Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: 2c299+iXEqIsSpPKVvEezNtPJ5lHyFHt92RkJj63Bng=
Subject key identifier: 00:41:88:E0:53:C1:C6:64:21:70:86:2B:14:B4:28:A4:66:E2:D7:8E
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 08A3
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 08A2
Signing time: Mon 21 Apr 2025 01:28:36 +0000
Manifest this update: Mon 21 Apr 2025 01:28:35 +0000
Manifest next update: Wed 23 Apr 2025 01:28:35 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: ih+JVNGJk6Nj0h8OUdswDA54OBeQVlI37OIslo04Wq4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Apr 21 01:28:35 2025 GMT
Not After : Apr 23 01:28:35 2025 GMT
Subject: CN=68059f44-5b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:40:de:d1:c4:30:08:83:99:67:67:7c:4c:
7c:fc:f9:60:a8:67:13:ec:10:2a:83:a5:a3:b2:7a:
2a:2d:46:ee:4e:01:c5:68:38:5b:7f:0e:11:cf:4d:
a5:a6:d0:d9:e2:70:58:cd:28:19:44:50:ad:c8:b1:
3b:34:ae:b6:df:74:27:72:d1:fd:93:19:79:85:1e:
13:9f:35:09:de:fa:14:29:55:8b:c1:2f:63:56:a3:
ff:44:80:07:af:d5:e2:a6:7d:31:32:bb:3d:68:ca:
fa:53:35:9d:47:cc:0e:76:c5:3e:65:87:87:b5:71:
8e:77:6f:6a:c2:f8:c2:4e:3c:07:3d:75:4b:4c:b9:
5b:df:eb:11:33:09:dc:ad:0e:ef:51:ce:92:28:bb:
31:b2:c5:fa:ab:bc:83:66:bf:8e:2d:15:41:2e:05:
d8:79:15:dc:b7:c1:8d:f9:db:29:ea:5c:f2:e7:36:
30:8a:8d:bf:2b:90:3a:42:ab:ff:75:7d:f9:a3:94:
71:43:74:68:09:30:e4:71:c1:c2:dc:4b:f0:9a:26:
9d:87:02:26:93:00:ff:4b:1d:45:90:c0:e8:43:be:
ab:22:0b:b8:b9:e6:bd:83:16:d7:ee:bd:43:41:a8:
51:f8:30:b0:39:9c:0d:0c:ca:19:c2:0f:04:31:7d:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:88:E0:53:C1:C6:64:21:70:86:2B:14:B4:28:A4:66:E2:D7:8E
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:ac:60:e7:a6:df:8c:c1:81:af:93:46:88:1e:69:4d:9c:ec:
a5:e3:aa:d0:6e:d7:45:75:b4:27:e2:d1:a5:46:97:a0:55:bb:
9b:ac:a3:ad:f1:6d:46:b4:97:7c:75:5a:06:ed:36:d0:c4:a3:
56:48:2b:55:82:30:77:04:69:00:cc:e5:bb:f3:4b:77:76:92:
9b:fd:e7:76:fb:be:15:33:e0:87:60:7b:2c:7a:26:e9:ba:1b:
9b:1d:70:a3:8b:f5:39:a7:18:67:63:ed:8f:9c:75:48:99:f3:
c7:80:0f:70:fb:1b:b4:7b:19:54:d3:e5:4e:24:6e:ea:4b:a5:
64:7f:57:c3:b4:4c:be:6d:81:75:26:9c:00:27:7e:0c:6f:af:
80:8f:ee:20:2b:1e:50:4b:58:56:ce:90:76:03:3c:29:2a:a0:
08:10:23:50:78:2b:21:ea:2c:10:fe:ba:3a:a9:75:d8:fa:40:
2d:1f:f9:da:0e:c2:d9:d1:3c:20:02:3d:ff:67:4f:99:69:03:
7f:2f:67:1f:60:eb:cc:eb:42:0a:97:c8:f9:91:05:a4:1b:52:
0e:50:7d:a0:af:f7:c6:f4:02:2c:69:bf:86:e9:da:3e:4b:60:
e5:80:9e:87:82:5c:36:68:90:e8:fe:77:fe:8d:d9:10:80:d0:
b4:2f:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:11 2025 by rpki-client