Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File: bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier: L7vjlzzK3uuejZystUIMwnWAFeYuCQQ9b+oi9ALu77w=
Subject key identifier: F2:FB:F4:36:48:4C:5D:CA:DC:A6:E4:75:C0:CA:3A:71:5D:73:C7:53
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer: /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial: 0539
Authority info access: rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number: 0537
Signing time: Sun 16 Feb 2025 01:49:52 +0000
Manifest this update: Sun 16 Feb 2025 01:49:52 +0000
Manifest next update: Tue 18 Feb 2025 01:49:52 +0000
Files and hashes: 1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: /LZjSaPXQ3uCXbl3EFB+4kBC+3GMG22RoOLSPx4QfEM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337 (0x539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C95F1AR
Validity
Not Before: Feb 16 01:49:52 2025 GMT
Not After : Feb 18 01:49:52 2025 GMT
Subject: CN=67b14440-e23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:de:db:fe:bd:3e:76:a9:66:ec:36:42:bc:
39:b4:b9:9f:12:b6:18:dd:e8:4b:51:9f:d7:68:70:
2e:b0:2d:f2:eb:63:93:bf:d8:66:a4:82:74:56:d3:
87:50:e0:15:9c:8a:5b:1a:23:af:9a:c1:90:49:98:
8c:59:96:02:51:62:04:62:ab:a0:b5:87:2c:91:fa:
a7:c4:8e:92:81:79:b8:dc:5a:d0:dd:14:3d:77:e8:
4a:32:85:6c:30:46:5a:41:68:c3:65:81:54:e3:3b:
8f:ee:c0:f1:42:d9:5c:58:79:ed:32:71:c9:01:d2:
35:ff:16:13:a0:12:07:59:3c:a4:e7:bf:e8:11:17:
d8:b3:90:01:94:ba:f1:46:d8:0b:e4:e9:e6:cc:9b:
81:ae:8b:07:b1:c5:cf:49:76:4b:d5:4e:18:95:40:
f0:05:a5:d1:e2:15:90:8f:f5:ac:d7:5f:f5:46:ce:
35:c1:2a:fb:ec:6a:74:a4:10:36:93:8b:a8:6d:07:
07:6c:e0:84:a1:a3:30:4c:ac:36:b6:c7:ba:e2:39:
98:d4:fa:17:07:eb:b8:54:f0:ad:7d:af:c5:5d:32:
2a:63:fd:c0:55:74:a1:ad:e5:b7:3c:7e:0e:bf:d1:
4b:ac:a7:1f:43:62:95:c7:92:7a:c4:2c:75:1f:4c:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:F4:36:48:4C:5D:CA:DC:A6:E4:75:C0:CA:3A:71:5D:73:C7:53
X509v3 Authority Key Identifier:
keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:de:10:92:5f:6c:27:07:69:26:28:c1:41:20:0e:c9:30:f3:
f5:d1:7f:3a:57:4f:9f:1e:9e:f4:23:1e:9a:7b:e9:4d:7a:39:
34:ba:c1:c9:ef:83:64:13:9d:52:b0:58:0e:95:96:2f:ca:0b:
24:a3:95:f9:dd:ed:d1:27:b1:e4:18:22:ee:44:bd:f0:80:54:
ea:48:35:c5:65:1a:10:91:04:41:08:4d:79:8b:85:fe:5b:d1:
5d:7b:4e:28:23:17:f2:f7:c4:0c:96:ea:26:ce:bf:9d:e7:b6:
af:26:08:0c:3d:26:f4:ab:78:36:ad:98:82:b8:4b:0f:75:8b:
32:56:15:f0:7b:dd:bc:4d:cf:2d:74:5f:85:61:2c:8a:9b:f0:
1c:62:b9:a3:59:41:de:9d:89:5d:9d:b4:cb:40:cf:fb:dd:9a:
60:f7:f8:64:b5:3d:3e:37:00:07:00:1d:08:cf:27:83:0b:3f:
65:b7:94:e7:aa:0b:7b:6a:7e:8d:d6:b8:5a:93:d3:20:99:be:
47:51:8a:68:b0:89:49:90:71:f3:41:61:9d:de:e1:0f:5e:a2:
31:ad:ca:17:5b:c1:f2:19:d5:74:db:3e:09:c0:28:14:bf:42:
b3:ae:71:49:20:82:8d:de:0b:58:4b:17:84:89:fd:8e:ba:5b:
43:9b:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:52 2025 by rpki-client