Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File: KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier: UIwQBcHPOtw6sUzXQgeyK7fi9JhPTt+wmHuyZUq0wgQ=
Subject key identifier: 4C:52:3F:CC:10:FC:FD:0D:C7:8F:8F:9B:4F:5C:8D:E2:9F:CE:0E:D1
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer: /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial: 024C
Authority info access: rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number: 024B
Signing time: Sun 16 Feb 2025 02:38:57 +0000
Manifest this update: Sun 16 Feb 2025 02:38:57 +0000
Manifest next update: Tue 18 Feb 2025 02:38:57 +0000
Files and hashes: 1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: 5tn3Xf72ytR2vyclXzDuk87tZXG8UvxFsEEctDzZrC8=)
2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E201DAR
Validity
Not Before: Feb 16 02:38:57 2025 GMT
Not After : Feb 18 02:38:57 2025 GMT
Subject: CN=67b14fc1-1ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:d3:1b:2a:0a:c5:28:c0:78:72:d6:7c:05:
2c:eb:0f:aa:eb:7f:50:86:47:79:6c:52:76:bd:ef:
53:34:4d:c8:45:fd:ae:1b:9a:03:3a:39:3b:a5:50:
5d:4f:1a:28:cb:e3:fb:13:37:f2:4f:c5:30:b2:62:
43:70:79:b1:8e:44:fe:19:05:81:83:ab:f5:76:2b:
6d:ae:ab:d9:6b:19:73:71:bd:de:fb:03:77:7b:6e:
ed:98:00:30:ed:5d:2e:b1:d3:8f:ce:7e:e6:05:da:
a7:ed:5a:7b:8c:d6:2b:f7:6c:a5:ad:cf:3b:40:ed:
7d:aa:36:3d:25:b7:23:9d:2b:54:d7:cd:19:c2:ed:
cb:48:81:1e:01:f5:0a:42:40:b1:45:49:6f:dd:72:
27:79:40:21:e7:92:3e:40:76:c9:be:30:49:c5:2d:
a7:1e:98:47:d8:f6:41:e9:00:c4:ee:35:33:f2:29:
86:bb:2e:b2:f1:28:00:aa:f5:a5:c9:96:fe:bd:cc:
73:13:dc:52:b6:06:17:a6:21:36:ed:60:69:81:70:
04:99:7d:be:30:ab:91:31:eb:32:93:92:3f:0b:a6:
8c:23:23:0d:59:4c:47:e7:6b:72:69:21:8a:8f:dc:
99:c1:80:49:f6:dc:e4:5f:cc:c2:00:95:6a:f1:b5:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:3F:CC:10:FC:FD:0D:C7:8F:8F:9B:4F:5C:8D:E2:9F:CE:0E:D1
X509v3 Authority Key Identifier:
keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d4:e2:56:30:4b:f0:fe:92:aa:c3:64:85:87:2a:74:27:75:
36:0e:f0:c4:56:cb:0e:e1:8a:1c:eb:19:59:7f:d1:24:5d:f1:
8c:ee:d8:b9:1e:45:3c:0f:9c:74:75:5b:de:c3:93:44:36:00:
dd:f5:2d:5d:e2:cb:8f:1b:67:d1:b3:bf:0d:0e:90:2c:3b:81:
77:8a:af:6f:af:05:46:16:8a:b9:26:b3:59:be:cf:31:a6:7e:
27:23:85:31:73:76:dc:48:82:01:ca:0d:60:e9:cd:fa:6b:cc:
13:48:0b:4e:5a:62:4d:09:a0:13:27:2f:c9:60:9e:2a:15:a5:
11:e9:2f:b3:13:01:be:87:d4:1c:ad:f5:7d:cb:dc:ba:87:9b:
72:f0:ba:99:25:51:43:2d:4f:df:cd:09:47:e9:66:60:0a:42:
2f:a6:a7:d2:52:3c:7e:a1:6b:5c:7e:a8:7b:b4:9c:52:a3:58:
74:b6:23:62:d5:68:82:1d:4d:2a:9d:2d:eb:6c:2b:bf:2a:97:
91:c6:08:65:6a:70:b6:59:d7:ca:9b:8c:03:49:87:fb:13:14:
36:70:43:69:8f:37:db:58:e6:d6:c3:89:fc:38:f0:27:d7:73:
82:27:a7:a0:03:1d:83:45:7a:3f:ac:12:1f:c3:18:fe:88:06:
60:f1:e7:b2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTIwMURBUjExMC8GA1UEBRMoMjg4MDZCQzMzQUZBMDEwNkZCNkY4Qzc0MjlFQUI3
OEMxMjAxQTI1OTAeFw0yNTAyMTYwMjM4NTdaFw0yNTAyMTgwMjM4NTdaMBgxFjAU
BgNVBAMTDTY3YjE0ZmMxLTFjZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdOdMbKgrFKMB4ctZ8BSzrD6rrf1CGR3lsUna971M0TchF/a4bmgM6OTul
UF1PGijL4/sTN/JPxTCyYkNwebGORP4ZBYGDq/V2K22uq9lrGXNxvd77A3d7bu2Y
ADDtXS6x04/OfuYF2qftWnuM1iv3bKWtzztA7X2qNj0ltyOdK1TXzRnC7ctIgR4B
9QpCQLFFSW/dcid5QCHnkj5Adsm+MEnFLacemEfY9kHpAMTuNTPyKYa7LrLxKACq
9aXJlv69zHMT3FK2BhemITbtYGmBcASZfb4wq5Ex6zKTkj8LpowjIw1ZTEfna3Jp
IYqP3JnBgEn23ORfzMIAlWrxtcP5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUTFI/
zBD8/Q3Hj4+bT1yN4p/ODtEwHwYDVR0jBBgwFoAUKIBrwzr6AQb7b4x0Keq3jBIB
olkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyMDFEL0FCRkMxNUJFMkZDRDExRUVCQUZFQTA0ODRBRDlFNkZDL0tJQnJ3
enI2QVFiN2I0eDBLZXEzakJJQm9say5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0tJQnJ3enI2QVFiN2I0eDBLZXEzakJJQm9say5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTIwMUQvQUJGQzE1QkUyRkNEMTFFRUJBRkVBMDQ4NEFEOUU2
RkMvS0lCcnd6cjZBUWI3YjR4MEtlcTNqQklCb2xrLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCy1OJWMEvw/pKqw2SFhyp0J3U2DvDEVssO
4Yoc6xlZf9EkXfGM7ti5HkU8D5x0dVvew5NENgDd9S1d4suPG2fRs78NDpAsO4F3
iq9vrwVGFoq5JrNZvs8xpn4nI4Uxc3bcSIIByg1g6c36a8wTSAtOWmJNCaATJy/J
YJ4qFaUR6S+zEwG+h9QcrfV9y9y6h5ty8LqZJVFDLU/fzQlH6WZgCkIvpqfSUjx+
oWtcfqh7tJxSo1h0tiNi1WiCHU0qnS3rbCu/KpeRxghlanC2WdfKm4wDSYf7ExQ2
cENpjzfbWObWw4n8OPAn13OCJ6egAx2DRXo/rBIfwxj+iAZg8eey
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:42 2025 by rpki-client