Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File: CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier: feLwTZxzci/U41+mX5gV7/JC0X+xaAhiONzB58CN264=
Subject key identifier: 4C:0F:67:0C:B3:C3:B2:C8:5C:BE:35:8A:C9:B3:76:8F:D0:08:3F:61
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer: /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial: 0388
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number: 0387
Signing time: Thu 03 Apr 2025 02:15:34 +0000
Manifest this update: Thu 03 Apr 2025 02:15:33 +0000
Manifest next update: Sat 05 Apr 2025 02:15:33 +0000
Files and hashes: 1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: V87aTZKKwevPOIKZc+zdgMEwQJ/mppUQoQdhXSkYfF8=)
2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA64DAF
Validity
Not Before: Apr 3 02:15:33 2025 GMT
Not After : Apr 5 02:15:33 2025 GMT
Subject: CN=67edef46-2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:9b:ca:e6:73:58:f3:bf:95:09:c5:bb:aa:
7a:ce:bb:93:ee:b0:60:5c:e7:43:40:85:b0:71:c3:
ca:b7:e4:34:1b:64:da:37:0a:01:8d:f3:b1:c5:90:
c0:2b:ff:f2:48:cc:6d:e2:49:bf:b3:62:00:29:a7:
00:93:20:65:b1:31:26:f0:ee:d2:95:22:b5:43:55:
a6:a9:85:d4:b5:f5:a4:04:ee:b6:0f:ea:2c:7c:be:
ea:7f:6c:b4:08:c8:b6:fb:fd:bb:0c:45:30:7a:6d:
25:c8:33:46:ba:c2:90:ef:7a:65:db:b7:52:07:07:
c8:b7:7f:a9:a0:b1:ad:94:2d:2a:6e:7c:9a:ce:62:
38:86:f3:9a:20:1b:8d:7b:92:c7:75:e4:2c:f5:40:
47:d4:30:38:98:3e:d1:49:bc:b8:f0:51:89:b5:e7:
a3:d9:52:73:8a:e5:60:7f:c9:cf:59:f8:18:aa:b2:
f6:18:42:e0:b8:42:34:88:e0:d3:2e:82:66:7f:5b:
6c:ee:29:0d:50:d0:32:87:53:0e:d5:0b:58:cd:f3:
ad:a1:d0:1f:8e:50:e9:dc:96:ea:72:76:b7:12:20:
a3:07:84:c8:7d:f9:b8:38:7d:02:ca:7d:b0:ab:0d:
d1:fa:61:f6:72:4a:cd:d5:58:67:8e:67:ae:95:3d:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:67:0C:B3:C3:B2:C8:5C:BE:35:8A:C9:B3:76:8F:D0:08:3F:61
X509v3 Authority Key Identifier:
keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2b:58:d4:dd:c3:0b:d9:79:5c:1b:df:75:df:3f:4e:3b:63:
fb:20:59:41:3d:4a:2b:87:90:7d:9f:b1:62:9d:63:92:a8:ba:
cd:05:c6:11:14:14:72:1b:b1:b6:61:d6:88:68:38:1f:2c:68:
0d:8c:be:31:ca:b6:26:7b:65:e9:53:48:10:22:77:40:8b:6f:
cc:e4:13:8b:f6:b7:c5:06:d6:c8:5b:ba:12:5b:6c:62:db:6e:
7c:75:03:7b:77:aa:26:ce:1c:d8:4f:a4:41:fe:aa:05:88:4d:
65:f1:8f:ad:d8:a0:c3:b3:08:6a:d3:cb:b8:50:bb:5f:31:f6:
6e:0f:bf:dc:cd:0b:37:2f:d3:c6:1f:76:cc:6a:5f:29:5f:ca:
69:f3:f5:b2:d4:05:88:4b:da:f9:03:f9:04:3a:b1:d1:46:40:
66:71:01:e8:cb:6d:74:d5:dd:65:87:d8:73:c9:14:db:eb:78:
b2:da:0a:19:b2:5b:07:0d:11:2e:7c:ad:32:14:e3:53:36:b3:
b1:93:13:f9:62:7d:4a:c8:1e:2c:73:51:14:dc:2e:74:9b:74:
79:d6:79:e1:ef:0f:7f:50:05:70:7d:72:a0:e6:d7:07:59:49:
2a:68:b0:87:40:4a:f7:24:d4:54:0e:bd:6e:40:08:f8:1a:0a:
04:e9:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:18 2025 by rpki-client