Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
File: _ESm2CkBQzmKHfvvhvwdrjRBoro.mft (raw, json)
Hash identifier: Yz754/+32EtJwwKWhmzb4yMJkaz2e2USLNd8eSfMesw=
Subject key identifier: B2:59:84:31:AF:F6:EB:7C:EA:7A:44:94:DF:CB:D8:21:FD:64:1E:A2
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Certificate issuer: /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial: 01DA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
Manifest number: 01D4
Signing time: Sun 27 Apr 2025 04:20:45 +0000
Manifest this update: Sun 27 Apr 2025 04:20:44 +0000
Manifest next update: Tue 29 Apr 2025 04:20:44 +0000
Files and hashes: 1: _ESm2CkBQzmKHfvvhvwdrjRBoro.crl (hash: LfMko2Aql6NK/5JnvsPQWj7ADQ+7EfXvnS+EdSTQSkg=)
2: E39F7394D71F11EFBDA86D9C762E951A.roa (hash: UaFjuj4h6iiPJ7i8a3Sfc3NzxnTj31aeIAuUOtd9TMg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636ECFAF, serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Validity
Not Before: Apr 27 04:20:44 2025 GMT
Not After : Apr 29 04:20:44 2025 GMT
Subject: CN=680db09d-31f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:1e:ed:9c:36:86:bd:f8:50:6a:5a:e9:17:
39:ce:09:6b:14:01:74:47:1c:16:84:df:39:ca:57:
81:c1:b3:00:1c:ae:51:e3:33:74:aa:99:80:41:ad:
e6:3a:62:f3:69:65:2b:47:43:8b:db:64:49:5f:fd:
35:e5:f8:09:f6:25:3c:8b:ce:22:5d:48:21:d6:43:
f3:9d:14:f8:cc:9a:eb:f5:d3:62:2a:3e:68:0a:7f:
e8:25:48:c5:9f:d9:83:7a:bf:04:23:8b:3f:4d:dd:
46:9d:79:29:86:77:a0:75:4a:9e:73:c8:6c:da:03:
6f:0b:81:86:6a:53:83:58:05:23:13:24:3e:50:b4:
bf:7c:07:d1:28:3f:61:44:b8:1d:34:66:e4:96:ed:
ae:4f:81:99:da:f8:ea:ce:2e:6d:07:c0:62:47:22:
0c:a4:f5:2e:b1:87:a6:04:ba:5d:65:ca:74:35:73:
45:fc:34:f5:68:19:6e:9c:76:75:ca:7a:39:1e:0f:
a1:00:de:23:d2:e9:73:7c:cc:d5:a8:3f:36:b9:3e:
04:bb:ed:f3:c5:33:87:e4:78:bc:c9:45:b3:9e:17:
17:cc:0d:b5:91:33:d3:5c:5e:e2:71:ca:df:c0:e1:
da:42:b0:f0:d7:29:39:f8:ef:1e:a0:af:46:c7:f3:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:84:31:AF:F6:EB:7C:EA:7A:44:94:DF:CB:D8:21:FD:64:1E:A2
X509v3 Authority Key Identifier:
keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:40:79:96:35:ca:d6:0f:87:1c:ab:50:6c:41:d6:10:bb:24:
02:cb:d7:9f:e7:62:fb:e2:76:64:69:fd:a0:b5:cb:ac:44:45:
78:b4:18:9c:14:8f:66:41:bb:a5:01:dd:d0:76:31:b6:0a:95:
a5:8b:bb:29:eb:ae:85:9d:81:3b:5d:54:51:44:4c:88:0f:e7:
70:d7:f9:8a:91:9c:54:68:9f:91:09:0f:a9:2a:5a:f5:49:b9:
3a:6f:c9:87:ee:8b:52:9f:b8:cd:3a:5c:72:b7:c3:f8:02:fa:
a5:de:aa:a1:a8:28:ea:13:33:8f:06:d5:c8:51:5d:fe:0c:95:
13:77:0c:93:90:33:4c:1f:2d:12:b5:f7:2c:00:cc:dc:71:69:
9f:f6:3c:6f:1d:2d:bb:12:d9:26:25:ab:93:fa:9f:a7:c6:87:
2e:b0:ab:72:79:7e:3b:fe:0c:ac:12:76:58:a6:b7:8a:32:4f:
f1:c8:dd:94:24:22:c3:06:f7:42:36:3c:c6:d5:78:cf:3f:b9:
5d:08:38:31:b4:b0:22:4e:3e:c0:53:49:da:5f:95:c2:18:d2:
6b:33:f2:a2:74:55:4c:9f:7d:81:67:ce:15:e0:2c:f6:12:e0:
f8:4e:d7:f2:6b:d0:fe:48:18:2d:70:42:28:86:37:48:5e:0b:
8b:b1:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:15:19 2025 by rpki-client