Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
File: j0bclvxCB36wfkfE1NrsuUVbSAI.mft (raw, json)
Hash identifier: eD0as9XSruu6rySQtDphyLNy3UESfpwWzvLuBThdWJw=
Subject key identifier: C2:72:9D:61:69:33:FC:AA:99:A1:EE:27:2B:CB:62:AD:68:D8:15:FD
Authority key identifier: 8F:46:DC:96:FC:42:07:7E:B0:7E:47:C4:D4:DA:EC:B9:45:5B:48:02
Certificate issuer: /CN=F36D4BDDAF/serialNumber=8F46DC96FC42077EB07E47C4D4DAECB9455B4802
Certificate serial: 045E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j0bclvxCB36wfkfE1NrsuUVbSAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
Manifest number: 045A
Signing time: Sun 16 Feb 2025 02:02:03 +0000
Manifest this update: Sun 16 Feb 2025 02:02:03 +0000
Manifest next update: Tue 18 Feb 2025 02:02:03 +0000
Files and hashes: 1: j0bclvxCB36wfkfE1NrsuUVbSAI.crl (hash: D+hHHHSKm6qLxpie+kAFh9aSrXm+CKEEiN1yyZHh14w=)
2: 9A0262EA985B11EE8649C347D25BE465.roa (hash: 2GtUyuUh0H4Yru4Poa6BwFUwVcgQdscXDl84Vttn9/k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
rsync://rpki.afrinic.net/repository/afrinic/j0bclvxCB36wfkfE1NrsuUVbSAI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D4BDDAF
Validity
Not Before: Feb 16 02:02:03 2025 GMT
Not After : Feb 18 02:02:03 2025 GMT
Subject: CN=67b1471b-b827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:6e:5c:e8:30:e6:da:b6:cf:4f:09:12:a8:
ba:20:29:ed:a3:be:bc:d8:ca:7c:af:f3:cd:be:32:
fe:99:8e:6c:fc:cf:3d:bc:0e:26:85:29:5a:dd:fd:
4f:cf:67:1f:a0:a2:a8:ba:89:f6:92:9f:c4:83:52:
74:4b:c0:ff:8b:bd:89:3a:0c:e0:7f:ca:cc:55:4f:
e7:61:a0:6a:05:ea:61:f6:46:a1:63:d0:0b:da:4e:
1f:38:30:f5:2a:c2:94:f0:71:35:da:64:87:34:30:
54:f5:1a:d5:84:d3:95:22:af:b4:73:63:c3:01:0f:
6c:2b:37:b7:f8:75:6d:14:29:c8:56:33:6d:8a:87:
ef:77:1b:81:65:de:d6:12:b6:58:39:b1:33:47:f3:
34:ed:63:2b:76:67:52:f0:e1:52:a6:87:5d:14:d4:
f7:00:93:13:ad:a7:33:e0:6a:70:c9:a9:d3:b1:20:
3b:d5:91:62:ff:9f:1d:3f:0f:67:97:da:ce:c5:51:
8f:fa:36:17:86:46:0e:4b:22:78:80:84:3a:3d:38:
85:43:7b:38:da:1b:02:d3:5e:20:48:f0:dd:c2:b0:
d0:ac:3f:bc:ce:86:c6:ba:bc:88:02:31:d6:b1:d0:
3b:ab:2d:ef:f1:75:0d:7e:7c:0e:21:03:d3:eb:c4:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:9D:61:69:33:FC:AA:99:A1:EE:27:2B:CB:62:AD:68:D8:15:FD
X509v3 Authority Key Identifier:
keyid:8F:46:DC:96:FC:42:07:7E:B0:7E:47:C4:D4:DA:EC:B9:45:5B:48:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j0bclvxCB36wfkfE1NrsuUVbSAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:39:ce:97:c2:05:73:72:b3:e7:93:a3:d9:0b:6d:f3:1c:
e2:e7:35:58:80:4b:d7:78:5e:15:16:d4:b7:bb:1b:fb:d2:1d:
a0:5c:39:27:42:9a:14:03:db:04:e1:2b:d6:95:0c:74:2a:99:
e6:e0:1b:56:41:3a:51:30:c9:e4:09:1c:22:1b:78:ed:f4:f1:
de:03:30:27:a4:73:00:eb:4b:3a:cd:64:3e:33:2c:37:31:52:
31:92:86:bd:cf:fa:65:13:4c:a4:c1:21:c7:00:3a:02:90:4b:
e7:56:98:95:c5:a4:33:28:79:d1:11:07:cf:d6:94:5e:00:fd:
44:15:6d:a2:45:ff:f4:6e:0f:7d:b3:a2:cd:8b:2e:24:ae:3e:
ad:5f:49:b1:a9:db:06:5e:18:d0:0d:02:73:a9:1b:55:8e:b6:
67:a5:01:50:f9:39:c8:b1:83:7e:52:74:2e:47:85:d9:84:9f:
e2:49:b5:a1:a1:f3:bf:c8:d1:25:d4:8e:4f:88:c5:f1:0a:4f:
3c:15:26:28:e4:ec:ed:fc:34:26:1d:1a:2d:e6:a0:02:cb:15:
5d:93:2f:a1:98:46:ec:63:39:ea:e9:0d:dc:ff:7f:fc:35:b6:
79:2e:30:0d:80:cf:05:f3:f4:b6:dd:91:1c:66:fb:74:25:6f:
60:8c:2b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:47 2025 by rpki-client