Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File: 9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier: i3OHFt+CeIfJKbzU5bZYzCMhqqRpVDAGQGzrckIFICA=
Subject key identifier: 27:9C:87:5A:DE:81:58:B1:C4:AF:6F:D3:77:2C:BF:FA:96:8D:FD:28
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer: /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial: FD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number: FC
Signing time: Thu 13 Mar 2025 03:09:03 +0000
Manifest this update: Thu 13 Mar 2025 03:09:03 +0000
Manifest next update: Sat 15 Mar 2025 03:09:03 +0000
Files and hashes: 1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: 4th3VO5kmJggl9mlDQoNthShvc1gaKq25gO4qank5bQ=)
2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6B77AF
Validity
Not Before: Mar 13 03:09:03 2025 GMT
Not After : Mar 15 03:09:03 2025 GMT
Subject: CN=67d24c4f-935b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:90:e7:b6:07:05:c8:32:b7:76:a5:9e:46:
ac:42:e0:12:c5:f2:9b:76:6e:2c:6b:8d:e8:11:77:
f4:07:d7:0c:a7:d7:16:79:4d:19:38:77:c7:bf:5c:
2f:89:cc:1b:b8:8e:1c:b4:2f:9b:d0:1e:20:fd:b2:
b9:20:8d:6a:08:95:61:fa:41:53:36:80:75:bc:42:
19:c4:c3:c8:49:3f:c8:9e:c4:22:c5:ff:16:1a:ac:
be:45:0f:3f:2a:b5:49:2b:c9:89:a7:20:26:41:0c:
9e:1b:b1:9b:8a:57:de:0e:02:45:65:31:49:10:f0:
34:eb:84:8e:11:d9:b6:8b:b7:51:08:69:40:75:0f:
d3:96:ab:23:15:61:6b:e9:f2:ca:d8:bf:92:81:59:
85:80:f3:c7:0d:28:01:09:1c:76:e4:0a:a8:b2:a3:
25:cf:28:79:2c:12:0f:83:3f:c3:8f:7b:b0:4a:ec:
60:d8:16:06:e7:0c:91:75:63:23:25:ba:b2:37:16:
c2:d8:fa:5a:b3:29:12:99:6e:9f:93:be:03:0e:30:
a1:84:60:20:ca:98:84:7d:52:4a:a4:cc:83:18:e1:
35:ce:da:d8:3b:91:a5:53:c9:81:14:49:61:d4:0c:
9d:d3:ba:3c:bd:25:c6:f2:f0:2f:60:92:04:70:1b:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:87:5A:DE:81:58:B1:C4:AF:6F:D3:77:2C:BF:FA:96:8D:FD:28
X509v3 Authority Key Identifier:
keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:15:74:4d:5b:23:a9:ce:88:ac:8b:1f:75:1d:11:cb:23:f1:
29:d8:a3:b3:4d:a0:8b:4f:eb:b4:ca:e4:07:31:bd:01:db:22:
48:f9:2e:70:ca:6d:a5:27:4b:28:3f:55:21:55:f3:a4:06:33:
93:26:d8:50:db:09:b2:03:05:a3:82:25:83:5b:07:4f:b5:bf:
a9:d0:ed:4b:68:76:db:98:8b:af:c7:97:59:b2:48:10:87:4e:
a6:b6:8d:7c:90:05:89:1e:58:6d:d9:ec:c4:51:36:db:1f:5f:
5e:a6:c1:85:36:f8:f2:1c:d8:8c:d8:0c:0e:01:53:b9:f6:6d:
86:d5:6a:a7:1c:4f:f1:6d:21:fa:73:eb:38:75:44:e4:8b:d8:
f9:ca:29:5c:6a:5a:a8:f7:ab:a5:20:71:e5:a8:3d:c5:5d:d5:
16:88:24:f7:6e:46:2d:e6:de:26:8f:97:47:5c:9b:7e:a4:3e:
e3:1d:65:fa:7a:2d:e1:1b:2e:ec:49:99:69:0b:8f:3e:43:d9:
73:04:c4:7d:d3:88:00:e3:4a:0a:f7:15:0b:78:9d:4a:9e:da:
58:92:32:9b:71:86:74:9f:26:28:88:c8:66:eb:db:3b:35:1c:
78:a9:a5:36:32:b7:1b:fd:2d:7f:08:3e:11:dd:2b:62:e6:71:
13:8b:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:40:09 2025 by rpki-client