Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File: qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier: baO58/GbqMqw3TSVHrp+NTUY1jZ0eOt7Mp3+2OTrcZE=
Subject key identifier: CC:5F:4B:D1:4B:B9:E3:4D:DC:6B:F2:A2:32:0C:1A:BA:29:01:CC:3A
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 0413
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number: 0411
Signing time: Sun 05 May 2024 01:29:51 +0000
Manifest this update: Sun 05 May 2024 01:29:51 +0000
Manifest next update: Tue 07 May 2024 01:29:51 +0000
Files and hashes: 1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: wwSyJTHd6wG081YIASrQJyMv9mI1DDI25Qr13ty+eFk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: May 5 01:29:51 2024 GMT
Not After : May 7 01:29:51 2024 GMT
Subject: CN=6636e10f-9cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:06:2d:31:7b:5a:77:4b:94:5f:2d:3a:d5:
ef:9e:78:9e:ee:4d:43:46:82:79:d5:b3:00:3a:73:
bf:a2:34:fa:7a:86:97:82:d7:0e:82:b3:2c:66:b4:
f5:52:d8:80:88:e5:5f:16:17:f3:bf:a8:e0:f5:22:
18:9f:ef:7f:e6:8c:98:7e:e3:74:87:a0:cd:85:6b:
55:13:28:45:2b:6a:65:fd:da:60:9b:d2:79:aa:56:
0b:fc:52:17:3b:0f:26:6d:49:1a:d7:e2:1b:be:f9:
7d:e2:4f:08:73:15:c3:6b:d1:46:62:cc:2c:c4:d1:
5d:7e:2e:03:d1:1f:5d:0b:3f:d3:b7:b8:71:23:7f:
53:36:19:9f:cf:ae:93:1d:01:17:4a:56:17:2b:2d:
ce:69:39:3b:5e:f2:19:01:5d:65:77:ab:c3:22:9c:
d3:57:4c:62:ac:a3:19:0b:f2:1e:2f:d8:26:65:8c:
b3:e8:d9:27:6d:ab:b3:de:43:50:cc:2a:4b:88:67:
35:fb:99:72:57:87:bd:bc:fa:1b:8a:33:8e:17:3e:
39:16:79:ff:12:e7:b5:18:56:c7:5d:8e:10:fc:63:
63:65:5a:a8:70:54:6a:06:9b:af:39:7b:1d:ba:18:
f7:85:51:fe:05:44:ed:cb:42:30:dc:99:03:8b:64:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5F:4B:D1:4B:B9:E3:4D:DC:6B:F2:A2:32:0C:1A:BA:29:01:CC:3A
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9f:93:68:98:2a:8f:0a:6c:f4:bd:bd:e2:e0:f7:28:4a:61:
cc:24:fc:49:d4:39:d0:1c:e2:ad:b0:57:ce:92:9c:41:3d:08:
c6:8c:f7:98:ac:96:43:5a:a7:9e:2a:aa:a9:c6:28:95:d5:ad:
6b:84:68:df:2b:c4:de:e0:ea:8a:44:e9:47:34:9f:d0:d1:f8:
49:62:72:9c:d0:25:93:a9:12:a7:22:ae:ac:67:0e:1b:b4:f8:
d1:00:09:e4:1b:ba:1b:7d:32:ae:71:0e:24:42:a7:0a:b2:44:
71:2e:f3:d0:6d:6a:12:b8:17:73:1a:22:40:2a:d1:3e:1c:2b:
13:78:c0:64:8b:76:d8:8e:33:1f:c9:18:97:25:a8:b7:62:9e:
d2:df:68:f3:4c:d4:87:ec:0d:79:5f:c3:d8:51:f0:2c:95:5c:
fd:40:b9:94:00:c5:7e:80:ef:05:f9:b2:d3:79:94:4e:11:23:
ac:85:15:b0:1f:eb:df:3c:0d:72:c5:94:54:df:ff:a8:e7:d3:
31:92:78:c4:8c:80:65:5c:9e:c3:07:c6:f1:f5:80:6e:f4:c9:
0c:40:d8:11:30:fa:f9:f3:a6:ed:de:55:a6:be:b6:18:b9:6c:
b6:67:3d:44:b7:f1:a8:ca:3b:01:ce:d8:77:f4:ee:e9:f6:61:
b2:ee:7a:9f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTcwRjRBRjExMC8GA1UEBRMoQTk0MjNGQTRDMDAyNkQyRTREQTgyMTJEMTI4RDlE
MjcwN0U4MURDOTAeFw0yNDA1MDUwMTI5NTFaFw0yNDA1MDcwMTI5NTFaMBgxFjAU
BgNVBAMTDTY2MzZlMTBmLTljYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtWgYtMXtad0uUXy061e+eeJ7uTUNGgnnVswA6c7+iNPp6hpeC1w6Csyxm
tPVS2ICI5V8WF/O/qOD1Ihif73/mjJh+43SHoM2Fa1UTKEUramX92mCb0nmqVgv8
Uhc7DyZtSRrX4hu++X3iTwhzFcNr0UZizCzE0V1+LgPRH10LP9O3uHEjf1M2GZ/P
rpMdARdKVhcrLc5pOTte8hkBXWV3q8MinNNXTGKsoxkL8h4v2CZljLPo2Sdtq7Pe
Q1DMKkuIZzX7mXJXh728+huKM44XPjkWef8S57UYVsddjhD8Y2NlWqhwVGoGm685
ex26GPeFUf4FRO3LQjDcmQOLZEbvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzF9L
0Uu5403ca/KiMgwauikBzDowHwYDVR0jBBgwFoAUqUI/pMACbS5NqCEtEo2dJwfo
HckwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU3MEY0LzY5NTY4NDE2RjA1OTExRUJBRjU2RjQzQkQ4QTAxNENFL3FVSV9w
TUFDYlM1TnFDRXRFbzJkSndmb0hjay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FVSV9wTUFDYlM1TnFDRXRFbzJkSndmb0hjay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTcwRjQvNjk1Njg0MTZGMDU5MTFFQkFGNTZGNDNCRDhB
MDE0Q0UvcVVJX3BNQUNiUzVOcUNFdEVvMmRKd2ZvSGNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAen5NomCqPCmz0vb3i4PcoSmHMJPxJ
1DnQHOKtsFfOkpxBPQjGjPeYrJZDWqeeKqqpxiiV1a1rhGjfK8Te4OqKROlHNJ/Q
0fhJYnKc0CWTqRKnIq6sZw4btPjRAAnkG7obfTKucQ4kQqcKskRxLvPQbWoSuBdz
GiJAKtE+HCsTeMBki3bYjjMfyRiXJai3Yp7S32jzTNSH7A15X8PYUfAslVz9QLmU
AMV+gO8F+bLTeZROESOshRWwH+vfPA1yxZRU3/+o59MxknjEjIBlXJ7DB8bx9YBu
9MkMQNgRMPr586bt3lWmvrYYuWy2Zz1Et/GoyjsBzth39O7p9mGy7nqf
-----END CERTIFICATE-----
Generated at Sun May 5 02:12:58 2024 by rpki-client on console-ams.rpki-client.org