Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
File: yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft (raw, json)
Hash identifier: 42BUspWjPZ9WzlDthm9TKJgczrVzbqXUwAu3q1GhuVY=
Subject key identifier: 97:8F:F6:59:2F:08:98:85:4C:1E:14:5E:B3:55:1C:EE:77:90:57:CA
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Certificate issuer: /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial: 01C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
Manifest number: 01C1
Signing time: Sat 29 Mar 2025 03:15:37 +0000
Manifest this update: Sat 29 Mar 2025 03:15:37 +0000
Manifest next update: Mon 31 Mar 2025 03:15:37 +0000
Files and hashes: 1: yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl (hash: tpOEST5+SLs8rsMQ1UpSjFIMYpasXkyX0/yV2FhFsdk=)
2: F22231EE58D611EF9480BB8A762E951A.roa (hash: 2wx44BaE5zLTLXu1cOcnoK2nKJGZI/F7fTamJz0/0pY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB15EAF
Validity
Not Before: Mar 29 03:15:37 2025 GMT
Not After : Mar 31 03:15:37 2025 GMT
Subject: CN=67e765d9-f47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:e0:2f:59:0a:e6:ba:17:db:6d:c3:c4:cc:
ad:da:99:c1:f9:1d:89:a6:34:06:4d:7d:85:ae:f8:
8c:25:c8:ed:8d:9d:ea:52:ae:54:0a:ca:f7:0d:8b:
fd:0e:b0:ce:72:b8:90:2c:0c:32:73:4d:99:2e:d2:
2d:cc:1b:7d:38:78:2f:3a:f4:f6:80:1f:b0:3c:dd:
8e:00:d0:e8:f4:68:bf:14:2b:e6:19:5f:0c:80:99:
7d:69:84:69:3f:e1:db:a0:f0:14:a7:2e:8f:07:d6:
fa:66:f4:22:0e:bf:39:d8:7a:5b:cd:1e:a3:4e:09:
b8:8a:2f:05:56:cf:e1:ee:bb:c0:b4:cc:54:0c:89:
be:83:6c:b0:28:a1:63:f0:c6:04:e0:83:52:12:c8:
a7:09:36:f8:d3:ff:a6:02:05:6d:6c:97:da:b9:bc:
67:21:ce:46:0c:76:42:83:12:43:00:95:4f:ab:da:
f0:26:06:1a:0a:07:1b:dc:80:8f:53:8b:e2:54:f3:
5b:b8:61:7d:50:be:77:dc:21:5e:bb:1b:14:d9:de:
65:67:e9:1d:75:cc:9f:7d:55:e3:a9:c7:7a:97:e1:
12:47:a2:88:bd:89:85:23:9e:67:26:cc:66:77:32:
50:50:8e:3f:b2:63:e8:fa:3c:f8:f2:d8:ad:25:57:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:F6:59:2F:08:98:85:4C:1E:14:5E:B3:55:1C:EE:77:90:57:CA
X509v3 Authority Key Identifier:
keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:15:a3:ac:bd:1f:51:5d:2b:26:bc:7c:d0:1e:2c:75:47:4d:
27:a4:c5:a9:e9:71:57:41:5b:b9:d4:62:9a:3b:48:30:97:f5:
85:9e:6b:6b:f0:6a:37:a7:9f:1a:e6:e7:ef:4b:9c:ff:86:ac:
35:85:69:c0:44:e4:b5:4e:0d:d9:fd:94:80:4a:1c:9a:0a:97:
86:81:c8:c0:dc:89:f1:0b:ee:7f:5f:ee:67:ae:d7:22:6f:04:
f2:eb:18:70:5e:3c:4c:21:6c:78:2b:b6:e4:6b:6e:d2:80:06:
f3:f6:b2:eb:f4:16:53:97:b6:19:07:09:4e:68:f8:6e:b8:4d:
37:c2:90:23:ba:a9:cd:39:77:68:1b:37:7c:5b:80:cc:ce:c0:
94:4e:79:7c:bb:34:b8:43:6c:37:05:09:50:c9:4b:2f:b0:b0:
75:27:cf:bb:17:50:0b:3e:06:dc:84:68:a8:b6:b6:02:57:b6:
ad:29:fa:ed:15:70:b0:c1:d7:c4:6b:47:8a:0e:39:c7:fe:42:
55:0f:cf:c4:90:e4:8e:67:ff:6d:99:be:50:d8:c1:3b:b3:5d:
4c:e6:7b:fe:5d:b0:b4:17:f1:39:68:55:85:ba:4e:39:44:ca:
a5:ad:94:b6:c7:fb:48:e8:2c:7b:b2:e4:03:09:6d:67:c8:c6:
af:3d:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:26 2025 by rpki-client