Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File: Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier: nlX9a3WMBPysCAl+VfZFNy6MRpPC8lYsJBxTXl/ePaA=
Subject key identifier: 42:D3:CA:3A:91:7C:63:13:6F:2F:6C:CB:7E:9C:A2:0C:85:00:74:F9
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer: /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial: 0356
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number: 0356
Signing time: Tue 29 Apr 2025 03:28:22 +0000
Manifest this update: Tue 29 Apr 2025 03:28:21 +0000
Manifest next update: Thu 01 May 2025 03:28:21 +0000
Files and hashes: 1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: tqSvw9ylCiqlccBXbMIrRGb9WhzUsk+PHZC3TDPwSrk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 03:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854 (0x356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Validity
Not Before: Apr 29 03:28:21 2025 GMT
Not After : May 1 03:28:21 2025 GMT
Subject: CN=68104756-dc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:8b:36:65:b1:8b:5e:a8:2a:41:73:6b:49:
1b:e5:0c:0e:a8:76:64:b5:bc:cf:4a:a5:0d:55:b2:
29:4e:8b:91:d3:95:be:b1:06:41:e8:f7:cb:26:23:
4c:c9:6f:2f:d7:7c:a1:77:6e:6d:ae:70:48:31:99:
e1:12:30:76:02:87:53:a3:eb:da:9d:71:73:83:76:
aa:91:24:eb:6b:db:c8:03:e2:b3:98:96:f0:fc:b6:
22:fc:58:92:34:04:e6:b2:1c:03:07:04:cd:bd:5d:
10:6d:d2:cb:16:5e:c1:ad:45:42:0e:74:a6:e5:11:
9e:55:fa:d7:ba:aa:44:5a:4c:e8:c9:45:26:f1:09:
25:e2:ab:15:da:bb:ca:a4:8b:82:a1:14:94:8d:97:
f3:11:1a:39:a6:25:ab:87:61:44:56:2c:7c:e6:fa:
b1:98:63:5d:6f:8b:4a:dd:e8:29:1f:a4:ed:52:d0:
8a:a4:14:6f:7d:09:d5:36:43:1b:e2:a0:dd:2b:87:
29:08:44:2c:46:af:a0:34:05:16:9b:f6:1e:de:75:
5d:f2:7f:33:2f:0d:fd:8f:df:00:4f:0d:33:a2:c6:
84:bb:6f:88:99:06:13:f7:b4:99:b4:f8:3d:3a:74:
9d:fd:72:b4:82:26:8f:82:da:09:13:5e:8e:cf:74:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D3:CA:3A:91:7C:63:13:6F:2F:6C:CB:7E:9C:A2:0C:85:00:74:F9
X509v3 Authority Key Identifier:
keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6a:0f:ad:b5:8c:b7:62:35:1d:4d:f0:0d:20:dd:27:a9:0a:
f2:43:55:72:0a:b4:0d:31:95:d0:a1:8a:ca:51:79:2a:1d:a1:
43:88:d5:cf:12:7f:54:b1:6c:53:70:80:8d:7f:53:e0:51:05:
2e:2f:fe:3f:75:62:5e:d5:00:18:13:32:4e:23:1e:19:9c:33:
00:9d:65:6e:bc:f4:74:3a:11:af:30:2a:a1:37:31:f8:3d:c6:
d6:d0:41:25:ba:c6:88:74:10:80:26:67:c2:1a:47:bf:48:30:
19:b5:42:bd:db:32:b0:e6:cf:d7:a1:00:8e:92:f4:63:9c:c2:
e2:59:7b:d7:c2:a4:7f:b4:6d:48:ac:d3:b7:88:67:f0:28:d8:
e4:0b:c5:dc:22:fe:35:a8:bc:d3:bf:58:b3:16:82:9e:1a:c6:
ca:07:e4:c8:44:a6:9a:f4:5a:3b:e9:fd:8e:e0:47:fd:c4:0c:
0a:eb:4b:2d:08:b7:15:16:46:36:10:01:dc:85:dd:cb:79:56:
1d:00:00:3b:75:a1:c3:41:0a:54:fe:f0:47:e7:59:08:72:64:
75:de:f4:1e:d7:1e:9c:21:f9:b9:ee:4f:07:ca:cf:11:ec:23:
56:a4:40:fc:fc:7b:5f:71:95:27:26:a0:9b:ce:ef:cb:a3:4a:
17:1e:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:41:22 2025 by rpki-client