Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
File: iyKehHwjMl1Mwm9Ajx0z5VennW0.mft (raw, json)
Hash identifier: 2g4YYdPTGeFF4eM0zdXvFDpRUm589H5iHBKOKp5KNMY=
Subject key identifier: 36:4C:D4:EC:D7:C6:D1:A4:2E:44:49:E5:97:76:AF:2F:53:6E:28:98
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Certificate issuer: /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial: 03C5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
Manifest number: 03C0
Signing time: Thu 03 Apr 2025 02:12:47 +0000
Manifest this update: Thu 03 Apr 2025 02:12:47 +0000
Manifest next update: Sat 05 Apr 2025 02:12:47 +0000
Files and hashes: 1: iyKehHwjMl1Mwm9Ajx0z5VennW0.crl (hash: eXQHzZhl/RX/qSlhICUHmaqNuoHUXjKaSW9jXOKt5eY=)
2: C4EF296EF5CC11EF948FCB78762E951A.roa (hash: 6EhZAZOfI7/G45J7guhw2ognpwwtVmscJX9jxlBfd4k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 965 (0x3c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3E3DAF
Validity
Not Before: Apr 3 02:12:47 2025 GMT
Not After : Apr 5 02:12:47 2025 GMT
Subject: CN=67edee9f-ce9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:21:3e:c8:a9:b8:5f:cd:6f:44:7e:4b:9c:
65:52:2f:e0:3b:aa:ca:2b:5e:97:6c:81:87:66:a1:
80:32:29:db:6b:3c:91:ae:c7:63:76:17:95:41:50:
a4:1f:c5:ad:69:15:e4:dd:55:dc:69:00:54:39:1d:
05:f8:3c:d3:6e:5d:86:11:03:e3:a0:2a:da:7f:66:
14:20:74:46:08:88:5f:a2:88:fa:37:1d:cf:4e:7f:
63:7e:94:e5:7f:5e:ec:b4:57:f0:5f:b2:c1:4c:8e:
6e:4c:be:cb:e2:99:47:bb:97:c2:db:8f:ff:7b:ae:
10:0e:41:25:97:02:b1:11:d9:da:15:7b:0d:78:6d:
13:de:32:08:a0:94:6e:0d:23:c7:86:a7:d0:0a:e1:
2d:52:ec:f6:6b:d9:5b:f6:d5:79:61:85:e7:cf:e2:
25:a0:dc:90:c5:99:87:b1:c7:e1:c5:4c:e5:26:2f:
17:40:4b:d0:18:bb:4e:ca:c9:1f:fd:32:98:7e:be:
a8:09:cd:e3:07:43:8d:a9:7d:b6:06:b8:09:72:5e:
a5:bb:a4:75:59:f3:ef:e8:48:9b:ee:ef:3c:df:c8:
69:fe:39:7e:42:d7:d3:f3:c7:d3:3a:ff:11:e5:9f:
93:4d:82:f6:64:d5:6f:93:53:43:80:6e:73:f3:da:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4C:D4:EC:D7:C6:D1:A4:2E:44:49:E5:97:76:AF:2F:53:6E:28:98
X509v3 Authority Key Identifier:
keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:66:9d:c1:16:6d:e1:36:1e:ce:f8:99:72:b3:1e:5c:ec:f7:
c0:d9:a7:a4:2e:ce:35:da:c7:1c:09:16:bb:57:a1:35:90:af:
ca:15:b1:d5:34:e3:7c:c0:61:3d:a7:3e:6b:35:30:25:e1:3a:
9b:fd:d7:f5:b5:8a:06:f6:ec:b5:cd:f5:22:bc:5b:9d:c7:87:
dd:37:97:bb:c5:4a:4e:a0:9b:12:42:1f:56:0b:0b:d4:e3:e7:
ac:b1:8b:04:cf:fd:4b:87:ca:1b:6d:cd:29:fe:cb:2d:3f:6b:
dd:af:67:53:66:ad:38:fd:b7:82:6f:76:e7:bc:55:c2:6d:6a:
f9:8f:84:d1:00:a9:3d:9e:74:77:82:13:35:f2:06:47:12:78:
52:7a:56:52:ad:62:13:bb:9e:ff:0d:9c:95:56:ff:d7:fa:95:
da:e0:2b:57:8b:d5:25:f6:ad:1c:f4:0d:84:41:9f:4e:41:0e:
d5:2b:95:a9:e7:d5:db:c6:48:c3:4d:27:2a:61:3a:f3:07:e8:
d3:6f:4c:fe:40:d3:bc:69:a4:fe:54:a2:01:7c:d3:b1:21:a5:
96:cd:29:58:d6:dc:81:16:22:f7:cc:a6:99:68:7a:42:a8:e3:
70:cf:e7:42:8e:55:f7:f7:a3:65:69:bd:24:3d:c9:ce:fa:af:
1f:4a:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:58 2025 by rpki-client