Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
File: htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft (raw, json)
Hash identifier: vFrzRiHk+soaCtGrwyUVBXTKuSH7TsrMRxYiaaHxrvI=
Subject key identifier: E7:63:D4:DA:E7:76:3C:B0:21:DC:DD:3E:73:44:34:4A:DF:5C:A9:B4
Authority key identifier: 86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
Certificate issuer: /CN=F36CC8EBAF/serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
Certificate serial: 0467
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
Manifest number: 0466
Signing time: Sat 29 Mar 2025 02:27:04 +0000
Manifest this update: Sat 29 Mar 2025 02:27:04 +0000
Manifest next update: Mon 31 Mar 2025 02:27:04 +0000
Files and hashes: 1: htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl (hash: VaD2gBE6PijTWdeqbywUmtg1dJygkannPkftvX23giw=)
2: 79EE3F02B0EE11ECBF890E845A40D577.roa (hash: Ubonh4WupVYX7KDVzMvxh6Y6MxDnvCg7ttFECjnjgfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127 (0x467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC8EBAF
Validity
Not Before: Mar 29 02:27:04 2025 GMT
Not After : Mar 31 02:27:04 2025 GMT
Subject: CN=67e75a78-0fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:ef:6d:56:e7:e9:0f:fc:63:a4:bf:f7:ab:
3d:a0:b0:5c:84:dc:3a:ce:49:78:b2:09:ed:d6:34:
6b:6b:97:06:73:54:fa:7a:ea:1d:89:07:1a:34:8c:
7b:5d:f7:64:7c:e0:df:84:04:5d:dd:a5:45:84:b4:
47:91:09:0b:34:e1:31:64:81:d4:21:1c:1e:ac:43:
e6:26:48:05:b1:95:94:ce:12:dd:0f:b0:c2:dc:0a:
0d:31:a1:98:9c:5b:6b:d9:1c:2f:5f:94:13:81:03:
53:aa:dc:5a:22:c6:25:51:c1:14:56:87:64:e5:9c:
3e:0a:b6:54:5a:7e:fe:27:2f:a5:57:1c:67:f3:b9:
96:63:e5:3b:4b:1d:20:a7:9e:c2:aa:5c:ba:4c:e5:
87:0d:b7:fb:80:e6:74:f2:a3:33:e0:76:a5:9b:84:
15:c9:b7:94:bd:50:42:e7:a1:f5:21:2c:40:64:a9:
e2:45:b2:93:6f:ee:7f:fb:61:cd:e6:94:65:16:de:
83:45:ed:6b:6c:44:d1:e4:37:ca:08:dc:78:3f:33:
c0:be:3d:ae:f1:d0:55:c9:b4:6b:92:54:e0:bd:db:
1b:0b:f9:cb:3f:1c:c9:c5:52:b5:b2:74:53:ec:4b:
44:ef:a8:45:36:47:20:72:46:0b:bb:da:40:91:be:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:63:D4:DA:E7:76:3C:B0:21:DC:DD:3E:73:44:34:4A:DF:5C:A9:B4
X509v3 Authority Key Identifier:
keyid:86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:aa:17:0e:fe:2e:a3:6c:2b:79:2d:e6:fc:cc:3c:c0:5a:
80:e0:9c:f9:b9:bd:fa:d7:17:1d:7a:88:b0:79:60:1a:aa:a7:
2b:aa:da:fc:d6:44:81:e9:c9:c7:0a:38:cb:cd:b3:b4:49:88:
90:d9:47:47:6a:c3:ac:75:10:72:57:65:92:7d:11:34:fa:7c:
da:8b:fd:7e:48:26:5f:1d:6d:03:95:bc:8e:66:0d:d8:ac:28:
27:52:a7:7e:70:21:fb:c1:95:89:83:53:79:00:73:80:60:9f:
05:c0:a8:96:a2:2c:e5:09:c8:f6:9a:76:2b:7c:58:0b:8a:57:
91:f3:8a:0c:b7:35:cf:db:f0:94:15:b4:f7:5d:6a:d2:84:8b:
d8:c8:0c:9b:5c:1a:a8:97:d8:d8:d4:09:16:1f:b5:44:1c:72:
de:35:d2:32:5b:e3:f1:05:ec:c4:e4:2b:88:01:c0:ad:c8:89:
16:b5:82:51:fb:13:80:e8:ec:34:0e:52:da:c1:cc:e1:ce:7b:
60:84:ac:83:ba:7a:39:57:b8:a3:67:84:d5:24:81:1c:58:40:
01:51:42:a7:d6:3b:37:39:c5:c6:dd:35:5e:3a:f3:fc:bf:91:
0d:aa:d9:43:05:3b:72:24:07:b9:f6:ab:9f:33:c9:c3:98:dc:
b4:f0:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:08:49 2025 by rpki-client