Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File: At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier: 2vaNNtroJEvMNwqbGuRVbdjsjHJF8sRzFibbYcAzHo4=
Subject key identifier: 9F:FA:90:F1:50:D8:F9:D6:BB:AA:F0:DE:E5:10:AB:67:43:DD:72:00
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer: /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial: 0823
Authority info access: rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number: 0821
Signing time: Thu 13 Mar 2025 01:19:03 +0000
Manifest this update: Thu 13 Mar 2025 01:19:03 +0000
Manifest next update: Sat 15 Mar 2025 01:19:03 +0000
Files and hashes: 1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: +6l96Q9AdWpUagXMXt73+GCRuakEX4YA/+IF399momo=)
2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2083 (0x823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AR
Validity
Not Before: Mar 13 01:19:03 2025 GMT
Not After : Mar 15 01:19:03 2025 GMT
Subject: CN=67d23287-d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:ae:fc:4e:2d:dd:77:3a:37:99:ba:cf:e3:
2e:73:71:22:4d:26:34:64:2a:8a:f5:11:9d:5a:c6:
f6:53:76:f0:ef:54:0d:c8:a3:ac:68:96:d5:44:67:
fd:de:02:3f:65:f7:53:f3:69:0d:7e:7b:11:55:82:
37:79:e7:5a:ac:a1:44:16:59:9d:db:91:39:4a:8f:
f8:ff:f6:f5:1d:44:dc:59:5d:84:5a:3e:bc:6a:3e:
49:12:17:ed:26:da:93:78:5f:ac:34:18:38:77:45:
43:79:f5:3f:ed:71:03:9c:47:e9:6d:41:d9:7b:e9:
7b:01:04:ad:5a:6b:39:f0:ab:f3:d4:62:fe:a9:65:
9c:5c:8a:25:83:9e:18:36:cc:e3:21:d1:4f:5d:82:
dd:a8:0e:5d:1b:b2:1c:b7:fa:77:07:24:78:5d:1d:
bb:aa:cc:99:04:fc:fa:b7:99:ef:fa:b5:3e:3e:c2:
3d:03:0c:cd:f2:f2:11:21:83:06:a3:43:f0:6d:6c:
1c:6b:ac:2f:ce:25:c6:85:a6:8d:b0:8c:5c:55:8e:
5b:3a:9a:fb:8f:4b:39:a6:04:c3:ab:ee:09:f5:db:
4c:36:be:a8:2d:4b:b3:70:88:18:4e:5b:05:93:3e:
6c:6d:04:66:fa:2a:44:49:00:a3:44:f2:eb:eb:69:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:90:F1:50:D8:F9:D6:BB:AA:F0:DE:E5:10:AB:67:43:DD:72:00
X509v3 Authority Key Identifier:
keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e1:16:3c:2b:f1:f2:c3:cb:f1:f6:a5:92:95:12:f5:5e:47:f5:
53:aa:7c:dd:2b:46:61:70:48:c8:1f:c0:58:93:f5:4e:8a:7d:
1f:62:cb:9b:02:45:c3:2a:9a:7c:39:14:3a:0a:e2:5d:26:5e:
e3:00:47:4c:64:93:f2:5a:e4:f8:ee:8e:9c:bd:56:62:71:1a:
91:a3:6b:f6:fa:14:1c:99:fc:96:08:fb:c7:e4:94:77:8f:7f:
23:1f:13:5e:28:6c:22:d3:8f:bd:f0:0c:9e:e3:db:52:c4:22:
60:4a:2b:71:e7:e8:16:2e:8a:b1:fb:b6:5c:dd:6c:d6:15:98:
43:2b:a2:5a:0e:f3:8b:18:23:b5:bf:ff:de:ef:9b:4f:7b:c3:
a0:a1:73:14:e0:2b:ba:9f:c9:21:46:92:6a:38:82:bd:6f:0a:
16:98:bd:fb:69:13:1f:db:32:fc:6a:43:4d:ce:46:39:40:e5:
8a:db:7b:2d:00:19:79:35:00:1b:0d:1d:e8:6e:1b:0e:cf:69:
6d:29:20:3e:d2:30:50:17:93:2f:19:39:c1:93:95:7f:d7:ef:
ef:66:8d:37:1e:e9:dd:13:bd:6b:7f:a1:53:00:eb:2d:ab:f8:
6f:bf:48:ec:70:e6:94:73:56:eb:06:3c:b8:19:b5:e9:65:34:
cd:65:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:34:47 2025 by rpki-client