Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: /P09YY5ovCkxbIEk9kW27UxhtTeakMU3SMdxV8T7rh8=
Subject key identifier: 03:2E:07:A6:06:18:C6:61:2D:DD:7D:61:74:E4:A8:C9:DC:F0:9E:44
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 0862
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 0861
Signing time: Sun 16 Feb 2025 01:13:40 +0000
Manifest this update: Sun 16 Feb 2025 01:13:39 +0000
Manifest next update: Tue 18 Feb 2025 01:13:39 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: 8+4ethOEVv53RIEELjJX3P52AzIxM9R8+6CvXt73eBY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR
Validity
Not Before: Feb 16 01:13:39 2025 GMT
Not After : Feb 18 01:13:39 2025 GMT
Subject: CN=67b13bc4-1d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:a0:33:4d:57:30:3e:5a:23:cd:43:2f:65:
4d:f9:d3:c7:81:2d:ee:0d:31:b7:d7:95:01:bf:b4:
ec:2b:d3:2b:5a:af:b4:f4:94:19:20:09:9d:fc:b0:
99:25:93:53:e6:3b:a5:92:05:2e:c7:04:06:47:8d:
9d:82:81:7b:94:43:38:bc:cb:8d:4f:f3:30:96:fc:
1a:4e:8e:01:11:c3:7f:90:6e:39:a5:0d:da:0d:fb:
48:db:b6:2c:da:94:54:c8:00:7e:eb:1a:14:ba:fc:
55:3c:a2:16:74:85:2e:3d:20:54:09:e3:e9:62:d2:
fd:c0:53:40:94:4b:e3:32:15:c3:09:24:58:7a:97:
53:05:53:7f:2f:67:e2:45:5a:d0:2d:14:91:dc:8d:
38:65:03:af:1b:90:a7:c4:8f:a7:d6:07:0d:5a:e9:
d6:ca:62:fe:e3:4e:9a:9e:f7:21:0b:79:15:4b:f4:
ff:cb:29:44:a6:ee:be:6f:87:49:d9:d8:dd:85:64:
3f:cd:b4:06:f1:eb:95:15:a1:36:00:8a:81:60:c2:
7b:89:92:82:40:48:1f:16:af:60:c4:81:58:02:46:
03:a1:77:e3:ce:4c:74:92:89:80:8e:02:c3:bb:e1:
e5:0d:64:88:6b:a0:21:d2:4e:2a:1e:87:8a:42:55:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2E:07:A6:06:18:C6:61:2D:DD:7D:61:74:E4:A8:C9:DC:F0:9E:44
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:78:6f:64:59:43:ce:73:a6:04:ff:dd:89:f6:d1:7b:35:
aa:2c:53:f6:7b:1c:ac:8a:83:4c:d4:c1:41:10:a8:8c:4d:b9:
84:91:53:da:b8:1b:8e:74:ac:c4:b2:61:d2:4a:8e:c9:66:da:
65:2e:7f:13:32:4a:64:64:da:b9:f5:5e:cb:96:96:2c:ce:bb:
cd:14:eb:ac:a7:28:8e:4e:1a:ee:9a:e5:f9:3b:67:78:6e:68:
c6:f2:4f:76:23:22:2e:c4:21:50:be:a1:18:7c:cc:6b:f3:c7:
e9:53:f2:26:25:34:d9:1a:8b:85:22:1f:22:62:d0:ba:08:f8:
76:fe:a7:03:fb:77:cb:c2:ce:1d:9b:bc:36:3e:b6:7f:f6:61:
dd:88:e2:06:6e:7e:ef:f7:e2:ac:61:65:e6:86:9e:6a:f8:ba:
aa:1c:1c:f6:0e:78:cc:2a:14:a2:54:39:b4:88:a7:0c:e7:1a:
29:24:f5:7b:2f:23:90:da:cb:70:26:cd:69:26:5d:95:75:43:
9c:af:64:29:2c:a8:3e:80:a2:f8:c0:7f:d9:c2:14:cd:9a:92:
22:ac:1e:38:89:ef:f3:b9:18:87:d2:a4:ef:a3:07:e3:e2:e9:
84:d9:03:56:fb:a9:d3:1a:65:74:be:aa:bd:ae:3b:80:44:a5:
69:4c:8d:4e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDg2MzdBUjExMC8GA1UEBRMoQUM3NTkzOUNBNzJCOTc0REU0NUUyMTcyMDhEOUUw
NkU3RTFCQUMwMjAeFw0yNTAyMTYwMTEzMzlaFw0yNTAyMTgwMTEzMzlaMBgxFjAU
BgNVBAMTDTY3YjEzYmM0LTFkNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnPaAzTVcwPlojzUMvZU3508eBLe4NMbfXlQG/tOwr0ytar7T0lBkgCZ38
sJklk1PmO6WSBS7HBAZHjZ2CgXuUQzi8y41P8zCW/BpOjgERw3+QbjmlDdoN+0jb
tizalFTIAH7rGhS6/FU8ohZ0hS49IFQJ4+li0v3AU0CUS+MyFcMJJFh6l1MFU38v
Z+JFWtAtFJHcjThlA68bkKfEj6fWBw1a6dbKYv7jTpqe9yELeRVL9P/LKUSm7r5v
h0nZ2N2FZD/NtAbx65UVoTYAioFgwnuJkoJASB8Wr2DEgVgCRgOhd+POTHSSiYCO
AsO74eUNZIhroCHSTioeh4pCVSHPAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUAy4H
pgYYxmEt3X1hdOSoydzwnkQwHwYDVR0jBBgwFoAUrHWTnKcrl03kXiFyCNngbn4b
rAIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4NjM3L0ZDQjQ3QUZBODM5NzExRTlCQUM3OUExQUY4QUVBMjI4L3JIV1Ru
S2NybDAza1hpRnlDTm5nYm40YnJBSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JIV1RuS2NybDAza1hpRnlDTm5nYm40YnJBSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDg2MzcvRkNCNDdBRkE4Mzk3MTFFOUJBQzc5QTFBRjhBRUEy
MjgvckhXVG5LY3JsMDNrWGlGeUNObmdibjRickFJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJRHhvZFlDznOmBP/difbRezWqLFP2exys
ioNM1MFBEKiMTbmEkVPauBuOdKzEsmHSSo7JZtplLn8TMkpkZNq59V7LlpYszrvN
FOuspyiOThrumuX5O2d4bmjG8k92IyIuxCFQvqEYfMxr88fpU/ImJTTZGouFIh8i
YtC6CPh2/qcD+3fLws4dm7w2PrZ/9mHdiOIGbn7v9+KsYWXmhp5q+LqqHBz2DnjM
KhSiVDm0iKcM5xopJPV7LyOQ2stwJs1pJl2VdUOcr2QpLKg+gKL4wH/ZwhTNmpIi
rB44ie/zuRiH0qTvowfj4umE2QNW+6nTGmV0vqq9rjuARKVpTI1O
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:20 2025 by rpki-client