Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
File: QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft (raw, json)
Hash identifier: /pky735Ur11B6CF1E1tw70zSQG6W3p8/G1vY65tOtFw=
Subject key identifier: CE:C6:A2:5B:AF:B7:7D:2A:91:6E:69:0F:DA:CD:29:AF:DD:53:BC:94
Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
Certificate issuer: /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
Certificate serial: 08A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
Manifest number: 08A5
Signing time: Sat 29 Mar 2025 01:34:19 +0000
Manifest this update: Sat 29 Mar 2025 01:34:18 +0000
Manifest next update: Mon 31 Mar 2025 01:34:18 +0000
Files and hashes: 1: QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl (hash: tjOXGJ+PrK8TJroTTyXnNIFq7rWh3dXLYKUtWpVbu48=)
2: 9441D5EEDAC711E9BF722B0BF8AEA228.roa (hash: axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=)
3: A99AE7C0DAC511E985EBCE09F8AEA228.roa (hash: OIGU7l2JXL8/haZu4eER9KuF5vp4/ZseEXDNYZByKwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBAE4AF
Validity
Not Before: Mar 29 01:34:18 2025 GMT
Not After : Mar 31 01:34:18 2025 GMT
Subject: CN=67e74e1b-8898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:9b:4b:f5:41:df:04:ff:4d:ef:4f:56:f7:
6f:f2:1f:f2:9d:62:65:ca:7e:6d:3e:3d:3f:a2:31:
b7:1f:03:84:b0:17:9c:9a:40:9a:a2:f7:a9:99:a4:
4b:43:d3:c5:2e:98:70:f2:34:3d:e9:1a:97:89:2b:
63:d7:34:37:bb:9c:6e:34:25:ef:43:9f:fc:15:9a:
ce:d3:37:65:8d:03:2f:1f:ab:25:71:b6:7b:d2:c3:
e8:fc:2b:41:95:a6:85:80:12:ad:f1:b4:a2:20:49:
2b:af:59:fc:44:a0:85:20:15:1b:fc:56:11:6d:78:
98:8e:10:ab:46:25:07:4e:b5:a9:66:c0:e2:02:43:
c2:40:ed:d8:c7:55:16:76:e8:a8:35:24:36:cc:db:
11:5a:47:d4:8d:13:e6:fd:d5:37:d2:e1:62:5b:4d:
67:4a:f0:1e:8d:6a:41:c1:bc:fb:0b:01:8f:0e:d0:
f8:f6:99:d5:ee:6a:b8:62:67:96:f0:79:cc:53:ba:
ea:3c:bb:db:5d:ee:f7:c5:fd:b1:4e:0e:dc:1d:d8:
2b:65:4f:b9:74:37:6a:50:75:e6:4c:35:fd:d7:26:
8b:2a:6e:4e:ef:11:7a:06:20:49:21:bf:a9:12:e3:
a1:a1:13:5f:ee:8b:ad:0a:5d:c9:aa:21:f2:d4:b1:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:A2:5B:AF:B7:7D:2A:91:6E:69:0F:DA:CD:29:AF:DD:53:BC:94
X509v3 Authority Key Identifier:
keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:df:a1:ed:00:90:57:bf:a1:69:38:4e:64:e6:9e:fe:4c:59:
c6:f0:29:72:db:95:27:bd:d8:9a:b8:97:6b:98:95:1e:d0:6d:
c0:2a:98:37:fd:95:d0:a7:d3:e5:b5:34:f7:63:d5:67:b5:bb:
45:0f:a6:89:b2:76:c4:0a:ec:f8:9f:30:f6:ef:6b:2f:64:b8:
a8:13:a7:45:5d:c2:9f:56:5b:50:f5:e0:87:60:9d:4a:39:c5:
20:7e:36:39:2c:43:58:6c:00:d9:0e:e9:0e:23:70:00:0b:74:
29:45:2e:83:c7:a2:80:e8:01:ae:30:8d:d3:f9:55:1c:61:79:
ce:f3:ae:66:17:ae:20:8d:83:df:40:28:28:d8:cc:5c:dd:88:
c0:d6:22:70:2a:73:7c:50:2b:f3:59:af:df:e9:35:72:ab:c9:
fe:eb:c8:40:02:5a:9e:88:86:c4:bb:3a:09:cd:99:89:78:d8:
aa:6c:e6:3a:3f:68:59:8b:c9:24:17:eb:3e:f0:8f:e7:3f:d4:
19:71:6f:bc:88:9d:cd:28:19:0b:d3:93:b6:a7:46:14:1c:e0:
23:57:10:11:ed:4b:1f:62:69:34:9f:52:7f:36:a7:21:e0:f5:
be:ab:89:6c:50:6b:de:46:65:08:90:70:5c:2c:8d:34:1d:a7:
8d:a5:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:22:24 2025 by rpki-client