Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File: xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier: CNaqJfCRZUL591KHNw7ohK+gwfPA3I8NMUyarJmKufM=
Subject key identifier: 2D:2F:2C:B6:17:97:41:CB:C2:E9:B4:87:30:DD:85:A9:05:92:EC:57
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer: /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial: 034B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number: 034A
Signing time: Sat 29 Mar 2025 02:45:27 +0000
Manifest this update: Sat 29 Mar 2025 02:45:26 +0000
Manifest next update: Mon 31 Mar 2025 02:45:26 +0000
Files and hashes: 1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: hsTFF+Vncb5V2cZ96GDO0+FTtkFCbm6llZTbyVf4jRk=)
2: DC60099290ED11EDA023F07CF1222468.roa (hash: 9KneDc8AxCXKlLKwihUlSkgU/m9aNJKS4oxTHOBZ0ns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8936AR
Validity
Not Before: Mar 29 02:45:26 2025 GMT
Not After : Mar 31 02:45:26 2025 GMT
Subject: CN=67e75ec7-b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:c5:bb:2b:cd:53:e3:ed:a3:98:4a:49:a3:
74:14:15:47:29:1e:37:dd:48:52:6c:36:86:e8:52:
10:de:6d:ea:2f:e8:1e:18:1d:58:a9:af:12:fa:82:
a6:ff:7a:16:f7:72:45:21:fb:fe:13:dc:0d:7e:0a:
05:e7:3d:86:47:ec:eb:ab:63:28:02:29:16:69:bd:
f4:1b:10:24:7b:29:06:e4:a5:7e:0d:01:4b:eb:2b:
33:a0:2d:df:b5:b8:56:86:26:c3:cc:89:b8:f4:f0:
90:07:55:9b:ff:a5:dc:2e:71:1d:ad:7a:06:d3:a8:
b4:83:42:f5:35:5e:c3:d5:88:85:43:9f:90:83:11:
21:c4:43:c8:fe:b9:78:77:29:51:87:40:a1:56:b3:
79:e8:c7:5f:4a:aa:ae:4b:7b:96:4b:91:25:19:c9:
c5:36:1f:d6:be:e7:77:ef:39:99:ef:47:6a:9a:07:
ad:bc:08:52:25:2a:8c:d3:98:d4:85:cf:11:ed:3d:
7a:de:2d:fd:3c:40:98:4a:1f:62:24:cd:26:8b:78:
23:b0:90:6e:8e:56:6c:3e:e8:f8:42:61:37:39:04:
b0:a8:bc:5d:fc:e2:72:2c:9f:a5:06:c6:43:45:f7:
91:06:3d:de:c5:b0:83:60:5f:ca:74:11:00:39:5f:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:2C:B6:17:97:41:CB:C2:E9:B4:87:30:DD:85:A9:05:92:EC:57
X509v3 Authority Key Identifier:
keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:21:77:85:b5:0b:85:32:aa:4e:24:e5:a2:63:0f:c5:62:76:
e8:2f:8a:77:70:a0:46:6c:0c:87:74:23:4a:15:f0:6d:ca:15:
ab:25:03:77:a8:83:78:20:3c:d2:be:b9:23:5d:19:25:81:3d:
0c:b7:9d:5d:8d:c9:ed:bf:4e:02:4f:b4:76:24:c5:a3:0e:ad:
f4:0e:c8:25:22:ee:bb:0c:a7:dc:b2:4b:7e:55:c6:77:ae:7b:
e2:0b:33:06:7a:de:30:08:d4:7d:e8:99:ad:e3:58:fa:1a:80:
07:43:bc:37:07:cf:98:76:4f:5f:e8:b7:92:c0:cc:40:09:2b:
96:bd:66:6b:cd:0e:5a:b3:d9:df:78:d8:ed:aa:32:9c:25:fe:
bd:8d:90:04:c2:95:c2:7b:ff:55:a7:93:76:ef:1f:66:34:f5:
ba:76:de:50:e8:9f:83:af:90:45:34:88:d8:75:b0:ef:d0:15:
c5:5f:a4:3a:df:98:15:3b:ce:c4:90:e2:cd:58:df:70:6f:85:
79:a7:3f:24:bf:08:44:ea:be:54:0f:7c:e2:fd:43:03:a5:e7:
1f:1a:c2:29:77:fc:c5:3b:a8:82:db:6e:fd:c7:b2:03:7a:5c:
db:0d:03:8d:1a:37:f3:e9:3f:a6:52:29:b8:7a:a0:7e:ab:e8:
97:45:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:15:59 2025 by rpki-client