Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
File: 5U9enM9-t26XkK6VM_5KhMiy_Lw.mft (raw, json)
Hash identifier: TDrPRvSetm+LbxIrb2ajG1cyaD+crmASemxcyfdPzEc=
Subject key identifier: 9C:6E:4F:A1:7F:12:38:20:EB:9A:1C:30:41:CB:72:23:D1:88:61:9A
Authority key identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC
Certificate issuer: /CN=F36CACCCAF/serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
Certificate serial: DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
Manifest number: DB
Signing time: Thu 03 Apr 2025 03:12:38 +0000
Manifest this update: Thu 03 Apr 2025 03:12:38 +0000
Manifest next update: Sat 05 Apr 2025 03:12:38 +0000
Files and hashes: 1: 5U9enM9-t26XkK6VM_5KhMiy_Lw.crl (hash: TVRNxZzs0uwWjceLajLogaF3bUgoi02TqhK7j8AI9Xs=)
2: 690AD7B26C3111EF81B16842762E951A.roa (hash: rHzjxo/eO2fqIELNKfmN3/VjzzeCb8hHN9sTo2VjXI0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CACCCAF
Validity
Not Before: Apr 3 03:12:38 2025 GMT
Not After : Apr 5 03:12:38 2025 GMT
Subject: CN=67edfca6-b070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:f3:7a:8c:21:f1:73:67:3f:75:e3:7b:85:
6c:c4:4c:73:61:b3:f9:8b:6f:1e:2a:e9:f0:97:0c:
80:a9:46:25:8a:fa:7a:e4:86:68:70:35:fe:88:65:
a2:ef:b9:63:54:8a:8c:f7:b4:ca:46:32:19:36:0f:
81:63:c3:f5:3d:f6:bb:81:ea:6a:96:20:c6:f3:60:
28:b3:08:f5:cb:6c:08:99:f5:3f:f4:81:4d:0f:b8:
3a:d5:8e:a9:b1:70:bc:0d:ee:34:59:8b:2a:bd:a1:
98:79:a3:47:e1:6e:90:b6:b3:c9:ae:34:24:58:dd:
55:73:99:35:20:79:ec:45:ba:cf:c4:d4:25:12:9d:
d3:25:0e:bd:c5:4a:b4:e3:7c:da:fc:75:b6:6b:e7:
64:69:d7:b0:55:ca:bd:b6:27:1c:93:18:79:1d:8c:
f1:a2:82:26:04:31:a5:09:4f:1a:b9:4a:8d:17:31:
5f:1d:a4:ec:85:4f:16:0e:f9:7f:1e:96:6d:8e:9b:
34:09:0f:44:07:74:cc:b7:1a:40:9f:e4:aa:81:a6:
5c:1f:ad:65:7d:ef:b7:de:21:ff:27:f5:6c:73:3b:
c7:c8:27:e9:74:7c:24:dd:c0:13:11:bb:d8:49:51:
10:6d:4b:9c:0d:51:de:63:ac:5b:8b:39:4c:4a:30:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:4F:A1:7F:12:38:20:EB:9A:1C:30:41:CB:72:23:D1:88:61:9A
X509v3 Authority Key Identifier:
keyid:E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:4a:d7:f6:ad:c6:67:16:a2:c9:f4:15:54:ee:1d:ea:a3:5f:
69:fd:b9:cb:76:2f:1d:de:2d:ad:c6:1b:69:c2:4c:27:76:a7:
6a:f9:25:d4:39:0a:fd:b7:6c:3e:83:a8:d9:33:4b:6c:8e:31:
7d:f9:99:c6:b5:41:e6:f5:df:1f:1f:8a:70:35:58:3c:7d:38:
19:f2:36:2d:12:e8:40:00:4a:2f:98:f5:86:e8:34:18:f6:7a:
d4:ef:12:98:15:42:bb:90:22:f4:e1:80:fc:6b:c9:48:18:22:
67:6c:dd:78:22:55:19:3f:b1:9a:e4:8a:5b:67:63:8d:28:10:
db:a1:a7:6e:9f:e1:b5:1a:11:b2:ea:2f:ea:59:a1:15:f4:ad:
a8:04:8b:fc:e9:04:1e:be:aa:ce:0e:dc:59:14:94:cd:ac:ea:
4d:82:38:cd:bb:3a:64:25:bc:2a:53:c0:ae:2d:5a:1f:ba:d0:
60:18:87:50:2e:d0:e4:f9:75:df:2f:fc:a3:02:b7:2d:78:c4:
e0:75:9e:f9:d5:43:9e:5d:1b:f6:b8:cb:11:a6:33:3b:e4:8f:
d5:10:f2:9f:cb:05:68:d0:43:5a:6a:11:d8:5c:7b:c4:f3:d8:
f2:46:bf:06:bd:5a:a2:9f:32:0d:d5:fc:75:2b:ff:52:2f:62:
05:da:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:57 2025 by rpki-client