Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File: At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier: QKzoqYxp9WuXxhPtG1CIFErtKJ8sXu+umAk2l7+rB3w=
Subject key identifier: 65:8A:53:AE:1E:F2:F9:1E:80:7F:3E:F1:6D:25:AE:31:25:36:F1:B6
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer: /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial: 080A
Authority info access: rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number: 0808
Signing time: Sun 16 Feb 2025 01:19:37 +0000
Manifest this update: Sun 16 Feb 2025 01:19:37 +0000
Manifest next update: Tue 18 Feb 2025 01:19:37 +0000
Files and hashes: 1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: iaMT3KGMz+46t6WPlsMqd74nRRq0eQKRev0Ny1cz6S8=)
2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F51F8AR
Validity
Not Before: Feb 16 01:19:37 2025 GMT
Not After : Feb 18 01:19:37 2025 GMT
Subject: CN=67b13d29-51bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:38:e0:b1:03:5e:3e:cc:d2:08:67:db:84:
e5:fb:63:f5:e7:e4:74:a8:b5:dd:5a:bd:0e:84:c3:
ec:92:d0:d4:8b:57:7a:02:f8:e8:fe:43:3d:00:83:
45:89:7c:25:b0:f3:8e:12:40:09:67:e0:fa:c8:57:
bd:39:bd:f7:cc:65:1c:63:8d:a3:27:a9:f2:b0:de:
cc:8d:3a:dc:82:ca:80:c1:aa:41:83:25:86:27:d0:
b9:40:ed:a8:14:91:7f:e0:2a:f8:82:98:a9:b5:c2:
59:5b:09:e2:dd:3e:d9:7c:23:47:18:d5:58:12:09:
00:84:a8:21:63:53:e0:90:5c:08:75:43:82:7a:68:
64:30:94:5e:3b:2e:40:2c:b9:7e:a6:7f:ad:fc:52:
9e:bf:dc:ef:39:24:83:96:a1:82:39:e6:7c:cf:cf:
4f:92:94:82:bc:72:f9:05:bc:ff:86:91:c9:40:3e:
fe:73:9e:44:7c:11:fd:3c:61:82:aa:29:1d:56:71:
8b:3c:74:7c:63:84:2f:4b:74:85:33:f3:48:4c:92:
11:b4:19:bd:b2:9f:b4:08:6e:e0:44:18:86:aa:e3:
29:ec:65:35:bc:eb:90:95:e9:cf:20:f1:df:7d:b8:
ef:ec:8e:95:e2:9a:df:d7:61:65:cf:df:71:a6:40:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:53:AE:1E:F2:F9:1E:80:7F:3E:F1:6D:25:AE:31:25:36:F1:B6
X509v3 Authority Key Identifier:
keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6b:45:de:70:14:73:a5:9e:91:7d:d9:57:90:1a:40:f4:41:
50:13:65:72:2e:f7:ef:1b:71:f8:a6:fe:1d:31:37:cf:f6:c4:
db:a8:3c:dd:d0:cc:28:9c:ab:a8:1a:be:c8:85:2d:a1:19:c6:
8a:9b:32:67:6d:58:6e:7b:7c:da:a7:20:c0:b6:aa:88:7e:42:
b1:ab:36:07:cd:53:9d:94:f2:58:ad:8c:d3:08:11:ed:27:27:
8f:a1:db:dc:8f:28:37:75:2b:f9:1d:81:dd:8f:d1:31:e2:16:
43:f8:8e:4f:08:fc:4b:54:56:07:b2:49:ea:85:62:91:69:ad:
54:32:bc:00:e9:86:aa:ef:77:7f:61:67:c6:ea:3f:96:bb:cb:
88:2b:26:28:5e:7d:1f:28:59:c5:e4:77:45:cd:ee:6f:e5:f5:
90:d3:c8:84:3d:80:17:c5:a5:1e:6b:66:43:29:4d:ed:64:dd:
46:7b:a6:97:1f:31:58:13:a8:7e:ed:7d:e3:f9:b0:59:a4:c8:
c6:c0:e5:48:1a:ff:12:b7:f4:b4:c4:05:a7:75:c3:24:d7:10:
32:58:3c:c2:af:88:b2:64:00:32:a0:95:48:4c:25:84:99:f9:
12:39:59:53:ca:05:37:a9:89:ff:45:ec:9c:0a:f7:82:0e:7e:
dd:19:7b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:28 2025 by rpki-client