Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File: NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier: FAZfrqfNPtDzZrAwAs33XKpeymaB393N5xRhHDOtjbo=
Subject key identifier: C9:F6:AE:2D:9E:99:9F:F7:6B:96:A5:93:F3:C8:37:D7:96:4E:58:B8
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer: /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial: 0689
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number: 0686
Signing time: Thu 03 Apr 2025 01:31:06 +0000
Manifest this update: Thu 03 Apr 2025 01:31:05 +0000
Manifest next update: Sat 05 Apr 2025 01:31:05 +0000
Files and hashes: 1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: 8oLY++IHESZ6Cg5eC+EsYuJ/Mx6E/jBJBOhj8cDg72k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6DD4AF
Validity
Not Before: Apr 3 01:31:05 2025 GMT
Not After : Apr 5 01:31:05 2025 GMT
Subject: CN=67ede4da-37a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:36:16:23:51:16:b7:30:2e:e6:77:6f:da:23:
ee:b9:e5:42:a8:51:97:72:4e:0a:24:fc:13:80:df:
ba:47:6c:a7:d2:f4:33:4d:a9:51:52:8c:30:de:c3:
da:72:d8:d9:c7:c9:c9:8a:5e:7c:d6:43:43:e6:39:
c1:e6:65:e4:a0:56:19:c3:1f:ff:19:ea:b4:6d:f1:
aa:ef:42:42:c9:8f:f4:6c:23:61:fd:b1:59:13:06:
89:18:b9:ba:80:10:36:cd:86:c4:9b:e1:33:7f:78:
fd:fd:ee:1c:41:17:b8:23:3f:38:1f:3f:e2:3e:82:
ae:07:f0:c8:39:89:97:69:e6:66:62:95:e1:32:90:
3d:6b:5d:7e:8a:80:6d:a6:78:77:96:35:04:86:f9:
c1:21:79:04:78:e0:03:90:7d:df:c2:27:d3:65:cb:
94:af:fc:79:0d:5a:ab:65:1f:60:61:75:54:f0:c1:
0d:c6:54:5f:4b:be:b5:1e:95:1b:c0:1e:ec:46:ef:
2c:e7:0c:ee:cd:43:c1:22:d4:65:1d:0a:18:25:12:
e7:ab:a7:a6:b3:7d:0c:22:a0:7b:3f:a8:28:be:d1:
36:21:9f:e8:ce:55:12:6c:9f:67:fb:6f:8e:fe:7a:
81:52:2d:ae:1a:65:6d:56:9e:3f:8c:17:44:9f:25:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:AE:2D:9E:99:9F:F7:6B:96:A5:93:F3:C8:37:D7:96:4E:58:B8
X509v3 Authority Key Identifier:
keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:4a:5a:25:b4:92:3a:41:b4:5c:c6:25:73:a6:44:0c:e1:85:
30:37:2f:51:3d:4f:b8:af:0f:0d:a5:03:b3:ca:43:e8:db:41:
ba:3c:f1:03:87:a1:0d:33:c7:f5:33:b5:ef:5e:f9:b2:1b:dc:
55:fa:52:dd:fc:82:ac:61:cc:a3:42:9a:65:a4:4d:0b:e1:87:
5f:9c:7e:71:6f:de:2e:7a:e8:61:bc:c4:34:3c:a5:de:35:21:
f1:7d:d9:e0:73:e5:18:c6:80:fd:93:9d:b2:13:e4:e1:8b:17:
e9:88:8a:21:e2:f7:bd:fe:97:88:b7:fe:9b:81:e3:45:5c:45:
71:4e:ad:59:68:b0:fd:bb:8a:17:33:c5:76:d9:16:e3:e2:33:
fd:33:e1:a5:dc:4b:f4:de:80:0c:a2:af:c1:ed:2a:08:e3:7a:
c6:25:a1:fe:23:28:c0:69:2b:e8:e3:3c:f1:ce:c6:ca:f6:e4:
b1:6d:e3:8f:00:ba:72:52:1c:0a:0b:0a:70:dc:72:27:c0:e0:
b9:3a:6c:6e:a1:6f:d2:18:ef:60:13:ec:09:46:3f:03:d6:f6:
3a:21:e1:c9:b1:a1:77:e8:cb:67:d7:43:b0:1b:cd:ad:71:3b:
a8:f2:45:b4:8f:87:57:0a:1f:39:4c:ba:1b:0b:3d:bf:31:41:
79:7f:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:07:52 2025 by rpki-client