Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File: 1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier: 7R17Q3vp/Bt5FgkQO2K0McI5kAWD5pFwxgk5Gmc4tJ4=
Subject key identifier: CB:F0:0A:21:69:5F:71:BA:80:8F:9D:3C:69:B0:5F:AA:46:51:03:D1
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer: /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial: 0326
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number: 0324
Signing time: Sat 29 Mar 2025 02:49:13 +0000
Manifest this update: Sat 29 Mar 2025 02:49:13 +0000
Manifest next update: Mon 31 Mar 2025 02:49:13 +0000
Files and hashes: 1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: 0rtijXxk1h7dnKTihZd7UiJ3gnOy78Gkj/flJbG3j5k=)
2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D7B70AF
Validity
Not Before: Mar 29 02:49:13 2025 GMT
Not After : Mar 31 02:49:13 2025 GMT
Subject: CN=67e75fa9-544d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:e6:e4:9f:9f:8e:e8:f0:f0:1b:81:e5:1a:
00:37:d9:e3:c0:ad:4d:29:a4:c6:07:63:6c:e7:eb:
7b:27:53:e7:92:33:bc:ce:58:1b:d9:6b:b1:cc:27:
be:cf:27:d6:07:8c:dd:c3:9f:7d:ce:49:3b:cd:05:
f3:15:fb:e9:2c:a5:4a:e3:41:75:fd:93:df:c0:78:
5a:bd:81:9b:a6:4d:00:2d:78:24:45:7d:65:aa:d9:
32:72:f6:2f:2b:8a:71:d8:ca:bc:33:94:63:16:99:
72:9d:9a:bd:6c:fb:25:ba:ff:cc:bf:97:26:ee:5c:
62:a3:9d:ef:67:e0:fc:01:74:a2:85:7a:15:55:9e:
67:ec:73:15:ac:a5:8b:02:d3:27:82:24:a3:29:18:
16:93:40:71:2e:99:be:cc:a2:fd:c4:7b:78:e0:ba:
56:4a:4c:a2:d3:f5:09:5a:05:bb:ee:54:6d:23:e5:
36:22:ae:03:b3:fc:c1:55:b2:79:60:87:87:c8:09:
7c:45:a3:16:c5:81:c9:e2:7e:55:b4:74:cb:df:0f:
4b:3a:53:2d:8e:30:d7:c5:a6:31:17:f5:d9:f2:cc:
4c:36:a8:40:cd:29:3c:f3:21:0e:df:e6:cd:7e:2a:
85:91:2b:76:ef:b1:76:a9:18:be:0c:d6:95:bc:1d:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F0:0A:21:69:5F:71:BA:80:8F:9D:3C:69:B0:5F:AA:46:51:03:D1
X509v3 Authority Key Identifier:
keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:3e:51:b5:bf:b2:9c:91:b1:9e:10:3f:56:91:f0:a1:13:
16:25:a7:69:77:e6:e8:87:81:87:f4:51:91:ab:54:0e:22:2a:
8c:f6:f7:e6:fc:19:b8:c2:3f:00:ec:51:fa:f4:7c:b6:b5:1a:
90:93:a4:af:9f:5d:f7:bd:c9:85:75:77:6b:83:f7:28:81:a2:
5d:09:31:4a:b0:50:10:e9:c0:9f:74:b1:b8:83:af:da:6d:82:
5a:3f:80:3b:02:e5:c2:71:91:e8:22:0e:12:2b:5d:0f:51:f9:
bb:b4:a5:b6:e1:aa:86:f9:6b:0b:b5:ef:76:04:c1:92:af:a5:
82:2c:64:3f:ba:8a:a0:3b:7b:14:b3:90:b5:ae:60:2b:36:bb:
07:25:73:76:6b:ed:56:68:a8:d9:99:fe:83:54:20:45:d6:45:
45:02:0f:c6:ce:46:ac:6e:5a:97:a4:41:3f:74:3c:a3:b5:21:
dd:86:d5:29:dc:c2:7a:72:be:8f:65:60:3f:09:df:96:e5:3f:
1e:07:16:f6:f8:63:04:5c:da:bf:84:51:a7:da:9e:4e:58:3d:
53:dc:49:33:bd:a3:7f:7f:56:f4:48:b1:43:7e:77:a7:50:39:
11:05:86:cf:e8:30:69:7c:50:0b:9c:af:c6:61:03:72:9d:2e:
eb:09:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:56 2025 by rpki-client