Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
File: YZqjZCy0bzvSy4kctn_92t5nNq4.mft (raw, json)
Hash identifier: ycG2SS5aMKfInDETuSdzu+xv6aeHQ0qcaWbNparGepQ=
Subject key identifier: 4F:FF:25:E7:C0:67:45:2C:40:9C:21:59:B1:A8:1C:DF:DF:F9:4D:00
Authority key identifier: 61:9A:A3:64:2C:B4:6F:3B:D2:CB:89:1C:B6:7F:FD:DA:DE:67:36:AE
Certificate issuer: /CN=F36CC7DDAF/serialNumber=619AA3642CB46F3BD2CB891CB67FFDDADE6736AE
Certificate serial: 0305
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YZqjZCy0bzvSy4kctn_92t5nNq4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
Manifest number: 0304
Signing time: Thu 03 Apr 2025 02:25:09 +0000
Manifest this update: Thu 03 Apr 2025 02:25:08 +0000
Manifest next update: Sat 05 Apr 2025 02:25:08 +0000
Files and hashes: 1: YZqjZCy0bzvSy4kctn_92t5nNq4.crl (hash: JZydEM/piy0PmJmvPuTIqmlCXS0kXvvIHg9KtFqauqc=)
2: 450A6DF0C72311EDBD75E3EFF1222468.roa (hash: SEDWrKPY/D7cGKMD0GoFMLH7bd89SS23zlgiBuTD+qE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
rsync://rpki.afrinic.net/repository/afrinic/YZqjZCy0bzvSy4kctn_92t5nNq4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC7DDAF
Validity
Not Before: Apr 3 02:25:08 2025 GMT
Not After : Apr 5 02:25:08 2025 GMT
Subject: CN=67edf185-700b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:09:7a:b9:f8:69:af:b5:19:30:ea:87:79:
c7:55:c2:ae:c2:ca:d0:dc:af:1f:53:a5:be:3f:21:
c7:b9:81:e1:0c:1f:18:82:28:1f:8c:41:f5:b0:4a:
f2:15:fb:23:2c:56:54:f5:dd:be:6f:dd:c3:e2:3d:
14:29:d6:20:c0:a0:5e:be:98:fe:b2:a8:2c:79:53:
eb:47:69:d0:9c:b2:c7:77:3b:b8:d1:65:95:c5:ad:
47:cf:09:92:33:f2:a7:ae:b7:3c:01:00:74:74:45:
eb:c1:25:4d:70:ec:77:4a:84:0f:22:6e:48:25:e8:
a4:68:34:6f:6d:18:f8:0b:ce:12:9e:c9:28:c7:f0:
d5:35:aa:2a:a0:af:c7:b5:0b:92:ba:59:60:0b:23:
80:01:47:9d:d1:75:b7:36:65:31:d4:4e:69:d2:a9:
fc:77:c1:33:bf:e2:37:92:db:7a:b1:5a:3c:12:5a:
71:71:5f:96:55:71:f9:e6:76:af:d8:77:77:8b:8c:
e6:43:bb:fb:28:a1:10:39:03:59:56:fb:45:0b:44:
0f:ca:b9:3d:b0:23:41:f5:af:76:1c:67:63:45:a1:
a0:7a:94:14:b4:b9:66:36:83:33:db:5a:cf:66:66:
f8:84:09:8a:c4:1d:d4:c2:c9:2d:a3:e7:8c:2f:3f:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:25:E7:C0:67:45:2C:40:9C:21:59:B1:A8:1C:DF:DF:F9:4D:00
X509v3 Authority Key Identifier:
keyid:61:9A:A3:64:2C:B4:6F:3B:D2:CB:89:1C:B6:7F:FD:DA:DE:67:36:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YZqjZCy0bzvSy4kctn_92t5nNq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:11:8f:a7:11:4a:f5:e1:f1:0a:d2:a2:27:d2:48:c2:a1:d4:
57:22:d0:13:f0:7f:24:08:2c:08:a8:d6:90:81:23:8e:a8:58:
6b:87:e4:ba:2c:e4:3a:d3:c2:4b:13:43:0e:69:43:a8:75:cd:
f2:dc:e5:d4:88:33:07:5d:3c:c6:27:72:87:d4:01:92:59:1b:
86:6f:41:5d:f8:95:f0:df:74:77:12:0a:b9:f2:3c:48:45:df:
ae:36:f4:1b:50:80:17:bc:30:b7:fe:ab:3b:8c:9f:54:17:56:
ad:3b:2d:5c:64:d8:8e:db:c3:53:76:e8:72:2b:a9:78:a5:aa:
b6:56:d7:3f:33:2d:f7:de:0c:1e:10:48:2d:33:37:a4:70:36:
50:99:98:5f:bc:59:c4:b6:3f:2d:e4:f6:3a:ba:09:5e:ff:fa:
7f:c3:8e:28:5d:a0:da:07:60:3a:57:2a:3e:4b:1d:1e:5b:ed:
9e:a9:e9:9a:82:5f:e4:dd:60:03:95:18:5a:51:c7:b3:61:3e:
5d:5f:80:a9:ec:0c:98:08:3d:ec:12:6f:70:c0:b4:cd:52:65:
aa:17:28:56:43:ea:74:c9:5f:b7:b9:89:08:92:82:c7:28:25:
09:d7:64:7d:d3:86:e0:ab:91:3d:36:31:8c:72:2a:7c:3e:c0:
5f:aa:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:24:33 2025 by rpki-client