Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: ckTjkuJlxieygPOvfa/r9pcoA2PDxVpyFyMTFyw3jAs=
Subject key identifier: 08:E1:C8:E8:FE:06:BC:6E:94:91:0A:B6:D6:2D:45:D5:2D:8A:77:DD
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 020F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 020E
Signing time: Wed 30 Apr 2025 04:12:46 +0000
Manifest this update: Wed 30 Apr 2025 04:12:45 +0000
Manifest next update: Fri 02 May 2025 04:12:45 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: V3rUs8fsifXcx8CKfnRhoSxZeBOjx/r8Bk8sXVwc/fg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 02 May 2025 04:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: Apr 30 04:12:45 2025 GMT
Not After : May 2 04:12:45 2025 GMT
Subject: CN=6811a33e-f0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:f8:01:84:cc:a0:ce:ad:cb:f3:fd:40:45:
ee:0b:5a:9f:86:16:94:fd:ed:67:f6:3e:b0:55:3c:
a6:fd:fa:de:1b:98:02:30:58:c8:5f:93:d5:03:81:
f7:15:19:08:fa:fe:69:a3:1d:f0:3e:32:9d:bb:e8:
1c:23:11:32:d6:13:0f:2b:f9:84:b2:9a:e5:4b:00:
a4:91:d9:66:37:80:db:32:f1:7d:b3:1f:ac:53:4b:
d2:47:0d:21:f9:3f:c2:10:09:21:34:0e:ca:85:f9:
2e:46:9e:14:9e:79:0c:d7:ce:5e:f7:13:15:ae:39:
93:39:39:a5:21:f0:68:46:f3:49:63:ce:76:ee:ca:
be:f5:88:af:d6:d3:c1:85:29:cf:11:46:55:ba:a5:
ac:7c:ed:14:3c:3a:8c:ff:53:0a:6d:98:77:60:d6:
f2:a7:3f:21:49:c2:b5:31:26:c6:96:33:4f:55:78:
1a:25:5a:ae:83:09:b2:86:1a:5f:90:5d:44:74:70:
45:e9:67:84:9a:bb:c3:f5:7a:ab:c1:9c:16:83:d7:
7f:5d:5b:da:52:6f:46:6a:e2:39:19:26:08:dd:e7:
ce:3f:cc:1e:be:70:b4:d0:ce:be:0d:a9:84:89:b9:
29:3b:d4:b4:76:9e:4e:13:ed:00:4f:8c:49:b8:3f:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E1:C8:E8:FE:06:BC:6E:94:91:0A:B6:D6:2D:45:D5:2D:8A:77:DD
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:42:e9:28:21:8a:07:c1:df:67:4e:57:e0:4d:f8:7a:70:64:
c4:b1:0f:f1:79:10:55:f9:2c:b1:13:62:5d:ae:8e:ba:52:2d:
b9:aa:13:7f:f6:2e:e3:d9:73:e7:9f:d3:15:84:71:72:f4:98:
a6:6e:40:55:43:3c:0f:a9:50:04:d3:59:66:31:5e:bd:95:6d:
50:e0:fa:c4:e7:8c:40:c7:42:01:f0:67:0c:21:94:a9:af:cd:
ec:5a:1c:7c:08:d2:97:47:bc:6f:56:c7:d6:c9:bf:e1:fd:f8:
67:d9:ab:e9:6e:c9:44:96:4f:12:fc:ef:5e:98:6f:13:13:55:
cf:c4:1d:3b:7b:8d:2f:6c:8d:38:d3:42:67:1f:9e:da:a6:52:
98:f6:8c:97:63:96:0f:b5:07:05:ba:e2:1a:84:09:0c:a3:9a:
9b:f2:6d:d9:cd:4f:d0:8e:c0:0a:da:b0:40:23:ad:db:b3:e2:
75:c0:36:5e:b5:bd:3d:e6:88:3c:35:ce:f7:37:6f:08:6e:fd:
81:07:02:53:20:92:b9:3f:69:78:58:3b:fd:f8:d3:28:7c:23:
e6:58:55:25:a4:2b:b0:20:97:09:52:93:24:f9:28:4e:48:ea:
f1:14:90:d6:17:1c:36:fd:35:00:16:26:c8:02:6b:cf:4f:4c:
34:16:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:18 2025 by rpki-client