Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: Cmkft+FggYo5gZedfqqI+36r7ZRh4+jOEEYyieK/eRc=
Subject key identifier: EF:64:26:CB:C0:8D:3A:93:1E:06:F4:7B:0B:D1:7B:D2:CE:E8:FA:3E
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0DEF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 0DEE
Signing time: Sun 16 Feb 2025 00:51:43 +0000
Manifest this update: Sun 16 Feb 2025 00:51:43 +0000
Manifest next update: Tue 18 Feb 2025 00:51:43 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: zhBrBc6dq3ourIPoAPDdHHuIVl+kGsaVDPqJnF2GsT4=)
2: 36DF01DC39AA11E59B5A3D32F8AEA228.roa (hash: KB4karfPnV5f0+SNVM+1NuYPsr7TtEZ+5kiyQgRzqTE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3567 (0xdef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF
Validity
Not Before: Feb 16 00:51:43 2025 GMT
Not After : Feb 18 00:51:43 2025 GMT
Subject: CN=67b1369f-38f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:96:1f:ac:ad:9c:df:54:8a:35:9f:7e:fc:
af:0c:7b:ff:26:72:df:e7:ca:a1:80:b1:ba:c2:a0:
bc:3c:05:26:4b:93:a5:25:e1:54:e2:c7:19:69:4e:
55:ee:d1:ec:a4:5c:77:f9:53:43:b4:c5:7c:7f:77:
74:d2:2d:e2:f4:28:7b:51:b6:30:0d:c5:4a:18:ce:
9b:26:f1:94:dd:20:0b:ea:39:1c:47:24:d4:92:a1:
cc:06:ea:9d:e1:a9:f1:d0:60:75:00:06:77:ad:6f:
a8:8d:27:7c:7d:43:05:92:6e:61:f8:ba:50:48:5a:
cd:c4:43:cb:26:a7:d9:c3:f3:77:24:20:f8:4f:c5:
35:28:75:c3:c9:8e:50:92:8a:dc:51:40:e7:49:b8:
13:14:14:1b:99:0f:ad:0e:a5:0f:77:d6:d9:e9:4b:
bb:3f:1b:f5:ab:a2:1d:73:ef:95:05:88:3c:4e:08:
f9:13:80:14:7f:59:5b:a6:7c:15:e2:99:bf:49:64:
0e:c5:74:5e:ff:e7:38:3f:89:56:15:84:b6:e1:03:
b2:c5:0e:cb:96:d1:ef:a8:ec:fb:a3:a8:51:36:9b:
24:8b:bf:ac:38:aa:28:7e:dd:37:f4:60:29:ef:cf:
19:de:fe:5e:b6:23:05:6c:0d:e0:f4:fb:85:9f:a6:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:26:CB:C0:8D:3A:93:1E:06:F4:7B:0B:D1:7B:D2:CE:E8:FA:3E
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:cf:c6:ab:1f:92:8e:b9:f3:e4:8d:8d:64:eb:8d:aa:2f:03:
0f:2d:4f:34:06:3a:09:58:d0:3f:97:fa:40:a2:f3:72:6a:d3:
9d:c5:9b:f5:a4:1f:cb:76:f9:e2:90:8b:8d:9c:1e:5c:0d:61:
c6:8f:64:c1:8b:85:73:1a:17:2c:d6:06:b9:63:98:e7:f3:f8:
9d:a9:f6:30:fc:92:0f:72:f2:20:60:dc:8f:06:58:f7:13:19:
28:03:e4:9f:a3:da:0d:d6:98:dc:c9:fb:c5:61:4a:86:0a:f0:
e2:bb:89:15:82:3a:8a:9b:a6:0d:ea:61:38:4e:3a:c8:39:0e:
7d:7a:3b:67:c6:ce:2e:fb:47:c8:1e:4c:5d:19:31:0c:c9:73:
9b:43:05:2e:64:0c:62:d8:b7:a0:32:34:a3:94:d7:64:b2:47:
5e:f7:41:77:21:f1:37:ca:36:07:43:ef:1f:19:4e:e3:fa:1c:
36:da:a8:a9:1c:f8:55:c2:98:3a:86:86:dd:e8:08:e0:a2:d1:
be:f1:c1:32:ca:11:bf:8f:84:cb:af:36:00:e0:46:0d:d6:1b:
2e:d8:54:8c:dc:40:e8:dc:10:db:94:66:09:69:8c:11:a0:b3:
45:5a:c8:8f:c3:87:95:4c:0d:2a:c0:8f:b5:90:1d:11:13:62:
d5:4d:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:27 2025 by rpki-client