Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File: UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier: XqSjBN6KOc0HWHGlS4x8O220TUWCp6mf3zyzCiYI1Ik=
Subject key identifier: 0A:EA:A8:26:1C:80:8A:00:E2:E4:7F:CA:25:A3:D2:B5:05:C7:17:76
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer: /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial: 031A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number: 031A
Signing time: Tue 29 Apr 2025 03:36:25 +0000
Manifest this update: Tue 29 Apr 2025 03:36:24 +0000
Manifest next update: Thu 01 May 2025 03:36:24 +0000
Files and hashes: 1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: DirmSHoribC5Cxmvp3Ar5TszmLbSyxuNJCZoqp/tORY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 03:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Validity
Not Before: Apr 29 03:36:24 2025 GMT
Not After : May 1 03:36:24 2025 GMT
Subject: CN=68104939-1efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:f9:33:87:af:d3:32:f4:67:b8:8d:5d:2c:
63:e8:37:84:61:59:92:f5:34:66:fb:db:7d:c7:51:
2e:c5:74:5b:11:52:81:81:3a:70:71:5d:03:29:36:
55:45:45:35:8c:a0:14:3e:9b:f6:d2:37:9d:e7:2d:
1b:e7:fe:dc:17:77:70:88:a9:03:45:cc:23:fc:38:
62:08:1d:a2:22:8b:96:8c:8a:37:bb:4f:6b:e3:84:
2d:fc:ca:11:16:41:71:9f:75:8b:12:09:3d:d3:01:
31:7f:77:66:a3:d9:2f:31:18:d4:ab:79:92:26:a5:
c6:2e:99:c5:9b:e8:55:d4:85:68:24:47:66:3f:fe:
ac:84:07:bd:28:d7:aa:b6:bf:76:9b:aa:d2:c7:5b:
ea:7f:b0:1e:bd:fc:3e:6e:f5:dc:48:c6:b3:00:cb:
a7:d2:a1:15:55:3b:c6:8d:8b:cb:09:02:3e:b2:5b:
43:1b:f3:0b:09:49:c4:76:3c:6c:d2:74:df:0a:ba:
57:a0:11:23:5a:c9:42:47:b1:9a:8f:89:82:c7:62:
ab:84:cf:94:e0:56:d8:e0:53:f7:2f:23:2f:e0:61:
ec:b8:2e:71:ef:b4:2c:2d:d2:29:c5:ca:8a:d7:11:
38:b9:3f:dd:61:42:77:b2:57:c6:bb:42:ef:d2:13:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EA:A8:26:1C:80:8A:00:E2:E4:7F:CA:25:A3:D2:B5:05:C7:17:76
X509v3 Authority Key Identifier:
keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:ab:43:9a:7e:ca:45:29:f1:dd:91:a5:d5:c5:f4:a7:f2:e0:
cb:85:2e:f3:cf:0b:d3:f7:58:13:79:7b:bb:25:34:78:cc:e9:
5a:96:5e:7e:35:b3:3f:84:ad:74:4c:db:5b:df:8c:6d:9b:8f:
2b:f5:26:81:a4:cb:41:b4:14:87:46:af:9c:e9:f4:dc:23:34:
89:bc:00:a2:1d:8e:e7:d4:66:f3:24:2d:38:83:22:0f:78:2d:
cc:20:77:ac:66:77:26:8e:61:1b:f2:2f:32:ed:a3:7c:19:23:
9b:45:25:60:96:a1:79:40:3a:7a:06:24:76:bd:03:41:10:2b:
5e:5e:aa:2e:67:cd:12:b2:5c:9a:51:29:88:88:05:5e:29:85:
36:21:55:03:4a:c2:e7:9c:74:66:61:70:2f:a2:47:e0:21:78:
70:7c:dc:48:a5:1b:ee:8d:c8:3e:35:a5:53:4d:fa:8e:f3:99:
7e:8a:f9:9f:90:76:13:d2:e6:4b:a3:ba:64:ee:52:92:c8:b8:
35:fb:7b:2f:b1:43:59:61:77:f9:6d:e9:3a:b5:ca:c2:ac:5f:
1f:e5:ab:2e:4d:c9:07:97:3a:1d:0a:d7:30:54:4c:f0:24:ba:
62:76:a3:7e:59:3b:fa:89:b3:1a:dd:b6:83:cc:43:36:80:43:
97:35:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:13:57 2025 by rpki-client