Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
File: FUgKw-djfPKntoh6_VGlPwPmrUc.mft (raw, json)
Hash identifier: M29CTIsx8Yz/HgDOGDBKPJpj3eNU+wPFmITrfH/pev4=
Subject key identifier: 0B:25:2B:08:39:77:3F:F4:3E:C9:A0:9A:8E:7F:40:E1:32:13:12:81
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Certificate issuer: /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial: 0871
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
Manifest number: 086D
Signing time: Thu 03 Apr 2025 01:16:37 +0000
Manifest this update: Thu 03 Apr 2025 01:16:37 +0000
Manifest next update: Sat 05 Apr 2025 01:16:37 +0000
Files and hashes: 1: FUgKw-djfPKntoh6_VGlPwPmrUc.crl (hash: 7KTt2zUc7lG2I9u2Bp5xzY4eP6i8cih2q5IUoChbH8o=)
2: 967E592CF1E611EFBCF7DD4F762E951A.roa (hash: OyrLKAFW3d4E09yYEW9wskKKqknjSYiMg4ra/6illO4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D289CAF
Validity
Not Before: Apr 3 01:16:37 2025 GMT
Not After : Apr 5 01:16:37 2025 GMT
Subject: CN=67ede175-7e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:53:c9:d7:0a:5c:fd:05:7c:be:94:b4:5f:
f4:fa:66:13:95:71:df:6a:83:d2:72:7b:09:bd:53:
4d:2f:1d:62:bc:ee:32:11:22:66:d2:38:c1:77:c2:
de:d4:32:ad:53:3b:0a:b2:5f:e9:fe:5d:40:04:28:
cb:58:57:9e:73:ea:fb:79:80:1b:c2:63:ca:9b:b4:
c6:03:70:a5:88:a5:0a:b6:22:f5:ca:16:8e:04:c4:
e2:9e:cf:aa:d5:f4:fa:17:5b:d1:f3:ee:b7:3d:6f:
94:3a:6f:80:e8:21:e2:29:2f:b7:59:4a:fd:fa:8c:
b7:5d:e9:33:60:b6:1f:ed:62:fc:da:d3:79:10:e5:
12:36:2f:d9:4d:b9:69:e8:94:32:2d:99:fd:7b:bd:
da:f2:40:ee:21:d7:d2:e2:f5:8b:31:e0:18:6e:34:
8f:ae:9f:21:1a:a1:8f:39:4d:78:39:9c:dc:52:72:
80:5c:84:33:bd:8b:ee:9f:aa:47:39:54:8c:99:44:
8d:4d:ef:24:77:e8:e3:be:41:68:d5:35:43:d7:f3:
d5:bc:09:ec:ec:ac:b7:e3:6b:96:1d:9c:b9:67:67:
f5:7b:2d:25:0e:df:38:aa:f2:aa:70:10:af:f8:8e:
76:e9:31:c1:03:c4:54:c1:f3:85:3d:99:21:89:5b:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:25:2B:08:39:77:3F:F4:3E:C9:A0:9A:8E:7F:40:E1:32:13:12:81
X509v3 Authority Key Identifier:
keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:34:e6:41:06:74:67:28:d3:e9:cd:81:47:4d:7b:f5:44:8b:
6d:85:45:6c:66:89:2d:75:1b:82:50:10:ce:68:96:1a:d6:31:
14:db:74:e7:a4:3e:ab:41:3d:1e:08:35:2b:24:c4:54:3b:38:
9c:d7:1a:d9:fb:8e:04:d5:ca:6c:50:c0:5e:a5:e9:6f:dc:87:
24:5d:41:d7:5b:6f:47:58:38:bd:68:ca:db:b6:33:b8:c6:e6:
4e:bf:08:07:da:76:f8:c6:38:79:10:2f:a5:a4:ca:5c:18:38:
41:60:a4:ef:9d:ff:5d:ab:9e:02:bc:57:af:fd:85:22:71:f3:
24:20:96:63:be:5c:08:be:cd:af:50:c1:47:9a:3a:5f:cf:09:
5d:ab:b3:42:dd:ef:53:6d:17:2d:c0:c7:cc:c5:ce:0d:8e:a9:
77:55:3b:32:dd:71:a8:26:28:88:15:56:7a:b6:83:60:82:b0:
29:2e:0d:6d:49:23:b7:0a:2a:04:91:18:67:c2:fe:2d:01:4d:
bb:56:f9:0d:da:05:b5:cb:a5:f5:db:df:42:bd:98:3e:91:5b:
5d:60:fa:2e:54:49:96:00:c8:a2:c0:55:55:53:40:e3:e2:1a:
f0:2e:e5:ca:d2:f3:bc:52:c2:d2:4e:0d:09:f0:78:27:45:e0:
c4:9f:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:45:31 2025 by rpki-client