Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File: 9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier: UexSUpFRUe8qeOVfR+mf4lKdUxekI7ZjCYQxNvKDLIs=
Subject key identifier: 53:DF:C1:14:0D:5F:71:A6:2E:34:F2:2F:FA:25:81:21:34:75:F2:6F
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer: /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial: E4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number: E3
Signing time: Sun 16 Feb 2025 03:06:54 +0000
Manifest this update: Sun 16 Feb 2025 03:06:53 +0000
Manifest next update: Tue 18 Feb 2025 03:06:53 +0000
Files and hashes: 1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: j+I+RcNggFMEM+Oa3svpvTCt+neE/XdMc29kY1kap1s=)
2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6B77AF
Validity
Not Before: Feb 16 03:06:53 2025 GMT
Not After : Feb 18 03:06:53 2025 GMT
Subject: CN=67b1564e-90c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:31:16:aa:a8:9c:32:fd:1d:65:e2:ec:3b:
06:83:0f:0b:c4:e9:5b:3c:04:ff:f9:53:47:08:e5:
5a:f5:fe:ac:69:3c:d1:3d:5e:bc:1e:8b:b4:88:06:
7f:3c:2b:36:97:64:c4:be:40:f4:e4:b2:dc:e1:8d:
22:7e:04:1e:2a:4a:ed:4e:19:c5:27:6c:9b:52:59:
b1:b3:0a:00:5a:15:3b:e3:4c:fa:5c:0e:00:fc:3b:
15:43:2f:0f:bf:2e:e9:00:17:0c:4d:b2:3e:a1:40:
1a:70:94:f5:44:ed:d2:59:26:96:d3:3f:ea:43:e3:
16:85:36:d4:cc:23:e4:e3:03:85:77:f6:3b:3d:8d:
9a:02:36:fd:87:cc:af:4d:ff:1f:e7:5d:54:ec:10:
f9:a7:ff:b8:88:cc:30:a5:b8:b8:31:d2:70:ee:c0:
4c:e0:d3:44:33:f9:9e:64:cd:e0:28:49:3b:32:9c:
0a:28:56:47:d8:e6:b6:72:07:e6:3d:7c:e7:36:8d:
0d:ba:80:5b:4f:1c:c5:76:d9:6e:85:d0:95:2b:b4:
fd:84:d5:d1:04:00:f3:7e:0a:44:1f:96:34:32:55:
cc:3b:e0:45:19:4d:b3:ff:6e:fb:9b:32:7b:5c:d3:
ae:62:a7:5f:1f:a1:12:a4:a8:3d:ba:f7:fd:01:8a:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:C1:14:0D:5F:71:A6:2E:34:F2:2F:FA:25:81:21:34:75:F2:6F
X509v3 Authority Key Identifier:
keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:1e:68:7f:c2:3d:3d:7c:08:40:5e:f7:f9:2e:df:88:95:42:
34:23:38:f2:9d:f9:c6:be:e1:2a:5d:9b:10:7e:69:21:f4:39:
1b:02:72:21:83:20:e3:51:1b:0e:e3:f8:39:68:4a:31:b2:73:
0c:4d:b1:6b:d9:f8:38:e1:1d:19:c3:06:6f:bc:be:20:02:cf:
5e:af:bb:ef:4a:62:2e:e6:2a:2d:ca:c8:62:a3:6a:9b:f4:05:
d9:32:04:cb:03:2d:6a:92:44:5a:66:a2:f2:78:52:58:05:b2:
dc:58:70:fb:5f:a8:a3:d3:eb:d3:f9:12:1d:df:48:5b:18:ed:
13:a4:ce:e5:c8:39:36:2c:ee:fa:f3:c8:f6:85:a0:06:e7:f6:
be:dd:ac:b4:73:90:3b:05:eb:7e:af:99:cb:cc:17:6c:f6:32:
c2:8d:4f:e0:d3:60:ad:3d:7b:11:5e:ab:e5:be:91:57:6c:fd:
21:0f:e7:b9:c9:4c:e9:41:20:95:3c:8d:80:98:c4:09:80:f1:
e5:e1:13:2f:b0:bf:d3:7c:8b:8a:23:64:7d:7e:88:1a:c1:19:
40:f5:4d:0f:b7:e1:24:b1:2f:e2:96:c9:da:04:f5:0a:d8:64:
eb:33:2a:61:2d:c7:89:2a:b3:dc:6e:ee:83:39:08:fd:ee:42:
c0:ac:5f:60
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTZCNzdBRjExMC8GA1UEBRMoRjVERkY2NEEzOUQ4MDA3MDQ0RDc2NzFDQkNBQUEx
RTE2MTU3NDVBMDAeFw0yNTAyMTYwMzA2NTNaFw0yNTAyMTgwMzA2NTNaMBgxFjAU
BgNVBAMTDTY3YjE1NjRlLTkwYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4sDEWqqicMv0dZeLsOwaDDwvE6Vs8BP/5U0cI5Vr1/qxpPNE9Xrwei7SI
Bn88KzaXZMS+QPTkstzhjSJ+BB4qSu1OGcUnbJtSWbGzCgBaFTvjTPpcDgD8OxVD
Lw+/LukAFwxNsj6hQBpwlPVE7dJZJpbTP+pD4xaFNtTMI+TjA4V39js9jZoCNv2H
zK9N/x/nXVTsEPmn/7iIzDCluLgx0nDuwEzg00Qz+Z5kzeAoSTsynAooVkfY5rZy
B+Y9fOc2jQ26gFtPHMV22W6F0JUrtP2E1dEEAPN+CkQfljQyVcw74EUZTbP/bvub
Mntc065ip18foRKkqD269/0BipFfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUU9/B
FA1fcaYuNPIv+iWBITR18m8wHwYDVR0jBBgwFoAU9d/2SjnYAHBE12ccvKqh4WFX
RaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2Qjc3LzNDRkZBMzgwNDJDQjExRUY4QjlBMzdBRTc2MkU5NTFBLzlkXzJT
am5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlkXzJTam5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTZCNzcvM0NGRkEzODA0MkNCMTFFRjhCOUEzN0FFNzYy
RTk1MUEvOWRfMlNqbllBSEJFMTJjY3ZLcWg0V0ZYUmFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjHmh/wj09fAhAXvf5Lt+IlUI0Izjy
nfnGvuEqXZsQfmkh9DkbAnIhgyDjURsO4/g5aEoxsnMMTbFr2fg44R0ZwwZvvL4g
As9er7vvSmIu5iotyshio2qb9AXZMgTLAy1qkkRaZqLyeFJYBbLcWHD7X6ij0+vT
+RId30hbGO0TpM7lyDk2LO7688j2haAG5/a+3ay0c5A7Bet+r5nLzBds9jLCjU/g
02CtPXsRXqvlvpFXbP0hD+e5yUzpQSCVPI2AmMQJgPHl4RMvsL/TfIuKI2R9foga
wRlA9U0Pt+EksS/ilsnaBPUK2GTrMyphLceJKrPcbu6DOQj97kLArF9g
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:08 2025 by rpki-client