Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
File: h-G7jI0reZLqTr7rMz_hQp5w7po.mft (raw, json)
Hash identifier: GfTaKZZPIm1lsrwpjsBOmeMMZ9VMnApxCXXfFjRTlC0=
Subject key identifier: 02:BD:E7:60:0C:89:98:27:A9:D3:C4:85:DB:7A:02:DA:81:4A:D7:A5
Authority key identifier: 87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
Certificate issuer: /CN=F3646FFEAF/serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Certificate serial: 0490
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
Manifest number: 0490
Signing time: Fri 09 May 2025 02:52:37 +0000
Manifest this update: Fri 09 May 2025 02:52:36 +0000
Manifest next update: Sun 11 May 2025 02:52:36 +0000
Files and hashes: 1: h-G7jI0reZLqTr7rMz_hQp5w7po.crl (hash: zQSWQChOE+2WJgK2LRgqGNVZnuvLaNmsU+o981ZjjxU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 02:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646FFEAF, serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Validity
Not Before: May 9 02:52:36 2025 GMT
Not After : May 11 02:52:36 2025 GMT
Subject: CN=681d6df5-4269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:c3:2d:f1:36:23:bd:33:8d:a3:e8:c9:f1:
bf:d5:7c:31:a2:65:6b:df:29:fd:b3:c1:b8:df:08:
fc:f8:e0:3f:3b:80:ba:ee:b4:26:19:c7:b7:41:15:
a8:f8:0d:42:84:09:ed:c5:19:e2:83:96:5e:57:87:
72:17:0a:04:d6:3b:ee:35:dd:73:bd:28:d8:61:1f:
21:ae:39:75:95:b2:01:ce:eb:d3:04:bd:8e:4c:29:
61:07:c7:97:f5:ed:36:dd:db:a2:52:11:c0:7e:49:
46:2a:09:77:d2:ef:9c:f0:30:52:09:9f:25:15:48:
86:e5:a8:43:e2:3d:5c:78:e1:fe:8f:03:76:da:28:
07:70:f0:6c:2e:4e:bb:ba:57:b0:3e:b4:74:0c:49:
25:3e:bf:fb:ac:d7:8f:cb:c9:a6:a1:2f:f2:05:eb:
ae:cf:8a:d0:3a:ab:d5:2a:1c:16:72:f1:c1:59:99:
3c:25:65:e8:0c:cc:23:d5:af:d4:6a:8f:f1:fe:ac:
7e:dc:0c:d5:ae:ee:27:d0:54:af:6f:66:99:e5:ed:
06:9a:e0:6c:5c:3a:62:bf:66:f0:20:8b:0f:49:19:
46:da:b4:31:8d:ee:44:62:2e:46:f1:22:07:90:83:
03:28:02:43:16:63:79:ef:06:45:68:25:ae:ad:a7:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BD:E7:60:0C:89:98:27:A9:D3:C4:85:DB:7A:02:DA:81:4A:D7:A5
X509v3 Authority Key Identifier:
keyid:87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a7:da:59:36:8a:87:86:36:47:dc:19:81:df:e8:93:0e:eb:
58:2a:6b:e3:2e:ea:cf:26:54:ea:99:40:e1:53:50:70:55:2e:
db:23:ac:34:53:24:cf:f3:b6:9f:f5:30:be:5e:0d:c9:64:a5:
85:48:69:b0:49:c7:8c:d2:97:c0:c9:4a:8d:bc:37:3c:81:03:
26:5c:df:ae:e4:4f:60:fd:de:70:f5:c4:5a:e7:a5:b6:4b:85:
3a:79:7c:b1:04:10:d2:01:5e:5e:1a:24:5e:a2:f9:66:33:29:
5d:70:11:bf:48:e7:5b:03:37:a8:25:e2:24:bd:bf:4c:92:35:
95:5c:5d:ef:ce:80:f1:29:b5:be:75:5b:0d:d0:44:11:25:a5:
2c:13:8e:62:cd:54:50:65:3f:6b:7b:00:9d:2c:81:61:bb:90:
24:20:eb:5b:c0:b4:8b:31:9a:1b:9e:7a:e6:b5:a5:ad:10:1c:
c4:71:3b:b7:e6:6a:8b:0c:03:63:88:e8:d3:60:56:83:4d:1f:
cf:fc:48:c4:bc:c4:4f:b0:fa:23:2c:7a:f8:3f:e3:d8:68:11:
34:8d:ca:ca:42:f3:bf:6a:51:c7:1a:78:72:da:6f:5a:76:0c:
94:64:80:df:da:17:96:60:52:96:63:d4:a7:d1:9d:f8:63:b5:
94:98:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:59:00 2025 by rpki-client