Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
File: zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft (raw, json)
Hash identifier: DeTUx8cg2vXSyndjpx/0s4Oc3SuFwOMUDFzp7U6vwrU=
Subject key identifier: E4:25:F8:28:42:A6:2B:BF:A0:40:5E:23:43:8D:4A:5A:CA:F0:D8:73
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Certificate issuer: /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial: 0454
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
Manifest number: 0453
Signing time: Fri 04 Apr 2025 02:03:42 +0000
Manifest this update: Fri 04 Apr 2025 02:03:41 +0000
Manifest next update: Sun 06 Apr 2025 02:03:41 +0000
Files and hashes: 1: zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl (hash: uRCTirl1qbHpGGlpVeGfpqBYoNULk5STa6xEpUfrpFY=)
2: 556100D6A66711EFA35CD16B762E951A.roa (hash: qJSjsy2o5hJTJDSiAXFVbbjMVoTEJfrC1/c4KDsNvP0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D70D9AF
Validity
Not Before: Apr 4 02:03:41 2025 GMT
Not After : Apr 6 02:03:41 2025 GMT
Subject: CN=67ef3dfe-64c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:d1:a9:4c:c2:42:7c:cf:fb:f5:47:26:d9:
a4:cf:2b:85:6f:d1:37:89:c7:ca:ee:9b:8d:71:f8:
ea:3f:cd:06:a2:aa:75:07:3e:e9:89:02:5e:0a:05:
0c:4b:85:d4:ab:6b:74:d0:d3:2c:e8:7e:1f:6b:42:
1a:44:5d:16:1a:af:b2:e1:41:e5:1c:6d:f1:35:6e:
ff:d5:8c:7e:7f:74:bc:e5:8b:8e:5f:fc:1e:42:92:
12:7e:c5:51:ae:8b:d6:48:31:e2:80:eb:40:10:e9:
87:60:26:99:ca:e6:4e:d3:e7:ad:65:d5:3f:4a:00:
40:b5:38:d2:3d:60:c3:3d:37:54:8d:2b:28:94:d9:
49:32:4f:f6:97:fe:9e:d7:98:2b:f5:af:3d:cb:5f:
f6:7d:6f:2b:92:87:6f:7d:ee:57:5b:4a:8b:cc:06:
2c:cd:4d:b5:37:a5:01:08:bd:8f:b4:f9:96:d3:cd:
45:12:c9:5e:f5:7c:be:60:71:f3:92:1d:0f:21:85:
6c:e2:65:53:1c:3a:ce:a0:48:16:b8:85:20:bd:c9:
d5:da:72:a0:ea:66:de:6c:a5:80:1f:09:ea:76:e7:
1a:4c:fc:20:79:6a:b0:c9:78:18:9a:34:49:96:f8:
da:4c:62:06:7b:79:7b:c8:24:69:c4:48:f6:45:a8:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:25:F8:28:42:A6:2B:BF:A0:40:5E:23:43:8D:4A:5A:CA:F0:D8:73
X509v3 Authority Key Identifier:
keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:de:e6:8a:23:d3:a2:46:02:df:67:cc:a7:14:2a:4d:af:
a8:fc:5f:48:58:88:41:28:7c:35:d0:71:40:97:b4:91:31:28:
d4:82:b9:ac:0f:15:98:c8:96:6d:61:10:5a:7a:e8:4e:5f:61:
51:2e:04:eb:25:8a:d9:96:32:bd:cb:87:41:38:e1:84:97:7e:
46:74:2a:55:b8:9f:4e:bd:b2:e6:e3:eb:c1:3f:de:4a:f7:d2:
76:39:1b:2a:dd:68:6d:24:56:c5:6e:fb:01:b1:7f:a3:2f:65:
ab:92:47:cb:99:11:c8:cc:4a:be:8d:ef:58:49:0a:46:f8:1a:
0e:34:6c:c8:9b:a8:82:ae:0d:ff:a0:d5:52:15:e3:98:d0:4a:
a0:53:1a:c5:69:48:1a:47:e0:0f:8e:16:a4:ea:28:84:d9:a2:
e9:cc:86:01:14:db:cd:09:74:44:48:b8:d3:78:e5:48:19:4e:
e2:cd:3d:e0:03:36:e3:bf:d6:59:1e:6a:e8:58:6e:27:d4:90:
99:f8:c8:20:87:f7:b5:bf:88:bf:ed:3e:74:d7:83:ab:ec:4d:
58:5e:09:30:ff:db:7f:b0:f5:61:e0:67:84:6f:27:ad:02:5f:
97:e2:fa:2e:28:10:dd:85:4d:4a:00:20:4a:25:ce:7f:10:24:
be:4d:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:58 2025 by rpki-client