Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: ji6SpX3E+MYlbrqUMBi1A2bsAV5arHzoMRwNin5tthk=
Subject key identifier: A0:FD:C9:5C:38:3C:95:7D:23:02:6B:BF:C6:5B:AA:5F:3D:37:C3:F6
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 01FB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 01FA
Signing time: Sat 07 Jun 2025 04:22:27 +0000
Manifest this update: Sat 07 Jun 2025 04:22:27 +0000
Manifest next update: Mon 09 Jun 2025 04:22:27 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: vqBp1Mm6RRpyTGcQtakQCR2Ba25M/ReQI+V1sfFOeVk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 04:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Jun 7 04:22:27 2025 GMT
Not After : Jun 9 04:22:27 2025 GMT
Subject: CN=6843be83-15b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5c:2c:64:38:14:20:7d:8a:bf:00:38:8a:10:
da:3b:f4:a6:e8:18:67:cc:06:3f:cf:01:b5:7d:bc:
c1:8f:61:b2:f0:97:a6:00:dc:d6:0c:95:d7:76:56:
9d:d1:47:d8:75:21:7c:08:82:0c:1d:1e:4c:ec:35:
0f:1d:66:c5:20:7d:18:31:33:57:c9:80:1c:51:a2:
39:c4:4f:c8:2e:94:9d:94:84:b5:01:cb:6c:f5:5a:
fb:6b:4a:59:68:8e:ba:de:14:9b:ab:8e:ca:7a:48:
03:e1:a8:33:a4:5f:7d:c0:5a:d7:75:dc:e0:55:c7:
f3:2b:9c:64:62:bf:e8:3e:77:1e:5f:12:35:5d:49:
05:48:84:83:c3:84:dd:76:72:15:e4:db:85:c7:98:
b8:3c:ea:88:88:47:3d:53:0b:ed:19:85:47:d7:25:
59:7e:a6:34:9e:7e:2b:a7:38:43:20:40:66:b0:ba:
f2:98:e7:af:dc:f1:c1:05:5d:47:6a:6e:99:47:bc:
39:9d:42:7e:4f:1a:ab:55:02:10:70:b5:c7:b0:36:
4c:d6:6c:58:99:08:c9:cf:56:44:fb:8a:0d:98:06:
c3:98:83:6a:54:db:6a:16:34:9a:fd:88:35:06:27:
47:2a:d8:80:28:4d:48:ab:4f:cd:e1:3f:f7:5b:7c:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:C9:5C:38:3C:95:7D:23:02:6B:BF:C6:5B:AA:5F:3D:37:C3:F6
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:af:b2:90:87:78:b1:07:45:a3:d7:4d:49:e1:7c:4e:45:ef:
e3:1e:40:15:ac:a5:f3:c0:28:6d:56:ff:c6:3b:c9:82:74:5f:
96:17:ea:7e:19:59:62:6e:e3:8d:ac:f4:c1:2d:9b:45:34:66:
4d:cb:6d:db:97:e5:42:30:33:41:5d:49:9a:bf:ce:d3:7f:55:
98:3c:9d:00:0d:4a:e9:20:b2:5b:09:02:f2:fc:12:71:65:dd:
df:65:12:2c:85:05:32:c4:4b:6e:59:5e:0a:15:44:e5:a0:b9:
e1:30:e2:4f:1a:3c:90:27:55:39:56:f7:88:7e:93:ae:84:b8:
02:21:25:87:9f:17:91:3d:fd:42:fc:44:bd:bf:17:18:d1:03:
1e:63:df:25:bf:4c:7d:2e:0d:37:cd:97:83:ae:83:a8:bd:96:
d4:ac:a9:ea:81:df:a7:89:5f:14:4c:b7:ac:ac:3d:58:b6:30:
6a:b9:2b:bd:75:3a:ad:3e:a8:c2:be:1e:24:79:81:13:60:e2:
70:fe:91:ab:d9:7f:69:0d:81:a5:40:16:64:f1:1c:af:7a:57:
a8:f1:0f:c7:42:8f:5c:79:0d:a7:30:ec:47:d8:b4:67:cb:53:
e2:24:e1:b3:4b:26:28:d6:d6:0d:ae:d8:61:42:5e:ee:57:ea:
9b:bb:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:44 2025 by rpki-client