Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
File: m4nQTrnUft-_pgddFSb5yb_koPU.mft (raw, json)
Hash identifier: fCbys+8EupDSqjK4eT3GpHM43ogvuah7X7/+dqSskE0=
Subject key identifier: 9B:17:4A:4F:01:F7:62:29:B7:82:6B:C3:18:EC:FA:FB:A2:38:20:E7
Authority key identifier: 9B:89:D0:4E:B9:D4:7E:DF:BF:A6:07:5D:15:26:F9:C9:BF:E4:A0:F5
Certificate issuer: /CN=F36C94E7AF/serialNumber=9B89D04EB9D47EDFBFA6075D1526F9C9BFE4A0F5
Certificate serial: 0137
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
Manifest number: 0135
Signing time: Thu 03 Apr 2025 03:04:10 +0000
Manifest this update: Thu 03 Apr 2025 03:04:09 +0000
Manifest next update: Sat 05 Apr 2025 03:04:09 +0000
Files and hashes: 1: m4nQTrnUft-_pgddFSb5yb_koPU.crl (hash: C3Sd102MIX9YEeQZTff90oqfkqHP473C+dKD4YoDu1k=)
2: 704926D8280111EF84F6804E7DDC24C2.roa (hash: 3vt49i2b05v3GXaZFK4O6BAWjRmYDlAAsj6Uqb28tW0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C94E7AF
Validity
Not Before: Apr 3 03:04:09 2025 GMT
Not After : Apr 5 03:04:09 2025 GMT
Subject: CN=67edfaaa-e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:17:92:42:28:b1:6a:f4:10:24:6f:4a:29:9e:
9c:b6:d6:f6:0a:90:b1:52:ca:ea:8d:be:d9:c1:cd:
79:8d:17:9b:42:34:de:32:95:be:f3:66:93:f6:b3:
ff:a4:99:fe:51:72:27:d3:4f:53:3f:75:67:30:b3:
10:69:a0:a4:9a:24:a6:1f:44:47:1e:ea:61:65:df:
79:23:56:ea:55:a3:fc:f1:72:f3:20:a0:7c:a6:fc:
e1:f5:7e:34:18:39:77:29:56:20:ad:74:25:1d:8e:
46:a6:91:3f:a6:af:9b:2b:2a:fe:4e:cd:57:59:65:
c3:33:ab:03:e4:67:08:a8:6c:a1:47:03:30:8c:43:
4b:36:e5:f2:fd:4d:41:47:3b:c1:7a:d1:ae:0b:43:
e6:62:17:87:da:9f:e3:90:c6:c8:cb:b5:2c:c2:cd:
25:3f:4c:d7:7a:4f:eb:f8:96:cd:f0:9a:ea:ab:88:
76:8d:1c:0a:9a:41:cb:78:dc:42:df:8f:92:68:1e:
b3:22:e9:6f:2a:1d:09:5c:92:76:d6:60:ff:b6:f3:
f3:c9:a0:3e:23:51:1a:ad:7d:4b:ec:36:9b:fb:d9:
6a:12:11:4a:ea:af:96:65:c6:53:e0:bd:80:c2:a2:
7d:09:a2:24:6e:4f:65:91:aa:8d:3e:30:ac:fd:56:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:17:4A:4F:01:F7:62:29:B7:82:6B:C3:18:EC:FA:FB:A2:38:20:E7
X509v3 Authority Key Identifier:
keyid:9B:89:D0:4E:B9:D4:7E:DF:BF:A6:07:5D:15:26:F9:C9:BF:E4:A0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a1:28:51:2e:51:24:d6:ab:b9:40:9f:a9:82:0b:36:7f:61:
6e:db:2a:ae:a3:1b:13:a9:68:83:d6:db:61:4a:7e:ad:b7:33:
51:59:74:fc:5b:44:c1:14:59:b8:8b:cc:b2:4c:77:9c:8f:a5:
c6:cf:c9:0d:25:1c:ce:29:84:59:5f:1e:7c:73:42:2c:d9:90:
a3:03:a6:c5:b5:24:d8:f2:1f:e1:60:27:43:ce:42:1b:42:15:
0f:22:24:c3:43:d9:3c:69:81:d1:09:76:fe:9d:90:d9:7f:63:
8a:9b:b4:80:d9:0a:ab:3e:b7:59:ae:99:51:3f:0c:9b:91:01:
c4:f8:b1:99:13:7d:1d:0e:83:c2:c2:ab:f1:58:78:f8:56:8b:
f1:32:46:6c:da:70:e7:e8:02:fe:bd:c4:c1:ba:ef:88:dc:42:
98:ca:28:53:ff:06:d2:b7:79:65:e1:42:77:83:e7:da:eb:30:
fe:7e:2e:53:3f:fa:cd:45:4c:94:11:fd:05:7c:aa:62:b6:77:
29:9a:07:a5:91:26:fa:a2:cf:58:dd:5e:a3:51:87:f0:39:ed:
8f:78:f5:cc:b4:f0:7d:ea:e4:3a:14:bc:f9:11:ce:f4:cf:6c:
2f:7d:1f:9f:6e:29:f5:ed:43:91:33:8d:9f:84:db:ef:65:5c:
ea:0a:75:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:03:42 2025 by rpki-client