Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File: lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier: AjJqH5vxfm8P14Qqz2jHMHTF+ivS8jwknGnz/zyRq64=
Subject key identifier: 35:0E:0B:02:D6:43:0A:16:A2:3E:5C:3A:7A:7F:E0:59:04:AB:CE:F6
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer: /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial: 0523
Authority info access: rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number: 0522
Signing time: Thu 21 Nov 2024 01:29:20 +0000
Manifest this update: Thu 21 Nov 2024 01:29:20 +0000
Manifest next update: Sat 23 Nov 2024 01:29:20 +0000
Files and hashes: 1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: UCQXzUQPnY76vtC9OIGE9wVqRUCwI+Z16KKCHnHedgI=)
2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Validity
Not Before: Nov 21 01:29:20 2024 GMT
Not After : Nov 23 01:29:20 2024 GMT
Subject: CN=673e8cf0-b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:5a:84:f3:17:3c:54:ff:0d:8b:90:67:69:
ee:bc:0c:05:78:37:12:59:57:b0:6e:64:eb:fd:9c:
9a:cd:4d:5d:a6:a3:a9:e8:0d:24:f6:e9:b6:27:99:
cc:c4:8b:f6:e7:f4:e1:d2:1f:6d:26:ff:cb:3c:72:
aa:e6:90:25:69:73:66:60:b6:fd:5f:27:a8:6c:3a:
af:80:23:28:ff:dc:bb:ac:2b:80:d5:a5:6a:51:d6:
26:1b:5c:e8:02:47:e1:ab:a9:06:70:7b:b1:b8:01:
b2:ee:e9:0a:da:ea:dd:3d:19:35:08:ba:c7:e7:41:
a6:02:5d:26:c2:31:39:48:1a:bf:6c:eb:3e:41:10:
37:b1:d3:4c:fc:43:ba:69:8d:44:7b:54:6d:56:a0:
f6:ca:3e:bd:4f:b0:89:06:6e:d0:79:f0:b1:53:70:
07:09:a8:c2:c7:28:29:47:73:0c:e4:5d:19:7b:da:
ef:45:eb:bc:5c:cb:94:3d:0d:57:f0:7f:b3:6b:ac:
a6:34:c1:14:62:79:44:af:a6:74:d1:bc:f8:82:a8:
53:4e:bd:e1:d0:09:e4:1e:f1:39:13:ee:47:03:37:
bd:b4:dd:cf:cd:3e:ed:a9:b2:99:ed:92:99:a5:af:
53:94:8b:17:c3:7b:cc:b6:fb:8d:99:50:14:2e:a4:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0E:0B:02:D6:43:0A:16:A2:3E:5C:3A:7A:7F:E0:59:04:AB:CE:F6
X509v3 Authority Key Identifier:
keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:9f:6c:70:2b:68:c1:bb:84:ab:dc:fe:f6:25:44:12:23:8a:
cb:c0:bb:b6:bf:d1:32:7b:3d:23:b2:27:9a:f1:54:9a:dd:3d:
0d:52:62:14:4e:0c:5d:b6:98:b5:64:65:ac:c6:ea:ea:21:fb:
c6:5c:96:0a:68:3b:09:79:db:2e:3a:6b:e4:65:6a:f1:c3:a9:
b0:14:76:5c:2b:c2:9f:aa:ed:bb:fe:61:0b:a6:5f:1f:aa:c4:
e4:33:52:b1:82:49:b0:2c:c1:f8:55:c5:3b:0e:93:2f:65:78:
c7:d8:96:43:9f:6f:44:2a:05:52:9a:25:c9:d7:c1:b7:7d:37:
b2:9e:69:70:76:4b:b5:82:ed:e0:f8:5b:36:ad:df:f8:0c:8d:
81:65:56:91:3c:36:c2:fe:63:7d:06:21:b2:5d:56:4c:36:06:
4d:70:26:b5:b5:4f:e0:a9:30:6b:b9:9e:62:84:a6:7e:4d:ce:
77:07:1e:5d:8b:c1:17:0c:18:f8:7d:ae:f5:42:28:1f:9f:4b:
11:f4:8e:65:db:4e:7e:3f:d7:23:16:83:d2:c4:d0:4b:a1:b0:
c3:0d:bc:b6:92:3b:cf:2f:06:30:2c:55:fb:4f:53:e5:a3:6c:
bb:28:5a:41:13:75:e3:91:54:c3:15:0d:d0:9c:2b:b6:17:ed:
cc:6a:58:01
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUJERDdSSTExMC8GA1UEBRMoOTcyQ0ZEQUVFQjEyNkY2RkNENDY5NkE1OTBGNzAx
ODgzN0FBNUZGMjAeFw0yNDExMjEwMTI5MjBaFw0yNDExMjMwMTI5MjBaMBgxFjAU
BgNVBAMTDTY3M2U4Y2YwLWI0ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDic1qE8xc8VP8Ni5Bnae68DAV4NxJZV7BuZOv9nJrNTV2mo6noDST26bYn
mczEi/bn9OHSH20m/8s8cqrmkCVpc2Zgtv1fJ6hsOq+AIyj/3LusK4DVpWpR1iYb
XOgCR+GrqQZwe7G4AbLu6Qra6t09GTUIusfnQaYCXSbCMTlIGr9s6z5BEDex00z8
Q7ppjUR7VG1WoPbKPr1PsIkGbtB58LFTcAcJqMLHKClHcwzkXRl72u9F67xcy5Q9
DVfwf7NrrKY0wRRieUSvpnTRvPiCqFNOveHQCeQe8TkT7kcDN7203c/NPu2pspnt
kpmlr1OUixfDe8y2+42ZUBQupNHZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUNQ4L
AtZDChaiPlw6en/gWQSrzvYwHwYDVR0jBBgwFoAUlyz9rusSb2/NRpalkPcBiDeq
X/IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVCREQ3LzY3RjAwNEM2QkUxRDExRUI4NTc2Qjk0MkY4QUVBMjI4L2x5ejly
dXNTYjJfTlJwYWxrUGNCaURlcVhfSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2x5ejlydXNTYjJfTlJwYWxrUGNCaURlcVhfSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUJERDcvNjdGMDA0QzZCRTFEMTFFQjg1NzZCOTQyRjhBRUEy
MjgvbHl6OXJ1c1NiMl9OUnBhbGtQY0JpRGVxWF9JLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWn2xwK2jBu4Sr3P72JUQSI4rLwLu2v9Ey
ez0jsiea8VSa3T0NUmIUTgxdtpi1ZGWsxurqIfvGXJYKaDsJedsuOmvkZWrxw6mw
FHZcK8Kfqu27/mELpl8fqsTkM1KxgkmwLMH4VcU7DpMvZXjH2JZDn29EKgVSmiXJ
18G3fTeynmlwdku1gu3g+Fs2rd/4DI2BZVaRPDbC/mN9BiGyXVZMNgZNcCa1tU/g
qTBruZ5ihKZ+Tc53Bx5di8EXDBj4fa71Qigfn0sR9I5l205+P9cjFoPSxNBLobDD
Dby2kjvPLwYwLFX7T1Plo2y7KFpBE3XjkVTDFQ3QnCu2F+3MalgB
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:26 2024 by rpki-client on console-ams.rpki-client.org