Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
File: iVUnx34gFEZnMJDwgWSPGGEnsbo.mft (raw, json)
Hash identifier: 4yYoYLVGMssDM/UnRp5Ov0JDHyFQuC1mRh5Uw/G7+HU=
Subject key identifier: B2:DC:F7:77:98:B0:27:75:7F:72:AC:DD:D9:90:E7:A1:ED:D9:33:8F
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Certificate issuer: /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial: 0DD7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
Manifest number: 0DD7
Signing time: Thu 13 Mar 2025 00:54:01 +0000
Manifest this update: Thu 13 Mar 2025 00:54:00 +0000
Manifest next update: Sat 15 Mar 2025 00:54:00 +0000
Files and hashes: 1: iVUnx34gFEZnMJDwgWSPGGEnsbo.crl (hash: caHXIFMLeelq3zeoz86Ismu96WAwvGg/m5Ezujp+2z0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3543 (0xdd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ED442AF
Validity
Not Before: Mar 13 00:54:00 2025 GMT
Not After : Mar 15 00:54:00 2025 GMT
Subject: CN=67d22ca9-a49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:a1:c9:82:50:22:bd:28:21:79:75:f4:1d:
a8:92:bf:54:da:18:a5:b9:28:76:43:8e:76:d2:4e:
8f:0f:a1:65:43:31:f2:aa:1f:07:99:c1:b2:c7:95:
03:86:6e:56:2a:b2:1c:25:c1:55:97:2c:b0:ef:6c:
36:e4:7a:a1:63:2d:ed:ed:a7:bc:a8:c2:9f:dc:e0:
5f:57:02:16:37:39:2a:06:66:d1:45:4e:f3:0f:33:
4a:09:d5:03:cc:30:cf:87:01:49:27:59:26:a9:68:
0f:aa:37:e2:b6:bd:8f:33:b8:1c:74:13:ce:98:ad:
58:5a:d3:6d:d1:11:30:73:dd:53:28:28:d2:71:33:
8d:25:e5:3b:2f:49:12:82:fc:61:bf:14:97:19:3b:
9c:e6:15:11:6a:a3:d9:0f:23:f0:00:8e:9b:90:b7:
b0:80:62:be:a4:a6:a0:84:bb:cb:97:17:5a:cc:0d:
48:7b:a5:67:1e:22:5c:46:a2:9e:a2:9b:73:d2:e3:
8e:97:09:a3:4e:95:c2:2d:64:a8:c1:a6:58:20:69:
b7:31:01:94:1d:ff:af:ac:62:28:1d:67:03:a2:d5:
51:8a:16:9b:bf:b6:55:66:49:1f:14:1e:b4:5c:4f:
fb:53:a1:af:1c:43:b5:e5:8b:37:a7:10:4f:bc:8b:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DC:F7:77:98:B0:27:75:7F:72:AC:DD:D9:90:E7:A1:ED:D9:33:8F
X509v3 Authority Key Identifier:
keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:03:46:70:78:c6:26:37:b6:ff:a6:3b:c9:a7:6a:90:28:a5:
33:11:09:6b:85:d3:54:1a:b2:e1:67:db:14:6a:fa:15:28:ed:
8c:d3:89:1f:b0:ad:88:1d:f3:f2:72:5f:23:e1:c7:ed:ed:d9:
c9:e0:3f:14:04:9e:87:14:e0:48:b8:a1:c2:08:82:c3:2e:f2:
a2:f1:41:e8:82:0b:d1:96:b9:2f:4e:c3:0b:d1:bb:17:36:7e:
8e:41:80:03:92:5a:91:dd:cc:2a:71:59:10:33:1d:b9:e0:22:
2e:c5:1a:fd:8f:31:1e:8e:c6:93:85:b7:f7:8b:ca:d5:a3:a2:
85:6b:71:71:1e:26:a7:5a:06:a4:11:44:06:9a:75:d7:0c:52:
8b:67:a6:8f:5f:69:6e:87:8d:97:f6:59:c3:22:02:20:23:0f:
0b:c4:ba:70:29:ad:69:2a:f6:19:39:c3:78:10:82:b8:ae:1c:
3a:83:66:58:fc:d1:85:11:f9:9d:1a:d0:50:a3:97:54:c7:4d:
55:e6:d0:c2:18:c5:8d:af:9c:99:96:fe:d3:82:6f:aa:8f:c8:
df:41:01:75:d5:7e:da:e3:6c:23:9c:96:fe:db:4a:45:9b:04:
ea:10:94:6e:af:c6:71:ba:e0:5d:1e:bb:26:cb:fc:64:01:4a:
8a:6f:bf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:01 2025 by rpki-client