Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File: B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier: QNOO4n80GWSyPsw3TLzjTTXZW3KCgBB6R30Ba7Ra9Hc=
Subject key identifier: 9E:01:3B:97:B0:53:CB:EA:63:AF:D7:10:D1:3A:0B:8B:0B:13:16:63
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer: /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial: 24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number: 23
Signing time: Sat 26 Apr 2025 05:17:10 +0000
Manifest this update: Sat 26 Apr 2025 05:17:09 +0000
Manifest next update: Mon 28 Apr 2025 05:17:09 +0000
Files and hashes: 1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: Yxm5Ze57WpY4bGHpfZkyhratO5g2t2+9S2PEV2R4wzY=)
2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 05:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Validity
Not Before: Apr 26 05:17:09 2025 GMT
Not After : Apr 28 05:17:09 2025 GMT
Subject: CN=680c6c56-8720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:9c:3b:3d:04:9a:61:40:7b:5b:fa:1d:8c:
f4:a9:7d:93:cd:0c:63:99:a9:0f:c1:c8:73:ac:3e:
84:5d:ad:39:c8:c8:bf:49:6c:88:b0:e6:0b:00:1d:
12:55:df:49:a9:9b:59:de:ea:e5:24:20:a4:58:63:
8b:1b:b8:cc:f6:6a:77:5a:29:2a:d7:cb:df:b6:c1:
6f:82:c8:dd:ea:8e:54:e2:f9:49:d1:56:b5:2c:c4:
eb:4b:eb:59:8f:c0:97:c2:6a:89:18:21:19:c1:d0:
c2:c3:28:79:ca:01:56:cd:4c:84:af:f1:61:1f:fb:
44:33:9f:7b:9b:c3:be:c7:f6:84:c8:c2:95:77:e9:
55:28:61:9b:23:96:96:d5:5e:47:65:4d:78:a5:5a:
29:3c:8c:70:d7:fd:62:db:d1:83:c3:28:84:6f:c7:
33:da:30:e9:dc:ea:71:a2:6d:ba:f0:6b:79:c8:77:
1a:a2:ba:95:ad:67:37:73:57:73:7f:1c:b1:8b:70:
95:7b:dc:67:99:38:59:ee:d4:ee:4e:58:20:4f:a0:
9f:e2:55:cd:f6:c9:8d:66:c8:a4:61:5f:c7:b8:a5:
ff:99:33:02:ff:52:9b:b5:67:95:1a:d8:61:10:0f:
b8:ad:47:f8:94:48:5a:8c:4b:86:84:a5:18:30:ec:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:3B:97:B0:53:CB:EA:63:AF:D7:10:D1:3A:0B:8B:0B:13:16:63
X509v3 Authority Key Identifier:
keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:7c:f3:85:a0:34:87:b7:fd:78:c8:f0:a7:25:72:b8:19:
4c:b5:4e:c9:56:17:df:42:4f:78:3b:e9:af:96:df:99:cc:59:
f0:c3:b3:d4:c1:cf:cc:de:02:57:1a:13:ba:1d:1c:53:98:6b:
49:5b:55:45:e7:a5:dd:1d:1d:a7:fb:7e:56:f6:b2:28:16:40:
06:30:0e:57:0c:c0:89:a5:7b:a2:ab:ee:05:12:14:58:2a:ae:
11:eb:88:e3:90:b7:2a:1f:fc:d1:e7:3b:96:90:32:a1:ad:60:
ea:a2:9f:c1:11:fd:95:39:02:d5:6e:fc:94:4f:e0:e2:63:83:
50:8f:13:08:01:06:20:9e:c7:5d:d8:e0:53:70:e4:98:79:62:
0c:8d:01:8f:2f:8f:dc:60:43:bc:59:e8:80:9f:5d:79:c9:bc:
7c:da:42:f9:96:44:e7:6d:66:3a:c4:c0:58:7a:67:cf:21:64:
e8:82:ab:e6:eb:39:ba:89:ca:6c:4f:03:ca:40:6d:5c:65:3d:
3e:a9:91:7b:28:8f:a5:3e:1d:f4:80:ef:5f:ff:9a:de:f4:78:
51:d0:da:60:08:7e:af:0e:1f:76:0f:00:52:32:34:af:60:b8:
ea:85:58:91:99:1c:c6:16:2f:ce:69:13:49:53:21:d4:46:c3:
08:e9:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:58 2025 by rpki-client