Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier: HTm1abr+aTTf+kBRtzyUqOaupV2+GieBo6IxklQg1V0=
Subject key identifier: 25:22:E3:93:EC:ED:EB:84:6F:B1:3B:C6:27:EB:A3:4C:F3:85:F7:08
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 023F
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number: 023F
Signing time: Sun 16 Feb 2025 02:40:20 +0000
Manifest this update: Sun 16 Feb 2025 02:40:19 +0000
Manifest next update: Tue 18 Feb 2025 02:40:19 +0000
Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: nHRGl1BUrWFeuyQuCXI+N0B382bnCEJVs6g8YBg/jlc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR
Validity
Not Before: Feb 16 02:40:19 2025 GMT
Not After : Feb 18 02:40:19 2025 GMT
Subject: CN=67b15014-a81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:8e:71:19:46:0c:3d:2c:6d:56:97:47:42:
c2:4b:d7:be:8d:86:5a:82:be:b8:73:33:c7:54:a3:
d2:1b:dd:ea:3d:68:09:67:92:37:c5:a1:29:e6:8d:
6f:a3:54:7f:fd:18:fa:28:84:5e:78:f2:4b:58:1c:
8c:e1:b9:30:59:d4:3a:d6:d5:8a:3c:e3:d5:d3:45:
0e:55:82:9d:ca:52:e7:fb:0b:46:80:50:c9:6e:60:
ed:0b:64:8d:6d:fc:ff:5c:d9:50:3e:e3:a8:3e:1d:
f2:62:86:bc:bd:c9:e6:ea:8f:1c:5c:e9:5f:87:e0:
da:3c:e0:bb:52:66:67:2e:0d:f9:f7:ac:75:4f:d8:
92:b2:e0:53:d3:40:9f:1a:e3:48:88:7a:04:f7:44:
ff:8d:e5:18:d5:b0:b4:83:f4:21:94:dc:dd:97:17:
54:44:34:00:04:8d:e6:f4:5b:74:4d:d9:cd:3f:f5:
da:63:89:ee:9c:7c:a4:63:52:29:2e:aa:a1:0d:c8:
15:f8:59:a8:3a:19:73:cb:29:06:f6:33:0b:d5:d0:
2b:21:8f:5a:7c:39:fc:8b:7f:37:13:52:13:45:4b:
41:34:57:94:d3:48:33:8a:bb:2f:0b:f8:26:f1:51:
d1:e2:c4:9e:ff:47:88:aa:21:2e:37:ff:87:1f:a6:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:22:E3:93:EC:ED:EB:84:6F:B1:3B:C6:27:EB:A3:4C:F3:85:F7:08
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:84:57:a4:a6:bc:5f:53:d5:e2:54:87:01:0f:34:1a:fc:d1:
2c:2d:f1:32:7d:f9:b7:90:76:8c:71:4e:b2:2c:44:0a:08:64:
7a:4f:cd:0a:ee:3a:4a:f9:92:dd:01:e9:92:ef:83:3c:a5:83:
69:95:1d:c0:80:be:b3:e4:10:f4:07:24:6d:d9:98:3f:2c:30:
f0:74:7f:cd:7c:d1:45:58:11:91:bb:3a:0c:75:9c:38:e4:1c:
6b:49:eb:3a:8b:29:82:2d:4f:fc:dd:c2:ec:23:27:a2:98:42:
26:a4:65:f2:8a:c1:24:da:48:88:02:fa:98:35:56:d8:12:e9:
d6:3d:f9:99:a8:9c:00:8b:70:29:a0:e0:76:7b:a0:99:5d:ec:
70:59:20:31:8f:65:44:4a:d7:08:5e:48:5b:7b:24:73:ce:ce:
4a:7c:07:27:98:ee:ef:0a:77:08:c3:8d:54:9e:09:30:05:c4:
eb:3a:a6:8d:b7:5b:26:6c:8f:ce:d0:81:7c:ff:db:47:9f:2f:
0f:b8:3e:93:d2:90:75:9c:f8:46:c9:c0:3a:ff:09:53:63:66:
05:15:7b:92:50:6f:2d:94:80:0f:93:a8:5a:ef:58:84:6c:16:
1b:36:4a:31:08:11:f5:0a:d7:5f:2f:e4:bc:ad:83:55:0e:3b:
37:70:c9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:15 2025 by rpki-client