Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
File: Vgq77plEvBY3TSi-TCYHISxchBo.mft (raw, json)
Hash identifier: TU8T1fpDs/Ucbp5Q1ZhQNnD428NJfsq24jWaXtEC//I=
Subject key identifier: BE:F0:F9:4A:63:FD:6D:AA:3F:1B:6F:3F:57:E8:88:AD:D7:DE:63:DA
Authority key identifier: 56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
Certificate issuer: /CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Certificate serial: 02EA
Authority info access: rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
Manifest number: 02E9
Signing time: Tue 29 Apr 2025 03:42:38 +0000
Manifest this update: Tue 29 Apr 2025 03:42:37 +0000
Manifest next update: Thu 01 May 2025 03:42:37 +0000
Files and hashes: 1: Vgq77plEvBY3TSi-TCYHISxchBo.crl (hash: o1PFXJFtYBEvnGpBYAkXJhUb2ASOXj6QOk2osgZdbqU=)
2: 5CEB9A26EE7311EDAE92A5174AD9E6FC.roa (hash: rLtmy6+gg/x50UbRPkkqh7K/Hhi9wWQKPE+ocVnJ+7I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 746 (0x2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624E32AR, serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Validity
Not Before: Apr 29 03:42:37 2025 GMT
Not After : May 1 03:42:37 2025 GMT
Subject: CN=68104aae-00c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:36:12:8d:6b:b3:7b:06:46:f6:c5:72:77:
41:67:ed:37:5e:45:67:16:c6:b3:dc:27:7e:88:f3:
3c:a8:df:d5:7d:be:e0:4c:ad:fb:08:d2:04:bc:9e:
41:69:79:20:f7:e5:3e:31:d4:dc:1a:f8:0d:44:12:
df:ee:52:48:4f:6f:d6:80:af:3b:26:4f:cc:88:ab:
cc:62:3c:0f:27:71:59:19:a5:74:0e:c1:57:d5:66:
4f:7c:b7:a3:a7:5a:83:d3:9f:89:aa:e6:bd:42:63:
cb:9d:53:53:a8:09:12:1f:59:22:b2:ca:72:05:10:
5d:74:57:52:e4:64:59:1b:92:30:7b:22:4d:48:d0:
c1:d7:3e:6c:38:8b:76:54:e2:31:51:dd:dd:05:51:
54:c0:9c:0b:aa:d3:c1:2a:fb:40:62:5b:b3:6d:95:
4a:81:0e:e1:ec:b9:cc:4b:78:df:c7:09:9e:50:3f:
86:e0:de:76:f7:b4:86:48:14:58:8f:00:f7:12:3b:
58:a9:35:cb:d7:76:fe:91:3b:6e:d9:9d:70:5c:79:
4c:80:74:5b:08:c6:b2:fd:9a:48:e5:c5:aa:ae:4c:
a9:56:f1:f1:63:30:db:dd:65:df:0e:fd:26:77:77:
a1:4c:32:45:cf:3a:68:fb:61:83:dd:43:28:f0:18:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:F9:4A:63:FD:6D:AA:3F:1B:6F:3F:57:E8:88:AD:D7:DE:63:DA
X509v3 Authority Key Identifier:
keyid:56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fa:27:6f:bb:a4:46:8f:6d:69:81:d6:7d:b1:53:69:5a:d9:
bb:bc:b6:46:cd:65:84:a6:5a:f8:81:c8:21:db:9a:4a:f5:14:
db:78:0e:8a:3c:6d:aa:86:39:20:6f:b2:40:cd:6f:a0:ea:7d:
27:c0:26:2d:18:59:60:c2:ea:b1:2d:06:60:ec:e1:2b:bb:22:
97:6c:9e:85:8d:76:f6:c6:65:ab:24:08:65:88:99:ba:f5:9e:
a1:b1:ee:a6:1d:75:77:7f:47:f6:5f:cb:74:bc:b8:0d:4f:53:
50:0b:c3:c7:16:e8:87:4c:6e:81:9c:58:94:9a:d9:5e:64:ec:
58:03:98:74:e8:f6:c7:cf:71:28:5a:3b:89:76:22:2b:76:ec:
23:d2:e9:b4:b1:06:b4:51:1a:6a:b7:cf:5f:52:b9:a3:7a:41:
b5:cd:68:65:4d:fb:02:2a:42:5c:22:c4:d7:e6:8f:dd:da:2f:
31:b4:26:96:63:b5:d4:c7:92:db:9d:09:6b:89:33:01:06:43:
a3:b6:59:cb:2f:41:df:c6:e6:4e:48:09:c5:6d:72:8b:f9:42:
f2:ce:1f:eb:db:ec:7d:e1:08:aa:12:c0:56:6e:03:d3:00:8d:
61:01:8e:95:ff:ce:20:c0:54:ed:e4:e1:74:b4:a7:24:3f:d2:
12:98:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:33:19 2025 by rpki-client