Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File: hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier: 16EIcPXo1gvGUZb7wmPPWK2MdsONf80E41IDhPhx4M8=
Subject key identifier: 9B:E5:5C:46:3B:2B:BD:DC:88:D1:44:82:F2:55:7C:2C:C8:C2:4A:3D
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer: /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial: 067B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number: 0672
Signing time: Thu 03 Apr 2025 01:32:31 +0000
Manifest this update: Thu 03 Apr 2025 01:32:31 +0000
Manifest next update: Sat 05 Apr 2025 01:32:31 +0000
Files and hashes: 1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: 21KG0SZfrygVTniaBX2VEpq456jAriflCwYpXGOGbig=)
2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD4F1AF
Validity
Not Before: Apr 3 01:32:31 2025 GMT
Not After : Apr 5 01:32:31 2025 GMT
Subject: CN=67ede52f-52d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:30:fe:97:0c:4e:b4:c7:29:24:d5:7e:79:
9d:36:61:6e:59:3a:64:28:ee:18:07:66:22:13:35:
8f:bf:fe:91:23:68:cc:bb:f4:f2:63:6c:45:6b:7d:
95:2f:99:cb:5d:d1:70:c5:0e:7c:be:eb:1e:6b:ad:
e2:9e:19:61:0f:1b:c8:89:4d:ee:e4:e4:ee:2d:64:
93:e2:06:2d:43:e0:98:be:0b:be:97:ba:84:41:ed:
e3:bb:8f:0d:99:27:c5:60:c5:1c:92:7a:84:48:57:
fe:b6:df:47:48:66:3d:96:00:b8:2b:28:12:05:db:
ad:ce:ac:a3:7f:a4:d4:28:d2:95:21:57:f3:b1:eb:
94:4c:64:84:05:df:a0:d9:96:75:18:46:7a:15:16:
f7:21:df:e0:51:ae:de:97:26:c5:2a:4f:a5:b5:e3:
3e:f8:11:67:2a:19:29:39:c2:d7:6f:4c:0d:86:12:
b3:a6:05:98:2e:af:e7:d8:68:7e:20:e1:97:9d:c4:
7b:b4:ea:dc:d0:58:71:94:f5:3b:0e:4a:10:0d:f7:
be:c7:f2:25:0f:5b:7b:5e:64:1b:ca:c2:84:ef:7c:
96:6c:c4:96:6c:c1:5f:4b:d1:37:94:28:ee:1c:d6:
8a:ad:9b:ee:48:d9:47:8e:34:d3:86:3b:55:1c:c8:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:5C:46:3B:2B:BD:DC:88:D1:44:82:F2:55:7C:2C:C8:C2:4A:3D
X509v3 Authority Key Identifier:
keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f8:ca:30:5b:9e:63:bf:de:5e:37:f5:41:61:53:1d:9e:51:
b0:a9:d0:eb:54:05:d9:b5:0b:dd:a9:18:0f:ff:1c:ce:62:07:
19:cc:09:bd:db:6a:9a:5d:e4:cc:32:78:12:e7:75:3c:49:1f:
77:4d:70:a5:f7:3a:03:63:28:0c:4f:8b:b9:a9:c7:e9:2b:28:
fe:08:fb:34:00:9e:7e:a0:9f:aa:4e:f2:6b:47:96:58:8a:5f:
02:e7:f3:fe:37:b8:4e:0d:68:c1:4b:2a:87:78:3c:e9:8a:55:
fb:f8:d7:3a:8a:6f:06:1d:c7:dc:68:92:fd:e4:a0:d6:e4:ea:
aa:50:14:71:ff:58:24:e2:dc:bf:cb:f6:bf:f5:d9:bd:eb:40:
de:19:53:d3:43:47:b3:c4:5d:75:03:4e:11:2d:1a:02:62:8b:
2e:4c:54:6d:ea:eb:66:82:a7:51:4a:4b:6f:a0:4e:49:8d:6c:
7e:23:6d:ec:22:28:4b:e4:c3:50:aa:2d:69:ed:2d:03:4c:a9:
bf:78:e1:60:0a:fc:0b:c5:ed:eb:63:c7:de:7c:ef:02:26:0d:
d8:9a:98:dc:ad:da:8d:72:c5:4d:d0:48:d1:75:85:d4:aa:f9:
31:55:02:96:da:0f:58:ff:1e:78:74:35:29:81:f1:a0:99:b1:
40:f5:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:50:42 2025 by rpki-client