Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File: qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier: u006z2dYDSVP2CK+75+kIvPoaBdVxOf4oKf5hSNbLFA=
Subject key identifier: 3F:AC:C9:90:C3:52:06:AD:C2:D3:3F:1C:B0:69:7D:4F:B5:A1:27:6C
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 04E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number: 04E0
Signing time: Sun 24 Nov 2024 01:33:45 +0000
Manifest this update: Sun 24 Nov 2024 01:33:44 +0000
Manifest next update: Tue 26 Nov 2024 01:33:44 +0000
Files and hashes: 1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: Ij8uSz1eNbYakohf0oYpGWsAPcFVuTto7ztB9BqmPYE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: Nov 24 01:33:44 2024 GMT
Not After : Nov 26 01:33:44 2024 GMT
Subject: CN=67428279-bbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:f1:0c:c9:8b:fd:27:0e:91:20:0c:b8:a3:
c6:26:71:21:df:14:24:6b:32:0e:45:3e:df:8c:61:
3f:ad:d6:44:84:21:b2:1a:0f:58:0c:20:6f:0a:13:
ed:25:16:9b:22:7e:37:41:fb:6a:41:31:56:52:fb:
f8:7e:87:13:48:c1:e0:bc:ea:b5:8d:e8:18:96:f0:
e4:a4:df:08:98:78:76:4c:6f:94:f9:9d:c3:20:1a:
77:9f:3e:04:e4:e9:fc:bc:79:47:61:7a:d7:71:37:
21:b4:e7:74:c7:75:e7:df:94:fc:cd:f5:fb:43:2d:
4a:98:9b:15:fa:77:e2:31:6d:e0:34:f4:83:5f:23:
c0:7b:59:2b:65:da:d7:1b:e5:da:65:35:c0:cb:f8:
f4:76:f7:1e:df:63:8a:a2:a6:a4:e1:18:a7:6f:f6:
c6:06:9f:86:ec:0f:e2:df:f3:d6:02:ef:00:a4:2a:
d1:40:f9:43:c6:ad:98:b3:d7:bd:6e:b6:ec:5d:39:
e3:b2:33:26:29:65:c6:fb:d7:09:4f:c8:7e:d3:47:
85:55:ed:37:e3:b6:02:23:2b:94:2a:c4:03:ce:36:
36:6c:e9:76:2c:4f:fa:20:d4:24:b6:3f:9d:1b:a0:
dd:e5:c4:71:a7:29:33:df:bf:f1:14:1a:c5:bf:c1:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:C9:90:C3:52:06:AD:C2:D3:3F:1C:B0:69:7D:4F:B5:A1:27:6C
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:1d:50:ab:11:1e:82:ee:ad:9e:06:24:88:4a:a5:c6:2e:
80:9a:55:4b:a9:df:13:d7:c8:b0:d9:72:a9:e0:1d:6a:a6:d4:
92:29:3d:70:c8:85:c5:ba:0c:83:59:58:53:d3:67:0d:8b:2c:
d3:a6:9f:62:5d:04:c6:9c:36:5d:95:c4:40:d2:10:03:4a:b1:
b5:f9:c4:b0:83:89:b1:89:64:6b:b9:93:60:9a:08:ac:5f:10:
c3:69:54:7c:f6:7e:69:35:02:25:75:fc:d3:d3:4c:b3:dd:8b:
df:58:40:63:a5:8c:53:ac:56:de:c1:7f:a1:12:f8:5b:b0:80:
60:49:4c:ff:65:d9:b0:cb:e3:05:cf:31:03:55:08:e4:19:15:
a5:a6:c3:03:12:aa:97:b5:cb:c4:82:33:b5:67:68:d6:98:d5:
39:5c:86:2d:16:40:7d:02:08:18:bd:30:19:69:76:58:f1:7b:
87:a9:40:47:87:12:27:2a:44:dc:17:e8:b8:26:44:5b:56:73:
2b:0d:d7:ec:4d:a5:8c:92:39:3d:ab:46:6b:0a:a9:1d:6f:1c:
e7:5b:db:c9:ad:22:45:ff:86:f5:c9:46:54:08:91:b3:fa:3f:
5d:4e:26:62:50:69:5f:72:e1:7e:cd:e9:51:8a:c3:e3:d1:f8:
4b:c6:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:49 2024 by rpki-client on console-fra.rpki-client.org