Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
File: RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft (raw, json)
Hash identifier: YRLqRux+6BQj451dj/l38w8yRHXDqDeVP4N19xCmpK8=
Subject key identifier: D3:55:67:3C:F0:14:8F:22:4B:A4:B6:DE:3D:56:A6:75:50:1F:04:37
Authority key identifier: 44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
Certificate issuer: /CN=F363CC54AF/serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Certificate serial: 0857
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
Manifest number: 0854
Signing time: Sun 27 Apr 2025 01:38:08 +0000
Manifest this update: Sun 27 Apr 2025 01:38:07 +0000
Manifest next update: Tue 29 Apr 2025 01:38:07 +0000
Files and hashes: 1: RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl (hash: 9u7wL93c9YvaixuwteNYyWeOiJkDpKF4IRV68qIJsKc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl
rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363CC54AF, serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Validity
Not Before: Apr 27 01:38:07 2025 GMT
Not After : Apr 29 01:38:07 2025 GMT
Subject: CN=680d8a80-9ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:e2:60:ca:9b:e7:55:d8:71:7e:a3:b5:4e:
6c:6b:fb:cf:33:6f:a0:12:2c:0b:de:04:37:f1:cf:
79:c9:44:62:34:c9:16:6b:90:8d:80:08:66:25:fb:
83:c3:c5:0c:98:73:a4:52:4c:e3:90:1f:a7:9b:49:
d3:56:31:14:0c:3d:0f:9c:ca:c2:7e:e3:0c:14:33:
b6:95:cb:be:ea:36:b7:f0:75:d3:21:3f:2a:49:71:
72:cd:e6:0d:fb:00:a4:40:71:ee:da:a9:9b:cc:02:
21:20:92:7d:89:d2:83:3d:66:0e:ca:24:e9:dc:d7:
c4:6f:cd:09:a6:b0:a5:d8:7c:c8:91:59:ef:62:d6:
a6:02:af:bb:11:9f:f6:1a:8a:45:be:93:8f:ce:92:
6b:63:80:3f:0c:8a:5b:6b:5f:81:d4:f7:ac:6a:84:
ff:cb:3e:1e:38:d1:71:56:11:8e:bb:45:5f:77:3c:
1e:36:a6:4c:06:4c:69:e7:7a:4a:64:79:e0:5d:41:
9e:42:ca:03:2f:bb:95:26:fd:37:7a:16:75:c9:f0:
f9:4d:d9:9e:88:1a:e8:9c:b1:cc:ab:e9:be:aa:ba:
90:ad:71:72:38:10:0f:27:5d:b2:9e:67:8d:2c:a9:
08:e0:eb:72:5a:4f:37:64:0e:43:29:10:12:0f:a4:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:67:3C:F0:14:8F:22:4B:A4:B6:DE:3D:56:A6:75:50:1F:04:37
X509v3 Authority Key Identifier:
keyid:44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b9:c0:ce:1b:85:4f:7f:8d:6e:7d:67:d3:ac:01:e7:66:17:
48:67:82:90:1b:e7:e2:b5:41:ec:ff:dd:c9:11:87:99:a7:d4:
62:24:5c:f1:d1:84:49:bc:d7:10:a7:fc:9f:36:3c:b5:66:7a:
1f:67:4c:ab:ea:8e:f1:90:63:b2:00:03:98:9c:b5:11:f7:79:
1c:cf:e4:55:57:5b:f9:cb:79:bc:38:08:d5:b7:c3:f4:6e:f2:
3e:dc:d8:1e:23:bc:ea:2c:15:f3:e4:b8:f0:ff:39:84:3f:15:
76:b2:e2:9f:0c:7b:f6:be:94:0b:ad:ef:1a:ae:24:6b:ab:53:
ea:a8:82:76:9b:bc:13:de:24:71:f5:14:ac:5d:15:28:10:ed:
53:c2:3c:f8:a7:8b:71:19:c4:2e:58:ca:fc:d4:3b:ae:38:b8:
19:24:b5:61:c0:58:9a:09:8f:81:b7:39:d4:6b:12:09:ff:c7:
47:8d:58:b2:97:15:eb:29:c8:7f:d9:7a:25:e6:04:93:49:74:
33:ae:ad:21:d2:d7:9a:5b:59:58:5f:64:eb:ff:ac:98:11:68:
54:e5:cc:c8:e8:26:3a:96:49:91:67:42:fc:10:fa:2d:8c:34:
fd:6f:75:ab:5b:0b:0b:db:45:d7:ba:da:3c:1b:83:4f:2b:87:
6b:1f:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:20:50 2025 by rpki-client