Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File: ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier: QgC3+8phptvswOet83JO+4cdbLH3aRMR3FTBjOhtFxY=
Subject key identifier: A8:52:53:E2:80:3E:23:57:14:F6:30:62:E4:2F:18:D0:D0:57:14:16
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer: /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial: 03DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number: 03DD
Signing time: Sun 16 Feb 2025 02:08:58 +0000
Manifest this update: Sun 16 Feb 2025 02:08:57 +0000
Manifest next update: Tue 18 Feb 2025 02:08:57 +0000
Files and hashes: 1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: CD1ZskgocXj/tCErm08+xazam+eYbCclU17oASC2qrs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4E2CAF
Validity
Not Before: Feb 16 02:08:57 2025 GMT
Not After : Feb 18 02:08:57 2025 GMT
Subject: CN=67b148ba-48df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:fd:c0:a4:b6:29:33:1c:65:50:6f:1e:44:
01:c3:d3:80:8b:95:29:f0:9b:eb:2f:3f:dc:1a:e3:
32:a5:da:52:ef:49:b5:58:d4:6e:f7:c8:29:2e:7a:
e6:32:f0:96:5d:10:78:a6:4a:d8:08:06:5b:dc:a5:
7e:dc:3b:b7:df:3d:26:25:56:77:17:47:55:4b:f4:
91:48:70:9b:17:1b:be:7f:07:17:66:a3:f9:aa:c4:
e9:73:ec:b3:07:6d:a2:a8:c4:3b:79:0d:3b:19:34:
ab:26:2b:7b:45:13:25:11:33:ba:ab:c6:72:a2:a8:
21:36:df:ae:e1:04:2a:f1:97:00:8d:48:28:e7:e7:
47:f8:7a:f7:09:5f:de:97:46:61:6b:ba:c2:bd:51:
47:d8:d1:b1:2e:c8:b7:09:8a:c5:3b:4c:32:12:19:
75:2b:83:4c:a5:46:0d:97:1c:85:7e:80:6e:3f:df:
af:a7:cf:53:52:8a:68:ef:c7:64:cc:0d:5d:7f:29:
5f:8f:70:f6:29:06:74:9a:99:2e:53:5f:c1:d1:0b:
49:a7:21:4c:78:4f:a7:82:0c:40:6c:d9:06:bd:df:
79:44:eb:53:b5:df:e8:83:8a:01:70:28:0d:d4:d5:
d3:ed:af:32:c3:76:d0:28:6d:9a:65:86:c1:b5:a3:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:53:E2:80:3E:23:57:14:F6:30:62:E4:2F:18:D0:D0:57:14:16
X509v3 Authority Key Identifier:
keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d7:9e:67:fd:a5:cc:a5:de:c3:7d:11:cb:de:d7:41:b8:17:
94:e3:57:88:c5:e4:ed:ba:ea:63:1b:4b:9b:01:83:f4:7b:fc:
a9:1e:8b:18:47:55:4f:60:88:b9:90:27:bd:9c:24:1b:75:b6:
b4:61:4c:03:af:fe:cf:76:44:a3:ad:0e:be:33:03:83:38:66:
ec:c4:1f:df:c6:6e:18:56:87:92:56:2a:9d:b4:b9:92:dd:65:
33:d1:82:3c:42:cd:54:90:46:1f:ed:a2:8a:bb:72:22:4e:35:
5e:e5:2b:e2:14:5a:ca:7c:d5:f2:c5:c3:68:18:f7:d1:1e:47:
5d:73:5b:ee:d1:86:70:ca:91:5b:0f:c6:03:d9:7c:f1:04:c8:
12:fb:f7:ff:d3:0f:d1:1a:19:f0:16:85:9f:48:01:5a:4e:2d:
5c:78:cc:4d:0c:25:28:1f:9e:7f:a0:b6:f4:66:5a:60:87:ab:
9a:c2:af:5e:c5:47:43:54:e4:ab:7e:f1:ad:c6:fe:49:72:6b:
e7:0c:f5:d0:c8:27:f0:48:08:8c:b9:2d:91:d7:f5:06:09:b5:
53:53:1b:63:bf:09:84:66:ad:91:74:48:c3:98:33:15:9d:b6:
87:fd:71:1c:eb:44:95:64:3f:4a:7e:26:02:fc:a7:17:73:ee:
ca:c7:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:27 2025 by rpki-client