Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File: mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier: iI7mYxFJ/XrBprkzxBnVsxNKPk+fLFAEepL9X7XRgvk=
Subject key identifier: 3A:EF:DD:AA:B2:9A:57:51:48:1B:F1:78:12:4A:90:35:25:E4:C7:06
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer: /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial: 0DBE
Authority info access: rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number: 0DBE
Signing time: Sun 16 Feb 2025 00:54:11 +0000
Manifest this update: Sun 16 Feb 2025 00:54:10 +0000
Manifest next update: Tue 18 Feb 2025 00:54:10 +0000
Files and hashes: 1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: J2GBiz1tZhOJSno6hs4PAvpwlln83QVXNgbvCIeUYPk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3518 (0xdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ED442AR
Validity
Not Before: Feb 16 00:54:10 2025 GMT
Not After : Feb 18 00:54:10 2025 GMT
Subject: CN=67b13733-bfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:74:a0:f5:c0:b6:4e:67:a6:9c:b1:9b:72:
95:1e:1e:5a:bb:8e:13:c3:c3:58:59:eb:5c:64:eb:
d6:5b:87:42:e4:5b:25:12:48:c5:81:0f:de:a6:5c:
77:fb:40:d5:be:81:46:ad:63:82:24:a0:90:8f:70:
f5:ef:6f:59:55:e0:11:f9:f8:a5:7e:84:d9:da:c0:
09:34:56:30:b1:c0:01:cd:38:37:f7:ce:5e:e9:4c:
74:30:ed:a3:2d:0f:1d:fc:45:e4:d1:49:9a:a1:0e:
b3:5f:c0:dc:cc:39:dd:d9:db:71:6e:31:a9:29:c7:
e2:98:2b:5c:c3:c9:c6:fb:93:f1:5d:20:6c:67:6c:
43:4b:57:05:0d:92:20:f1:d7:3f:60:d1:2e:e3:7b:
c8:a2:fb:53:d8:c0:78:c9:da:b4:00:d3:f8:d6:62:
c4:43:43:c1:cd:72:ce:ff:5b:d6:99:8e:43:f9:cc:
7e:f7:6b:ec:77:38:0e:4e:94:9f:31:24:ab:b5:0d:
39:b5:9d:17:3a:d7:a1:4f:c3:04:93:23:13:c6:66:
eb:59:85:fd:a3:d3:27:e4:9b:aa:64:7b:9d:1e:0e:
94:11:ac:b7:05:60:06:39:49:92:19:8b:51:40:cf:
e5:63:31:4f:51:9b:e0:a6:5f:c4:5e:74:72:b1:b8:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:DD:AA:B2:9A:57:51:48:1B:F1:78:12:4A:90:35:25:E4:C7:06
X509v3 Authority Key Identifier:
keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:32:c6:b9:6a:52:ab:ba:2b:8a:a4:33:d9:e5:4c:9b:c8:94:
f1:92:23:af:e5:f2:a6:98:5e:c1:f1:48:8d:76:7f:c1:73:8b:
83:15:23:07:0b:9f:8f:9c:0d:d4:7a:3c:d3:7d:d3:6d:94:f4:
96:4f:88:ae:5b:41:1c:7d:bb:ca:f3:32:cf:80:60:b3:80:f9:
99:a5:56:5f:ea:40:ef:73:24:10:ec:2e:24:7b:02:9f:0b:2f:
a2:56:42:6c:91:0f:15:46:7f:33:08:a9:03:e6:59:a4:15:64:
a6:8a:ee:c3:7e:eb:c6:0c:15:a9:58:3e:76:81:a0:f9:cc:30:
8b:a1:7e:51:1e:21:7d:de:ef:0a:6e:ae:06:7e:f6:0f:47:5b:
e8:8a:bd:16:da:d9:09:e5:f9:77:43:81:df:8b:b9:30:03:59:
69:d4:b5:2e:3c:d3:19:a6:5b:f7:e2:3b:36:9a:6e:61:47:e0:
2f:8b:c4:99:d6:91:a5:c8:1d:23:14:f9:bb:5a:ae:04:13:40:
3b:f8:ac:1b:43:3b:d8:d1:ca:12:cc:4b:c9:5a:75:93:e8:d7:
55:dd:90:b7:22:5d:b5:43:3d:92:8a:b5:70:bd:48:bf:a5:c8:
ae:49:ac:9b:bc:c8:e7:c5:71:f5:fe:5d:df:79:a3:12:89:58:
05:9b:04:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:31 2025 by rpki-client