Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
File: iVUnx34gFEZnMJDwgWSPGGEnsbo.mft (raw, json)
Hash identifier: j3lfuez1gOW+/LbpmZ0L4Ce52dAOXLZDCvk1PhtLl9A=
Subject key identifier: C2:59:6D:0F:D0:78:64:B3:94:42:EB:5E:4D:E6:A4:04:67:70:22:31
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Certificate issuer: /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial: 0DBE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
Manifest number: 0DBE
Signing time: Sun 16 Feb 2025 00:54:03 +0000
Manifest this update: Sun 16 Feb 2025 00:54:02 +0000
Manifest next update: Tue 18 Feb 2025 00:54:02 +0000
Files and hashes: 1: iVUnx34gFEZnMJDwgWSPGGEnsbo.crl (hash: Lu17RFAcshdUxegmpG8PLiSdsj3w4cxoqEPhd9MQjlo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3518 (0xdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ED442AF
Validity
Not Before: Feb 16 00:54:02 2025 GMT
Not After : Feb 18 00:54:02 2025 GMT
Subject: CN=67b1372b-7c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:44:0f:34:43:99:b3:55:91:73:fa:60:c7:
14:75:64:ca:a2:8c:3f:58:9e:ed:36:7a:fc:4c:ba:
ce:9e:80:f8:f0:bd:2b:09:60:33:dc:b3:69:93:8f:
9e:3b:bb:ff:50:dd:90:e1:38:9a:46:db:56:c8:c3:
27:ac:b8:35:7a:23:08:0e:f3:75:45:33:6c:b4:88:
9e:10:d9:38:81:87:6e:ff:6d:29:97:06:1a:77:3c:
dc:81:84:0f:10:6a:98:46:15:ed:07:5e:aa:e2:89:
68:d9:32:eb:d4:88:c2:7f:b6:31:9d:89:7d:53:27:
76:8a:9d:87:e1:8e:72:52:d8:86:7f:7a:f9:e2:01:
c3:c6:ec:d5:21:90:47:4b:b6:96:7c:09:c6:1f:3f:
b3:4e:22:f6:b5:57:64:fb:b0:36:f7:f0:fc:4d:ca:
93:c8:8b:bc:22:4e:58:5f:dc:0a:76:f8:de:d7:e3:
b0:a9:74:0f:54:19:8c:4c:a7:5e:37:14:24:f1:08:
3f:34:ed:40:61:ee:8c:83:72:27:a2:8f:a8:fb:64:
cd:2b:87:e6:90:9a:ed:eb:29:10:cb:18:6a:61:ce:
34:97:76:c0:5d:32:59:59:6a:02:c3:24:28:c3:c1:
07:bc:aa:3b:89:30:b2:9a:54:76:53:b4:01:65:53:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:6D:0F:D0:78:64:B3:94:42:EB:5E:4D:E6:A4:04:67:70:22:31
X509v3 Authority Key Identifier:
keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c2:ff:4f:67:99:d7:72:77:b9:3b:ab:62:28:c9:68:19:e9:
af:6c:2b:a5:9a:f5:71:cd:73:b0:ff:d0:a6:37:4a:23:a5:31:
02:c7:2e:12:5f:80:fa:76:ae:0d:19:5d:bb:61:f0:5c:8b:62:
4a:a5:41:4d:6b:24:7c:39:4e:0a:08:13:05:0f:5d:ec:04:fa:
01:35:5d:c3:72:9d:e0:2d:a8:0e:66:c0:a5:b4:0b:23:b2:b6:
57:98:25:52:72:79:5d:79:c6:12:aa:7c:d7:1b:62:d6:08:5c:
ed:ea:66:02:93:8f:b6:d3:c1:30:46:de:94:bc:43:27:e6:d4:
14:27:9a:0c:3f:1d:f4:f9:64:49:11:9f:fa:c8:da:1c:5d:55:
6f:2c:cb:39:39:ae:39:0f:4e:5c:e9:54:4f:aa:87:71:60:12:
21:f0:35:fa:9f:b3:4f:5d:f8:75:87:ea:3d:95:52:d7:b3:38:
b2:ec:c3:a8:4d:05:58:f5:1d:97:47:45:09:63:6d:7d:0e:5d:
66:2c:da:de:95:a6:e1:5c:00:7d:64:67:21:92:64:b5:b5:00:
a7:b2:d4:45:09:12:98:79:46:1a:0e:0e:11:8d:34:2f:7b:41:
74:30:eb:77:ed:fd:a8:42:49:fc:4e:be:81:01:a9:1e:5c:c6:
a9:a6:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:19 2025 by rpki-client