Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
File: 764LPX24gpNjrt_AWoTtudQExzk.mft (raw, json)
Hash identifier: /bLWxOKlgJCAKFdAvejRyktv7NwvsOLf0IHHlfapoCM=
Subject key identifier: 28:74:06:B7:95:7D:4D:AE:07:CF:98:0E:5F:57:E9:BB:1A:FD:AE:1A
Authority key identifier: EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
Certificate issuer: /CN=F36BA482AF/serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
Certificate serial: D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
Manifest number: D0
Signing time: Sun 16 Feb 2025 03:09:19 +0000
Manifest this update: Sun 16 Feb 2025 03:09:18 +0000
Manifest next update: Tue 18 Feb 2025 03:09:18 +0000
Files and hashes: 1: 764LPX24gpNjrt_AWoTtudQExzk.crl (hash: oYR/98vkTMeMF4rp2IGgVf/T6CtEzAFsrb1HF5WY6sE=)
2: B03C009254C711EF97374F66762E951A.roa (hash: tQA4avqeaHyVWCMp4VsdVygCnrOTJ/BZbTYkUrbytks=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA482AF
Validity
Not Before: Feb 16 03:09:18 2025 GMT
Not After : Feb 18 03:09:18 2025 GMT
Subject: CN=67b156df-9fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:7c:38:73:87:10:c3:d2:9a:fa:1e:3b:23:
20:b5:ba:1e:3f:30:21:fe:88:4c:e6:eb:29:9e:57:
a4:46:90:25:6b:60:f1:69:3c:d0:42:80:e7:cd:0c:
a2:51:fc:c9:a3:c8:91:a9:28:c8:04:1c:2c:87:96:
64:a5:9c:8a:4e:0a:81:18:fa:f7:ac:bf:55:9e:58:
8e:52:9e:a6:76:1b:95:02:16:9e:2f:3f:80:90:aa:
b1:a3:fc:fc:b4:06:5b:0e:22:d0:09:4c:1b:b7:e4:
4b:97:7a:b6:36:78:1d:62:47:da:08:3a:bd:e0:e0:
d4:68:d2:0b:41:17:0b:9f:33:bb:69:9c:d5:ee:52:
03:03:7c:bf:59:4b:a1:a0:2e:b4:66:8b:3a:30:68:
9f:1d:8e:43:80:83:3e:44:d6:68:b1:18:b0:81:bc:
00:45:1e:6f:12:d2:21:5d:34:26:2f:a7:9b:ed:6f:
a9:bc:29:81:14:01:0e:22:8a:c5:c3:b5:59:d3:0f:
27:74:b5:67:6c:f4:49:15:b8:63:e0:87:3d:0e:e6:
40:28:bc:bc:e4:80:75:a5:88:00:d7:43:84:f1:95:
10:85:95:ee:a9:12:4d:7d:b5:10:bd:e2:22:df:a7:
a7:28:b9:cf:80:bf:16:ea:33:47:f9:73:df:b1:87:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:06:B7:95:7D:4D:AE:07:CF:98:0E:5F:57:E9:BB:1A:FD:AE:1A
X509v3 Authority Key Identifier:
keyid:EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:f0:74:c9:ee:a0:1d:be:7f:e5:7a:4e:5e:c5:c5:99:18:
5f:9c:7a:f0:77:00:0e:b6:39:7a:69:27:16:fe:82:c8:e9:2a:
4b:d3:41:6a:21:12:39:92:55:c3:ac:8d:de:bb:30:76:12:d6:
00:5b:37:e2:72:18:57:a6:c6:13:8d:7e:a0:ba:6b:31:d2:d6:
08:fd:d7:9b:30:e1:e0:e4:cd:57:a5:de:61:43:13:83:85:d2:
db:fb:9e:34:13:b1:75:1b:ac:93:68:cf:66:2c:5f:b4:60:ed:
e8:c6:6e:7b:ef:a2:c2:58:8d:84:98:54:35:f9:05:a5:2f:30:
69:b2:26:3a:5d:72:9f:8a:9c:f5:44:30:ab:e1:2d:19:e8:d2:
b9:75:ae:95:dd:32:b7:81:3e:7a:c2:19:6f:5e:c0:17:e8:7c:
f5:3f:4a:ba:7d:9c:c6:cd:d5:c1:e4:26:a2:a8:7f:15:29:31:
c0:4e:77:82:0e:94:25:02:e6:22:75:ee:43:06:ac:5c:6f:0a:
c5:2c:1a:88:a8:1e:6d:f8:8b:e6:b0:9f:08:92:29:cf:ee:b0:
ff:7f:14:27:34:5d:03:7a:4d:b0:81:ec:2a:fa:fe:f9:99:9b:
16:08:69:f9:75:3f:d1:81:0c:df:94:ba:82:31:fc:42:e0:05:
41:2d:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:57 2025 by rpki-client