Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
File: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft (raw, json)
Hash identifier: OGYrVd0Lb9fQYde6Xr/zf1fbSyGBEsgqsP8IYXdcIb0=
Subject key identifier: 5A:E1:2D:32:2E:80:8E:E2:CD:FC:E1:88:3F:BF:69:2F:DC:A7:E6:6E
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Certificate issuer: /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial: 0681
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
Manifest number: 067A
Signing time: Sun 27 Apr 2025 02:03:37 +0000
Manifest this update: Sun 27 Apr 2025 02:03:37 +0000
Manifest next update: Tue 29 Apr 2025 02:03:37 +0000
Files and hashes: 1: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl (hash: s3+vvq3yzSbf+sQG8I711kyOoTg6Uuval6tRVdI5Zy4=)
2: 734F013479C511EFAE81627D762E951A.roa (hash: xdurMFAxJPU0CP+M6yamIm2npN94Z/AsDJKHCn0C3Ko=)
3: 2B48BC985C0C11EB9996AA30F8AEA228.roa (hash: q6nVowz9VuDpjWX/IbvfjqSfChWzoCDvGswNPS2gk/0=)
4: FE6D92CA5C0B11EB95157330F8AEA228.roa (hash: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=)
5: A573C59E7F2111EFABEC8243762E951A.roa (hash: z2hxV4eIGWcs9mH3SGVDwRrbCV/vQwHP3UQvoUEczXo=)
6: 336BF2CA332411EBB561BF72F8AEA228.roa (hash: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=)
7: 66D788525C0C11EB89D7F330F8AEA228.roa (hash: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=)
8: 4D1819725C0C11EBB458D830F8AEA228.roa (hash: Y5bEDudGZy2SxFSFnv47v/c/OeLSoqXcxTY9JA/Rm5g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FF17AF, serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Validity
Not Before: Apr 27 02:03:37 2025 GMT
Not After : Apr 29 02:03:37 2025 GMT
Subject: CN=680d9079-ae30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:e7:48:d0:30:9c:b3:0f:a8:4c:9f:46:08:
dd:c8:9c:77:8f:02:0c:62:70:92:f5:30:94:01:2b:
16:17:95:d7:80:73:a8:db:16:31:00:39:c1:ac:f5:
ab:1d:f7:ad:7f:44:c7:6f:79:90:61:4d:a7:22:e6:
c2:e1:0e:40:d5:76:c2:bd:99:bd:16:ac:46:f6:f5:
38:dd:42:62:f2:9b:7c:2d:be:dc:27:88:92:11:7e:
4e:25:25:3f:f4:de:72:72:81:56:3f:93:f7:a0:28:
23:af:c2:a7:04:90:ed:7e:30:bf:98:3a:24:56:3b:
10:a1:2c:46:8a:ad:af:b1:d7:3e:d7:87:65:99:7f:
b1:f0:d4:51:bb:dc:20:6b:7c:c7:1e:41:87:6f:2d:
fd:6f:54:68:33:10:cf:15:02:bc:ec:4e:8f:16:44:
ad:09:90:0e:70:00:55:da:64:46:27:1a:ab:8c:69:
68:87:62:de:35:8c:46:e4:f4:da:02:b1:f7:58:3d:
4f:26:4a:b2:5f:41:db:3c:d7:43:47:c5:38:7f:ee:
e4:f8:20:0f:31:4d:cc:56:96:be:a7:c3:04:e9:09:
a2:1a:3a:e7:0b:ec:4b:11:4b:1f:da:e5:7f:d1:45:
5d:01:bf:7e:b2:a5:c6:b8:d6:0e:5a:1d:88:9a:1b:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E1:2D:32:2E:80:8E:E2:CD:FC:E1:88:3F:BF:69:2F:DC:A7:E6:6E
X509v3 Authority Key Identifier:
keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:9e:8f:b9:63:b4:6a:6e:40:f8:19:f8:1c:77:46:08:e3:57:
06:e2:e2:e9:34:14:64:71:1e:e6:ef:27:9f:7e:65:80:30:db:
7e:87:b8:e5:68:67:59:54:a2:cd:31:26:ce:a1:bb:84:30:31:
09:66:00:6a:3c:76:1f:36:cb:a7:57:4c:c0:8b:f7:de:1a:26:
2f:58:2a:03:84:aa:88:21:3d:7f:ce:2f:3c:5b:b0:63:c0:15:
47:9c:0e:8d:df:3a:12:a0:ff:0d:90:30:41:00:af:81:38:d1:
5c:19:3b:f1:56:9d:39:5b:ae:84:77:f4:f6:af:53:3b:78:39:
e6:70:55:9e:97:21:cb:b9:9a:b8:0c:d1:f8:b2:9f:06:78:01:
39:27:8b:0f:9b:3f:d8:af:c0:a5:a0:ab:be:23:75:4c:d9:ba:
15:85:32:24:8a:3a:ab:f6:6c:5f:68:1e:47:e0:33:1f:4c:b0:
d6:11:f3:37:13:dd:99:33:73:01:d8:5f:f3:6b:2e:c2:00:9b:
fc:69:4f:c1:27:67:e4:e1:b5:dc:9f:41:f2:3c:c7:de:bd:a6:
5c:b4:8a:3f:24:81:97:23:cc:49:04:31:c7:c6:d8:97:cb:1c:
f5:f5:9c:bd:fc:67:ce:24:84:bf:8b:2c:db:75:48:86:7e:89:
50:fb:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:28:45 2025 by rpki-client