Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
File: 5EQ9BuJ23CaV_RskPB6hv524UiY.mft (raw, json)
Hash identifier: hbLp3uLT+3P4cH5jXJzSUfDqOiZf3C9txV7FYUjqY0k=
Subject key identifier: 68:F1:8D:98:BA:03:E9:79:3C:A1:82:FF:BF:AD:D8:86:4A:68:94:3B
Authority key identifier: E4:44:3D:06:E2:76:DC:26:95:FD:1B:24:3C:1E:A1:BF:9D:B8:52:26
Certificate issuer: /CN=F3657B9BAF/serialNumber=E4443D06E276DC2695FD1B243C1EA1BF9DB85226
Certificate serial: 0523
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
Manifest number: 0522
Signing time: Sun 27 Apr 2025 02:39:54 +0000
Manifest this update: Sun 27 Apr 2025 02:39:54 +0000
Manifest next update: Tue 29 Apr 2025 02:39:54 +0000
Files and hashes: 1: 5EQ9BuJ23CaV_RskPB6hv524UiY.crl (hash: YGzeTYIE0MG9k5SJ/qTyJht+9lPw1OQxF/1gU77yoe8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3657B9BAF, serialNumber=E4443D06E276DC2695FD1B243C1EA1BF9DB85226
Validity
Not Before: Apr 27 02:39:54 2025 GMT
Not After : Apr 29 02:39:54 2025 GMT
Subject: CN=680d98fa-3626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ba:1d:9f:df:48:15:e0:92:f5:8c:c1:16:97:
05:50:a6:bf:fd:d2:69:cf:92:e6:13:60:15:c0:70:
e0:93:a8:95:19:a5:76:e5:0a:e5:6c:8c:eb:e2:18:
25:96:c6:93:f0:78:c7:fb:a8:e6:f4:9c:a6:e3:9f:
19:15:d1:c4:69:43:15:df:79:3f:01:8d:32:36:f5:
39:c0:ea:fe:fc:b8:08:60:21:6f:73:bc:86:e5:34:
f0:72:ba:6a:be:ad:00:5d:79:11:0e:0e:a4:f3:32:
c6:88:68:88:7d:68:3c:54:ef:59:89:6c:11:16:b5:
54:4f:40:f9:f4:e3:05:fd:92:aa:cd:65:df:17:1d:
63:44:26:9a:7c:fc:d8:94:49:2c:00:3d:5b:4d:75:
cf:47:09:c1:77:af:28:21:72:2f:fb:ee:4e:c8:b4:
33:43:cb:43:8c:5d:3c:ff:63:c7:1d:62:8d:22:6c:
77:fb:9f:bd:64:5e:7e:bb:54:1a:3e:f3:63:c0:c8:
55:f2:91:84:1a:c6:3e:9a:83:4f:11:94:ea:da:f4:
56:13:f9:43:82:cd:09:56:1c:3a:a5:11:41:95:27:
f8:db:ff:fc:cb:de:b1:ef:d6:bb:d4:8b:f2:79:08:
e8:cd:ba:ca:7e:f1:e0:c8:c7:ec:d4:b5:42:c4:b3:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:8D:98:BA:03:E9:79:3C:A1:82:FF:BF:AD:D8:86:4A:68:94:3B
X509v3 Authority Key Identifier:
keyid:E4:44:3D:06:E2:76:DC:26:95:FD:1B:24:3C:1E:A1:BF:9D:B8:52:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:72:10:33:9b:d5:21:fb:cc:c8:f1:ff:c0:c6:c9:c5:aa:
40:71:67:b4:7f:91:cc:bb:9a:e6:c9:4b:7d:1d:b3:e3:12:02:
bc:eb:be:41:39:2a:dd:31:35:55:ed:7d:12:c8:90:ce:b7:db:
67:4f:77:0e:8e:cb:5a:d4:02:31:1d:6d:3f:69:66:0d:07:11:
46:fe:b9:f0:01:f8:10:8e:50:a1:f0:65:4d:c6:93:ac:dc:bb:
cb:4c:af:9e:74:4e:a6:25:91:c4:29:bb:b1:a4:f4:46:33:3b:
45:75:ae:b5:4b:c3:ed:92:cc:8d:c6:a5:d5:bb:95:7f:11:5d:
0f:33:d4:c8:d0:bc:cb:3e:c9:5d:25:bd:95:79:d5:39:73:93:
07:81:48:97:77:d1:c2:bd:52:10:ae:df:d5:01:e7:18:b5:29:
f3:0e:f5:69:30:3f:5e:3f:c2:b4:12:29:9d:f0:42:fc:94:41:
7b:e3:4c:cb:fc:44:6d:54:31:07:89:6e:8c:7f:72:8a:50:5d:
54:e4:d1:50:fe:8a:2e:be:09:d4:98:b1:81:52:0e:95:f1:dd:
5d:50:06:ce:e0:f8:2b:ca:24:72:24:44:11:81:90:ba:42:3d:
fc:7e:a6:37:80:ef:a8:9a:70:8a:97:79:53:54:c5:f4:2d:06:
7d:de:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:52 2025 by rpki-client