Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
File: 2dbgTePDYTvOHbKdd8ahOIrEIj0.mft (raw, json)
Hash identifier: ptv468wa/rmUxUeGQmApUVskl7NsUhXpoiADTQxHrG4=
Subject key identifier: 71:78:19:29:16:19:62:42:16:CD:D1:F7:0D:B1:7E:41:E8:6E:5E:CF
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Certificate issuer: /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial: 0223
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
Manifest number: 0220
Signing time: Thu 03 Apr 2025 02:42:26 +0000
Manifest this update: Thu 03 Apr 2025 02:42:26 +0000
Manifest next update: Sat 05 Apr 2025 02:42:26 +0000
Files and hashes: 1: 2dbgTePDYTvOHbKdd8ahOIrEIj0.crl (hash: mbU4wYGT+1KMQF5fstriVET4ZUnMT7rb6K02Qffi9H4=)
2: B56502AE36B211EFAA421B5E762E951A.roa (hash: pW3bMqz4FHfQnjso9ES+xBDe7OZbTMlRNhZcJvVAqsk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C1E88AF
Validity
Not Before: Apr 3 02:42:26 2025 GMT
Not After : Apr 5 02:42:26 2025 GMT
Subject: CN=67edf592-1168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bf:67:b2:f5:aa:d8:33:ec:3e:d2:ba:53:c1:
6a:24:30:c5:d0:da:c8:d3:f3:9b:99:09:98:44:ef:
b6:31:ec:11:6b:7b:35:0b:35:da:a5:ba:4e:7d:22:
b4:40:1a:fb:53:b8:21:eb:24:5f:25:6b:4f:94:2a:
d3:d1:23:06:df:13:f7:bf:16:c9:83:2e:a0:ef:38:
d0:08:0c:7b:0f:1e:4b:c4:49:bf:24:31:4b:41:95:
13:e4:ec:6a:e8:a0:8b:e1:1b:ab:10:ad:7d:60:53:
9c:5a:12:bf:b0:91:90:76:65:67:c3:c0:74:8e:a1:
30:6b:7b:5d:ff:2f:21:0a:0c:b5:fc:ec:21:77:a6:
a1:ad:b2:74:4c:9a:c1:cf:fe:86:53:4d:e1:2c:2a:
58:fa:d9:c3:58:85:5e:c7:2c:51:1c:91:dd:00:29:
40:57:70:de:fc:73:a1:6e:6a:c2:62:3c:f4:e5:62:
2c:39:f6:59:d6:1e:d6:3a:9d:9d:27:eb:ea:cf:fd:
f1:3d:33:69:e4:4f:7c:71:e2:d2:59:7c:bf:56:10:
4e:23:1b:36:f3:ca:65:67:55:40:90:2b:e3:3a:7d:
d5:c3:6e:3f:5e:14:f3:f4:02:c0:c4:b5:f6:a5:7c:
bf:f0:7c:2e:79:c9:c2:b9:2e:e4:f1:6e:b3:e6:eb:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:78:19:29:16:19:62:42:16:CD:D1:F7:0D:B1:7E:41:E8:6E:5E:CF
X509v3 Authority Key Identifier:
keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:fa:d4:64:92:53:c1:9f:e5:c3:2d:34:6b:8c:11:86:74:c8:
86:4f:ff:d2:4e:54:8b:83:4b:d8:a7:4e:8d:c9:d9:bf:02:61:
8e:c4:b2:f2:0e:1f:11:75:69:97:f0:e5:ec:38:05:74:d5:a1:
53:aa:54:76:ea:27:28:0b:53:b8:76:d2:e1:ae:2e:60:46:f4:
d8:8c:34:70:95:02:a6:f5:b6:5d:96:86:16:ec:26:0a:c2:e1:
e3:38:73:b8:bf:92:63:82:04:6b:f9:8a:b8:26:a8:1a:60:66:
9d:6c:ee:39:0d:b9:58:b7:89:df:9e:0b:10:fa:03:f0:33:34:
6a:e9:dd:87:c6:0d:54:b0:3e:9b:16:8d:eb:8b:48:8d:2f:34:
00:ef:2f:52:ad:ca:e8:11:f8:cc:16:8a:7d:9a:0b:16:d3:81:
c1:c9:bb:17:df:42:e7:23:f3:15:fe:72:1a:d6:48:5f:34:4f:
8e:60:22:97:78:27:8c:f2:bd:9d:fa:63:cb:5f:f2:5f:be:3c:
3e:ec:de:b9:1c:0a:43:fa:e1:b1:f9:03:ae:36:85:da:87:63:
bb:10:78:b8:ec:2e:e5:9e:24:1c:83:7f:20:e8:5c:f5:73:a0:
55:f6:ca:83:07:a6:ee:af:11:7a:a8:f5:06:8f:14:ce:ba:de:
84:a2:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:09 2025 by rpki-client