Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
File: AaNx1Ie11VLkTUu-yVarlsMlge0.mft (raw, json)
Hash identifier: tncastxdqyXQMSNFCWj2aOCzCxX7GRs2JEcM7eavXXQ=
Subject key identifier: 58:2C:4D:DC:2D:5F:14:8A:6F:75:56:5D:0E:7D:F0:6A:0C:86:FA:AB
Authority key identifier: 01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
Certificate issuer: /CN=F36DCAE3AF/serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
Certificate serial: 0421
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
Manifest number: 041F
Signing time: Thu 03 Apr 2025 02:04:41 +0000
Manifest this update: Thu 03 Apr 2025 02:04:41 +0000
Manifest next update: Sat 05 Apr 2025 02:04:41 +0000
Files and hashes: 1: AaNx1Ie11VLkTUu-yVarlsMlge0.crl (hash: ZTcilqSl98KEGh4sDi1Wqw0cK5TfasJ8GLe8kSIbsQM=)
2: 91DA0C3CF08F11ECA3387197F1222468.roa (hash: m3NCW8i2F16lSabUpSi4fXD8AQaLmw9scRn5comU59s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DCAE3AF
Validity
Not Before: Apr 3 02:04:41 2025 GMT
Not After : Apr 5 02:04:41 2025 GMT
Subject: CN=67edecb9-44fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:2f:4b:bc:3d:61:2d:d8:a9:a9:bd:ac:d5:
64:25:ae:f1:f5:84:52:0f:33:21:1d:cb:c6:8f:8b:
90:18:0e:a7:64:49:1b:7e:4c:ce:85:dc:1d:8b:30:
f3:f5:a9:e6:83:fa:d6:45:bf:60:b1:eb:7b:c7:eb:
1b:8b:75:a9:80:3e:53:d6:39:23:04:e6:1e:cc:a2:
08:b9:aa:04:af:1b:04:08:dc:82:66:87:f6:72:a0:
85:9b:b6:56:50:59:66:7d:b4:bf:85:9d:ad:63:da:
39:71:ee:70:4e:30:d2:e0:55:cd:ed:2d:2b:d7:b3:
46:b5:ae:83:e3:06:d5:83:e8:a0:30:09:28:84:66:
58:28:9c:12:54:55:f1:16:dd:ad:1f:ef:04:d3:e4:
24:f4:dd:5d:79:9e:cf:bb:43:67:00:34:39:01:a8:
08:9d:01:49:3f:1c:7d:0b:32:01:d2:a7:ff:ec:28:
6d:38:c8:e3:3c:71:29:0e:50:90:06:f7:29:4f:74:
45:b1:3e:a6:77:a5:b6:0d:0d:a0:3c:e5:cf:e7:3c:
eb:f2:51:56:2b:03:5e:38:f6:2a:d0:83:9f:23:ee:
b6:d9:e9:c6:d0:2b:d3:dc:bd:18:a6:21:25:84:37:
25:d7:fa:a9:c2:32:0e:da:3f:c2:71:4e:e8:40:87:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:4D:DC:2D:5F:14:8A:6F:75:56:5D:0E:7D:F0:6A:0C:86:FA:AB
X509v3 Authority Key Identifier:
keyid:01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:82:1d:9c:cd:aa:d4:85:4d:d7:78:1d:43:e5:a3:03:07:11:
ac:6f:b1:aa:36:9e:65:8d:b9:45:01:1b:7e:21:8c:ec:0e:50:
12:61:1d:38:07:2a:43:45:66:fe:85:d0:df:38:5a:63:6a:b9:
db:0f:b0:15:65:6a:ab:b9:b4:5b:97:29:23:33:15:2a:25:57:
db:ea:a4:82:81:9b:80:36:07:42:1e:35:16:6c:bc:f7:04:26:
a8:15:29:c7:bd:07:7a:22:27:d8:b0:79:83:cd:67:a5:db:68:
55:ff:10:34:a3:b1:4a:1a:5c:4f:69:1a:15:4a:07:45:91:f8:
d4:3c:44:61:70:ec:18:53:78:30:53:ba:e0:ed:bd:79:c1:88:
de:98:0b:3d:b2:f3:62:14:fa:7b:97:f3:7a:42:d9:24:17:5c:
49:b6:7d:6c:b5:6e:e3:71:54:c0:97:25:2c:84:11:90:fd:02:
c0:c7:06:63:83:07:e0:1f:7b:70:00:1a:99:86:23:3d:52:3b:
f6:79:2f:10:90:01:b9:bf:f0:97:ad:98:db:a3:37:9f:43:6e:
38:3f:fd:38:2d:d6:fb:45:2f:79:9d:a6:15:a0:3e:0d:59:13:
e1:1e:b3:30:00:a1:db:3a:3f:1b:6e:00:5c:91:54:81:0e:5d:
71:72:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:56 2025 by rpki-client