Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
File: 3YPIwAXNcQS4JubaokvJUXkImqM.mft (raw, json)
Hash identifier: OXGZfaMmgMaU2II8wBiCRdHqLCY2FXxOtm85G8K5GxM=
Subject key identifier: 44:04:56:DC:4B:33:23:A6:58:46:A6:42:4F:50:8F:D5:0F:82:CA:C7
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Certificate issuer: /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial: 0575
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
Manifest number: 0573
Signing time: Sun 27 Apr 2025 02:29:43 +0000
Manifest this update: Sun 27 Apr 2025 02:29:43 +0000
Manifest next update: Tue 29 Apr 2025 02:29:42 +0000
Files and hashes: 1: 3YPIwAXNcQS4JubaokvJUXkImqM.crl (hash: mxYJjSd9tKsoO7/iXxaksO7ucM3ETVGKZ5JSFxCycrI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36162E8AF, serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Validity
Not Before: Apr 27 02:29:43 2025 GMT
Not After : Apr 29 02:29:42 2025 GMT
Subject: CN=680d9697-dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:5b:c2:63:bd:83:41:cb:c4:9f:2d:ff:2b:
53:7d:e4:d8:56:b9:2d:f4:0f:eb:ff:ef:b1:0b:db:
93:bb:b9:95:31:e2:3e:b5:0f:19:9f:2a:4d:b4:cf:
11:20:fc:51:31:75:7c:db:ad:3b:21:00:67:57:a1:
d7:6d:50:52:ff:b6:5f:52:a9:fa:7b:d0:1d:16:4a:
68:02:dd:93:90:06:fe:4b:63:55:70:48:df:4b:25:
5e:de:7e:eb:80:dc:2e:9c:4b:4b:4c:2e:47:09:3c:
0c:ba:02:14:62:6f:92:04:b4:31:9e:8f:06:9e:89:
2e:94:ef:ad:59:35:70:db:dc:5a:91:14:c7:3d:14:
66:f4:6b:27:35:55:98:df:68:6f:c7:cd:47:e1:5d:
c1:64:b3:7d:6e:f8:f2:1c:da:54:9c:d1:c5:79:c3:
3b:11:47:28:32:e4:0e:d0:ef:0c:04:d0:93:25:6e:
e6:46:16:ca:48:b9:0d:3f:88:90:0a:d8:7a:65:d0:
33:f3:c9:d3:a5:8d:d0:1f:e5:c4:1b:3c:3b:3e:d2:
ec:7f:a1:67:2a:d7:a5:55:1e:4d:a0:e7:fc:fb:ea:
3b:51:4a:5b:3d:fc:51:ed:86:cd:0d:7e:27:b8:72:
88:2d:63:d9:1f:9b:f3:6b:40:60:72:ea:9f:8a:2a:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:04:56:DC:4B:33:23:A6:58:46:A6:42:4F:50:8F:D5:0F:82:CA:C7
X509v3 Authority Key Identifier:
keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:98:c9:ca:e7:da:31:4b:76:9e:03:8e:5e:33:4b:f7:13:09:
30:23:40:07:e8:c6:e9:fe:95:a2:d7:ad:be:47:7b:9c:47:c7:
2b:ca:95:3e:a0:b4:94:fa:a3:db:6b:c9:a6:78:04:02:18:c1:
d3:1c:9c:43:47:9d:f2:27:26:f7:39:21:bd:e8:18:5a:e4:64:
29:2e:9e:e7:81:b3:40:f4:c1:4f:5f:97:87:8d:b7:91:97:f5:
4f:1a:57:54:20:b2:b4:a7:f7:ae:06:cf:4b:fb:f0:2b:82:68:
6f:8d:02:3a:d9:16:7d:4a:e9:37:80:da:e3:a3:89:6c:7c:1a:
f1:23:7a:83:bf:55:d7:f5:64:d4:ba:0a:41:91:fd:35:79:9a:
b7:33:9b:32:50:b6:4e:70:c0:53:28:6d:69:85:70:ba:38:95:
cd:06:13:9e:9f:62:34:cc:bf:14:a5:86:f4:7d:f3:27:60:a4:
be:8b:7b:94:df:cb:98:62:89:20:cb:6f:09:70:5f:41:2f:a1:
3b:2d:e2:b4:08:59:43:88:17:62:1d:c9:6f:7f:d4:83:e1:c2:
88:62:ea:5f:39:2b:b3:ba:2b:be:66:f9:a9:ec:b9:d3:ec:5c:
59:3c:e2:87:6a:03:95:51:2c:43:e9:fc:a1:23:95:d4:cd:69:
df:3d:b3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:15:45 2025 by rpki-client