Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: U27zWoPukDepJuM03sPobySJhsWlAGskt4eKiD4yucM=
Subject key identifier: 52:61:A0:3D:EE:ED:67:1C:E0:87:3B:7B:9C:EC:7B:80:06:B9:06:10
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 01B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 01B8
Signing time: Thu 03 Apr 2025 02:55:40 +0000
Manifest this update: Thu 03 Apr 2025 02:55:39 +0000
Manifest next update: Sat 05 Apr 2025 02:55:39 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: T1b0gv0Uz7RZ/TX/rBluGUb4naWsJanWsZLvir0dTNQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF
Validity
Not Before: Apr 3 02:55:39 2025 GMT
Not After : Apr 5 02:55:39 2025 GMT
Subject: CN=67edf8ab-7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:ae:75:99:34:8a:51:bd:29:10:e3:88:76:
bf:2d:1b:27:85:e2:90:1c:54:f0:ab:dc:45:46:08:
c6:89:58:f9:49:a4:2c:60:37:a8:19:de:f8:c3:28:
6a:8d:56:15:a2:fe:9b:f5:28:5b:75:1c:5d:2c:8d:
b9:c9:48:42:9e:41:4a:c9:4f:d1:c9:03:06:0b:c6:
50:f7:36:04:bf:94:ba:97:64:f2:42:21:4b:d8:d9:
48:da:c1:f3:2e:37:eb:ca:da:72:55:d5:21:44:58:
dd:e9:5b:be:91:e4:29:74:fd:1e:c2:30:a5:e7:76:
a1:11:b7:4a:14:5f:3f:8a:22:07:11:56:94:f0:86:
f5:b5:70:d9:ee:a8:a3:0f:73:4a:1e:2c:a3:05:e0:
34:20:14:9b:0b:3a:03:38:1c:1e:15:ac:ee:12:dd:
ac:0e:bd:16:95:25:4d:c3:77:3c:a1:5d:9d:a8:e3:
03:a2:ab:4f:bb:31:32:6e:c5:09:ae:11:8d:e1:57:
9c:01:4d:eb:40:bc:e3:e7:98:18:a3:0d:27:14:68:
ad:fe:99:71:b7:09:0f:74:db:37:ff:bd:5b:7d:10:
d2:30:2e:92:84:00:99:8b:74:5e:03:e8:e2:8e:d0:
01:50:d5:a1:0a:d0:88:7a:b4:68:e9:c1:e3:fa:56:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:A0:3D:EE:ED:67:1C:E0:87:3B:7B:9C:EC:7B:80:06:B9:06:10
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:7d:12:16:26:97:ba:22:ef:34:4c:35:66:a9:b8:b3:61:13:
c3:fb:9f:37:2b:41:e6:b0:fe:cc:dd:76:5d:f3:7f:eb:28:98:
83:ea:87:b2:46:50:22:87:68:63:c4:00:fe:ea:d5:f8:61:9e:
61:61:0f:8a:d9:ea:2a:fc:96:bc:3f:e1:f7:ea:55:4b:35:9b:
b1:ab:89:a8:02:18:12:f2:63:fd:d2:db:13:91:be:3f:db:89:
81:98:59:bb:1d:d7:94:19:1d:4a:f7:de:f2:d2:d3:42:c8:1a:
e9:33:d5:d5:58:c9:1c:7f:01:84:70:50:8c:1c:d0:f8:ef:ce:
b1:00:50:ca:c6:55:06:57:32:fb:4d:4f:37:33:fd:fe:20:8f:
2b:a9:18:8b:cd:c4:5b:67:1d:80:e5:f5:a3:2e:70:4c:05:58:
37:96:60:db:ec:40:21:30:2e:87:4b:94:88:cf:f1:e6:0d:68:
03:b9:b8:0b:e3:b6:53:22:27:7b:c7:d3:12:16:03:f1:b2:e9:
b3:11:28:82:7c:e0:f3:8b:c1:3f:7a:8c:ad:e9:f6:14:d0:f5:
61:8b:34:b2:24:17:74:f4:aa:f2:e0:d9:6d:14:32:7d:40:e8:
a4:a0:13:d5:a0:2f:d0:31:ec:85:b5:ae:de:97:4a:71:a8:69:
2c:b6:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:15:54 2025 by rpki-client