Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
File: -dz45IZ0npp0P-Rz662BTRzsX6k.mft (raw, json)
Hash identifier: 5L8oWbguuXhfBa4G8tOMfZXubuiKQU4EaRbAIcrNe50=
Subject key identifier: E4:1A:2F:8E:47:B1:43:FA:2D:56:5A:F6:CB:D6:5F:F4:FB:6D:73:A8
Authority key identifier: F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
Certificate issuer: /CN=F36FCD8DAF/serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Certificate serial: 042D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
Manifest number: 042C
Signing time: Sat 29 Mar 2025 02:30:12 +0000
Manifest this update: Sat 29 Mar 2025 02:30:11 +0000
Manifest next update: Mon 31 Mar 2025 02:30:11 +0000
Files and hashes: 1: -dz45IZ0npp0P-Rz662BTRzsX6k.crl (hash: IlgFjnv4HLxJ5M1QK/gldpZXHkMvuRW2lRnUyrfU5zU=)
2: 60D2AC14E0E211EC817382DAF1222468.roa (hash: //5aRoRjO3zpCQq4iVOAY/MrzQveZBFgcw+KQ8Nh8YM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCD8DAF
Validity
Not Before: Mar 29 02:30:11 2025 GMT
Not After : Mar 31 02:30:11 2025 GMT
Subject: CN=67e75b34-5c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:88:ff:32:f0:66:68:2b:99:80:fa:39:91:
c6:ac:c1:fd:8c:1f:a0:2f:c0:9a:12:a9:d0:75:25:
69:75:a3:9a:7c:40:49:4d:c9:a0:d4:23:0a:89:ac:
22:7d:3c:e1:53:0f:ce:64:80:df:e4:8a:67:27:81:
f7:3f:17:1d:ba:7e:bd:d3:ca:5f:4e:44:46:2f:5a:
57:28:e1:fc:42:18:2e:87:aa:7b:14:cb:8b:18:ac:
94:41:76:d7:e6:aa:c3:a7:23:2e:15:60:4b:f5:43:
5e:cb:a9:6d:66:d1:4b:ad:ed:13:ae:7f:00:c5:47:
61:21:0b:dc:c1:32:e9:6e:63:2d:85:e9:d2:51:87:
cd:1f:ac:55:d2:63:bd:f0:86:5a:86:c1:cb:cb:ca:
bb:95:e2:41:0b:55:eb:7d:bb:7c:eb:26:5b:2d:e2:
1b:63:29:ae:1e:f8:af:36:a4:b9:90:21:9f:a5:a3:
ff:94:6e:88:3c:e6:45:68:61:94:4d:cb:d9:7a:20:
76:04:c6:92:de:45:a5:70:1a:8c:9b:16:f3:1c:f7:
9b:b3:af:03:8d:c4:a5:e1:67:31:39:cb:53:6a:72:
88:e0:a8:ef:b6:1f:46:74:44:78:74:54:3b:6c:5a:
e4:48:29:02:46:39:be:14:37:c8:56:17:ea:60:bc:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:2F:8E:47:B1:43:FA:2D:56:5A:F6:CB:D6:5F:F4:FB:6D:73:A8
X509v3 Authority Key Identifier:
keyid:F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:f0:34:75:87:f4:ac:b4:74:ff:ab:8b:aa:79:41:1b:ef:be:
61:45:39:fd:e1:c7:68:26:06:d5:10:5a:fb:0f:ab:82:1f:18:
36:68:00:4f:b6:37:c1:fd:62:bd:ec:f0:fe:e5:b7:16:19:c1:
15:80:e2:50:9e:9a:26:a2:d7:82:c3:eb:13:d1:92:ef:c8:26:
c2:85:e6:2b:97:8b:a6:30:4d:ee:39:c0:a7:f1:17:d6:08:d5:
d0:b7:f2:83:e9:a8:49:1a:8d:27:d3:b8:53:e2:82:36:30:d4:
e4:ac:03:81:09:b9:e5:a9:76:ff:e6:07:e1:74:61:5e:e2:0f:
52:46:dd:7b:e7:29:77:33:b2:f9:98:67:59:2a:6c:e2:8d:98:
29:51:22:a4:53:2d:16:72:83:de:fb:e3:95:c0:06:cc:68:b0:
27:b8:72:6c:72:96:9c:0a:28:e7:f3:4b:5a:83:be:a2:66:18:
54:ed:4a:bc:e0:5c:94:5c:2c:ec:8d:8f:b1:e4:bd:ae:79:77:
04:31:c6:fe:1d:57:28:ef:f7:c5:aa:f3:32:fe:34:cb:6e:95:
f9:93:34:b1:f7:b1:f7:f1:0b:1c:e2:7b:13:13:a4:01:31:48:
bf:24:8d:13:bd:bf:c3:57:ef:56:c2:ca:f3:e9:7a:66:1f:07:
37:ea:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:49:53 2025 by rpki-client