e8:6c:c0:c0:a7:17:19:
3e:b9:7e:e6:f7:87:6c:d2:08:b5:e2:31:da:86:ec:ed:07:6d:
d6:08:3a:d2:29:f2:ab:c7:45:9a:78:50:9b:e2:70:55:36:96:
b6:96:e7:40:b4:de:f7:17:a2:40:6b:aa:a5:2d:8d:96:19:37:
61:7e:e3:4d:75:8b:60:68:67:e6:8c:d9:f7:8c:db:bc:c9:38:
92:d6:14:09:4d:48:7d:64:a1:66:bb:64:12:ea:be:37:19:b7:
5c:e9:3d:15:ae:c8:89:b5:39:a0:df:08:17:b4:04:b5:cd:97:
a5:e3:2a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:40:55 2025 by rpki-client