Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier: mBKd13TxWpkt7bHjXTEtKFPI5Vz6als/kdozG8R+Zdc=
Subject key identifier: 27:FA:32:6D:8E:4E:66:5E:CD:CA:49:BB:CF:CA:45:87:E2:08:1C:08
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 027D
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number: 027D
Signing time: Fri 18 Apr 2025 08:58:11 +0000
Manifest this update: Fri 18 Apr 2025 08:58:10 +0000
Manifest next update: Sun 20 Apr 2025 08:58:10 +0000
Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: G4BnOnA1+I1UmRNXI2xmORx0a7Qmw/HqRqiI+5kil1M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Apr 2025 05:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: Apr 18 08:58:10 2025 GMT
Not After : Apr 20 08:58:10 2025 GMT
Subject: CN=68021423-e66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:e7:80:e7:02:39:41:d1:f1:11:13:66:16:
3f:a0:4c:80:a6:48:a3:1e:73:aa:ce:ab:99:9e:b0:
01:bc:83:43:29:6c:3e:dd:1b:9c:93:2b:69:e0:38:
3b:21:a2:c3:16:74:50:6b:ca:c0:17:8a:c8:60:4a:
db:4f:f0:e1:d0:3b:97:77:47:74:74:a6:2f:9e:7e:
7c:78:25:63:36:af:c3:53:68:55:d9:3a:f5:ff:15:
68:a9:bc:47:29:71:b7:d1:5c:af:4f:85:3c:19:95:
03:c2:34:8f:2c:69:9d:9e:b3:38:19:49:d3:69:fb:
30:56:cf:f7:28:11:69:7f:fc:d8:89:11:fb:fa:23:
d3:f9:3b:54:6f:89:69:31:65:a4:76:87:f7:2c:62:
3c:71:b8:b0:57:e2:dc:34:06:10:4c:38:f8:ce:6d:
7d:9d:13:f5:eb:f7:5e:4a:75:e8:c9:f0:8b:61:16:
97:8d:93:17:a8:39:81:0a:0f:75:63:f3:81:7f:d7:
df:55:37:75:cb:d0:30:c7:98:0b:ba:ff:16:2d:e5:
75:32:0a:46:61:cf:57:88:40:0c:99:43:20:ad:71:
aa:46:c4:d9:ac:56:8f:c9:00:8f:ee:50:bc:be:83:
46:20:6d:d4:bf:a4:09:4b:6e:9a:16:0c:a9:c6:db:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FA:32:6D:8E:4E:66:5E:CD:CA:49:BB:CF:CA:45:87:E2:08:1C:08
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b3:60:34:6b:90:33:fa:38:e2:25:ba:07:de:03:5c:0f:50:
16:f3:56:a5:b6:78:6c:d0:97:08:e7:c1:f8:9a:92:5b:10:79:
51:89:04:53:2c:24:f7:90:ae:83:00:78:d8:5f:81:2d:ba:e8:
95:28:dc:e3:d2:a1:3c:cb:f6:2d:4b:f9:98:27:a4:fa:23:78:
70:92:88:42:de:17:96:19:fd:91:6c:ec:8d:5d:02:96:1f:b4:
0b:b1:ee:79:90:be:4d:0d:09:41:d0:4d:43:dd:11:b8:a8:3f:
42:8d:be:ac:27:55:78:3b:98:20:86:62:fd:36:08:d0:b9:c7:
c5:6f:24:56:86:51:93:45:f7:78:78:5a:6b:b4:ac:c4:6f:a3:
d7:69:bc:d4:2e:c4:32:1b:75:67:63:74:ea:3a:f1:31:5b:61:
a5:94:3c:f1:aa:17:7d:6e:b6:1a:a5:05:ef:b8:90:63:18:a7:
96:ed:38:f8:ef:8e:fa:f8:b0:cd:c1:14:f4:76:fe:5e:ba:7d:
73:6c:bd:4e:f9:f4:0c:30:aa:41:e8:ef:be:14:da:16:bb:1d:
6f:d0:d3:2b:bc:2c:35:d5:55:48:e2:87:31:3d:e1:1f:2b:1c:
82:f7:25:9a:b6:eb:0d:a0:04:f8:77:45:77:58:2c:a8:7b:95:
0e:ed:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:20:01 2025 by rpki-client