Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File: _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier: b3WJITaRd/7L88tfX+02MLM49nnSdkjFm4rtqM4vNqw=
Subject key identifier: F5:01:40:A7:9B:18:9C:60:39:F4:80:08:4B:F3:0E:BA:B4:D3:1E:13
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer: /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial: 01AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number: 01AA
Signing time: Thu 03 Apr 2025 02:56:30 +0000
Manifest this update: Thu 03 Apr 2025 02:56:30 +0000
Manifest next update: Sat 05 Apr 2025 02:56:30 +0000
Files and hashes: 1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: O5sBAK7FOiajPTRMamGLu1BmLsn1XqLStLPSUltL5pc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D2FA4AF
Validity
Not Before: Apr 3 02:56:30 2025 GMT
Not After : Apr 5 02:56:30 2025 GMT
Subject: CN=67edf8de-4777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:66:d7:6b:7d:6a:99:eb:a2:cf:12:02:cc:
05:aa:0a:30:b7:a6:a1:10:9e:bc:cc:12:f8:40:67:
11:9c:5e:a5:a9:d4:09:25:a4:0f:87:d8:53:a6:0b:
fb:0b:9d:e5:00:da:0f:51:ee:c0:b8:34:9e:0d:dd:
33:6c:1f:fc:73:87:04:77:d0:ee:0b:da:13:b2:59:
12:5f:b2:fb:ef:1a:c3:92:ed:7c:79:5f:3e:37:71:
7d:66:4e:bf:0b:49:26:68:41:53:86:d0:a6:ba:f9:
f1:13:05:c1:05:36:7d:01:e1:9e:33:7b:f7:68:4a:
25:ff:ff:91:81:3d:e7:5b:4a:05:bb:05:df:07:a1:
58:da:68:e6:c2:ae:3c:b9:d7:31:21:9b:f9:d0:b5:
eb:1f:18:ac:ff:09:bf:a7:b2:7e:b9:81:ff:d8:f5:
13:95:27:3b:4b:c4:9e:84:a2:c8:ea:c0:3d:b6:cf:
e7:5f:04:48:ba:21:c8:cb:99:48:b5:25:f0:87:e8:
6f:fa:27:34:b6:f0:89:b6:50:a2:34:23:2b:56:90:
9f:1d:ff:da:ff:6a:8f:5f:5f:3a:21:a8:5c:bd:f4:
46:29:7a:31:49:9b:e8:5b:f8:22:35:35:7e:04:b3:
46:c9:58:11:21:00:58:2b:64:e4:da:ec:da:9d:b4:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:40:A7:9B:18:9C:60:39:F4:80:08:4B:F3:0E:BA:B4:D3:1E:13
X509v3 Authority Key Identifier:
keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c2:8b:79:cb:07:27:62:d5:de:95:55:69:5a:e0:4f:74:f4:
ca:c1:a8:e8:09:3e:14:17:fe:90:a1:bc:1b:0b:43:f3:57:35:
6e:83:3a:d7:68:84:e2:fc:0d:a3:aa:2a:27:de:43:52:76:26:
96:13:f1:d0:5b:7d:c9:64:b9:95:fa:e1:f6:38:4b:96:64:82:
eb:a8:e7:06:3f:71:b1:30:75:04:d8:af:37:24:70:cb:d1:f8:
f0:a4:fe:df:36:d9:f0:5f:c0:2f:18:2e:76:e3:a8:3b:73:0c:
25:9e:5f:19:fc:08:4f:c0:5d:17:04:43:bf:e1:40:9b:bd:9a:
e8:d9:a0:54:7b:80:2b:95:b1:dc:15:ab:10:28:8f:a7:e7:2c:
53:83:44:6d:5f:12:b0:9e:97:0a:88:67:7d:31:fc:ef:a4:fb:
4f:23:b6:7e:3b:00:90:a8:34:1e:72:ee:a4:5e:ed:c7:7f:95:
97:19:7c:1e:06:08:f6:6f:85:61:26:6d:92:66:e2:b4:f7:6e:
ae:67:a0:8b:ef:bc:7a:d6:f8:a7:51:3e:da:94:ee:21:79:90:
b5:af:6f:cf:22:ae:09:98:f3:38:57:b0:c5:ed:dc:34:f7:f5:
2c:fe:4b:b1:35:c7:1f:6e:bf:87:d5:19:46:41:00:3f:69:73:
ed:c4:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:39:33 2025 by rpki-client