Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
File: 37GYokEhr76oC-bCVT7Qn4UiUDI.mft (raw, json)
Hash identifier: /1MsBMCRIRozR0UOHIVU4RY2XsGXerF6VbfXTph+qng=
Subject key identifier: D9:0A:F2:C8:1B:0E:17:E3:70:26:59:F0:87:C5:44:4B:70:F1:22:AA
Authority key identifier: DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
Certificate issuer: /CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
Certificate serial: 0ABF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
Manifest number: 0ABE
Signing time: Thu 03 Apr 2025 01:01:48 +0000
Manifest this update: Thu 03 Apr 2025 01:01:47 +0000
Manifest next update: Sat 05 Apr 2025 01:01:47 +0000
Files and hashes: 1: 37GYokEhr76oC-bCVT7Qn4UiUDI.crl (hash: jEgbZoDEMGXnf2Y/OKNjKJhBK9/7cE1M8MUII2UWuJY=)
2: FA78454ADDC111E8B15C694DF8AEA228.roa (hash: uu495Ulte7M9lqyB0F6mlOadgmAPbSCrWmqWcuFpoQU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2751 (0xabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1839AF
Validity
Not Before: Apr 3 01:01:47 2025 GMT
Not After : Apr 5 01:01:47 2025 GMT
Subject: CN=67edddfc-2fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:f3:61:77:9a:6f:ce:3f:4c:f4:3a:fc:e9:
34:6b:91:b2:05:13:f8:d0:65:f9:86:b3:80:6f:1f:
c8:eb:44:9d:85:a7:3d:47:5a:12:f4:45:1b:57:65:
89:c8:0f:ad:40:be:3d:d4:d8:00:63:7f:b6:aa:5b:
54:e3:88:90:a6:a7:5a:68:79:bf:b9:1e:d7:78:c2:
c8:a0:b9:62:42:48:8c:99:40:a6:7f:65:93:e2:3d:
1a:ea:42:17:2d:29:10:de:1a:29:82:18:1d:5f:8d:
fc:2c:22:e4:cf:bd:d7:6e:52:19:37:ec:01:04:70:
68:b1:55:e0:18:1a:8a:61:84:a8:db:de:94:1a:a7:
03:a6:84:85:4d:46:49:66:2f:32:58:4c:eb:ea:7c:
25:29:0f:39:d2:42:60:e1:a1:88:ad:a4:31:3f:22:
04:fb:b3:bf:ce:8a:cb:24:26:6e:9b:e4:7c:3d:55:
5c:28:96:ef:49:72:b1:80:1b:71:9d:da:bd:c1:c1:
a5:4a:49:f5:a3:3a:33:ca:99:2e:66:33:9c:5a:6f:
d8:4b:af:23:6b:3f:55:10:25:84:62:a7:ef:54:7b:
58:44:30:d1:a1:f2:ef:90:f9:31:54:78:54:20:af:
05:64:f7:ea:4d:79:63:0d:de:9f:51:b9:45:ed:e3:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0A:F2:C8:1B:0E:17:E3:70:26:59:F0:87:C5:44:4B:70:F1:22:AA
X509v3 Authority Key Identifier:
keyid:DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:67:17:9a:76:bf:7a:b4:b3:21:15:69:07:0f:b2:a2:50:7b:
41:48:50:d2:54:8c:58:e3:b6:e5:82:2d:d6:57:f8:f6:bf:96:
ae:b2:00:78:56:5c:ab:53:41:ff:ac:89:49:1c:fd:79:93:ff:
33:87:68:8b:78:01:78:e7:27:27:5d:23:b5:c6:36:ea:f9:82:
df:7c:94:72:c7:a6:9f:ec:5c:be:1b:93:9d:58:2f:bc:df:af:
ca:18:b3:bf:66:68:da:b5:53:d5:ec:88:27:cd:1e:4c:4b:ae:
bb:ab:e1:d9:bd:4c:82:7f:77:05:e5:a3:1b:74:47:a1:e9:10:
b7:ec:88:10:d8:d8:88:20:98:01:ac:a0:30:e4:43:69:d9:e5:
54:09:fc:87:de:8e:48:3e:6b:aa:d4:b0:a8:69:58:50:a5:75:
3e:15:1e:ee:c8:7d:53:30:4c:b7:5d:60:17:e5:27:1c:ee:0b:
8e:64:5f:09:50:49:49:2c:0a:ba:c4:7a:89:67:ab:9d:4f:6f:
f0:88:f8:2e:e1:37:20:be:89:c7:d3:e0:45:59:2c:e4:42:c3:
a7:41:e8:0c:37:c4:62:1e:2c:cd:b7:5c:39:4e:de:66:f3:6f:
c4:23:df:a0:3c:f8:fe:0a:fd:b2:12:06:9c:6a:f3:52:c8:93:
94:d3:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:08:41 2025 by rpki-client