Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File: HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier: C2p1q+ib6vv0DwrDkYURGMXXY/MiN8g0UKv6lIBCiNI=
Subject key identifier: D0:2E:DB:2C:E4:16:80:72:8A:E0:DF:4D:32:70:4A:71:95:B4:7E:8B
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer: /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial: 02C5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number: 02C4
Signing time: Thu 03 Apr 2025 02:29:24 +0000
Manifest this update: Thu 03 Apr 2025 02:29:24 +0000
Manifest next update: Sat 05 Apr 2025 02:29:24 +0000
Files and hashes: 1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: 4Uqc0LGu8g4/EQZubnlnccsxikd5ZAPgc6KaNN8LJnI=)
2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B69AF
Validity
Not Before: Apr 3 02:29:24 2025 GMT
Not After : Apr 5 02:29:24 2025 GMT
Subject: CN=67edf284-c04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:99:db:7f:34:a9:f9:c8:a3:73:44:f0:3d:
a0:f4:e1:3d:0c:00:1b:53:93:02:fa:1b:26:6d:44:
35:10:c7:dd:be:99:7a:c6:6f:b0:c3:88:5e:90:11:
4a:0d:15:67:1c:f7:97:de:c4:15:d2:2a:81:31:7e:
1b:6f:d9:14:22:6c:1a:49:46:30:2e:e9:79:3e:17:
64:b3:89:92:7b:69:c5:5b:38:92:30:58:bd:15:01:
2d:1a:ca:2b:b3:65:64:8d:dd:90:6b:1c:a9:72:69:
41:43:8c:3d:5f:7e:58:73:02:1e:b4:ae:8f:19:a8:
53:44:e6:70:06:f3:be:76:36:23:5d:74:d1:da:47:
f0:64:da:27:3a:93:d7:cf:1a:3c:40:ed:1b:f7:1b:
68:76:11:ce:3b:c7:d4:3c:ad:46:2d:c1:0d:9c:6f:
7b:eb:5c:5b:ef:d4:2f:3a:7b:c3:08:79:87:36:73:
97:71:0c:92:6e:9b:d6:54:6e:6a:19:e2:6c:cd:7c:
f0:17:9b:3c:8b:1e:b3:7a:67:f1:78:db:e0:fe:5f:
3d:f3:b1:69:26:e6:f2:51:3a:2d:d5:be:a9:7e:f9:
5d:c5:a0:69:7a:ff:07:16:29:b6:a2:fa:0f:e1:77:
b8:42:10:db:18:a9:c6:70:ea:c9:ee:41:af:59:9d:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:DB:2C:E4:16:80:72:8A:E0:DF:4D:32:70:4A:71:95:B4:7E:8B
X509v3 Authority Key Identifier:
keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:dd:7a:f9:e9:a5:9d:e1:4b:17:36:2e:1f:a8:db:53:1e:93:
c3:2b:3a:74:e3:3b:42:1c:2e:46:de:cd:9b:f6:6f:33:9b:cf:
a8:3e:67:cd:e6:d3:e1:5b:49:f7:13:fe:75:3e:46:a3:fb:f0:
97:32:dd:50:56:16:49:e8:e5:ce:ee:76:f8:a1:46:46:c2:0b:
c4:4f:f5:bb:14:bf:4c:ad:94:66:c2:63:64:1f:e3:ae:6d:d6:
4e:4f:ba:6d:30:a0:91:21:16:8b:ab:1d:5e:f1:a0:c6:52:b1:
c9:e6:93:44:e6:8b:fd:03:4c:6b:6f:36:82:bb:e1:30:f5:1f:
6a:89:53:d7:12:a8:a7:f4:c0:3b:12:2e:c6:e8:fb:50:a3:b0:
b5:90:3b:0d:15:56:8a:8f:c0:4e:73:0f:87:2e:a8:c7:17:e8:
75:4c:62:28:8a:b9:f9:f1:73:cd:18:be:36:1b:a8:39:27:a8:
d9:ed:99:95:c9:30:46:07:ec:dc:42:b9:44:52:2e:d3:d8:14:
8f:d4:86:5f:50:ec:ad:99:65:d2:5f:c4:dc:a3:e8:c0:5f:e0:
80:f8:34:f9:2a:18:9b:a2:63:15:a9:70:34:d4:5d:51:4d:5e:
04:48:be:7f:2d:05:7b:69:3e:95:ef:66:94:f5:26:e8:7b:84:
b6:8b:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:34:55 2025 by rpki-client