Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File: NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier: 8iL+N1d4Mu5GBymMW2zD8h+Vn+Op4o7HPaxFNcecbtI=
Subject key identifier: 82:CB:C9:DA:5C:B9:C5:30:51:9F:52:44:7F:20:48:E7:70:0E:CE:2A
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer: /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial: 04A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number: 04A2
Signing time: Mon 28 Apr 2025 02:55:07 +0000
Manifest this update: Mon 28 Apr 2025 02:55:06 +0000
Manifest next update: Wed 30 Apr 2025 02:55:06 +0000
Files and hashes: 1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: WCPMMxUIfHtRN4exXpoY7VusdzwIv175OY2otkGCF0w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188 (0x4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Validity
Not Before: Apr 28 02:55:06 2025 GMT
Not After : Apr 30 02:55:06 2025 GMT
Subject: CN=680eee0b-00a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:03:53:fa:98:e8:22:be:3a:67:5a:7a:d0:
ba:ac:a5:7e:99:c4:a8:86:53:be:84:82:b2:6b:a9:
96:b8:11:da:58:0b:7b:4b:85:50:ac:bb:e0:04:ec:
ed:12:02:d0:83:54:0b:87:59:a8:40:c8:b4:4d:32:
f6:1f:7b:a9:22:09:3f:d1:89:10:69:17:6e:e0:fc:
82:c2:93:63:de:48:ae:4f:04:e1:f9:bb:5b:ac:c2:
7c:66:8c:63:85:9a:17:0c:ff:ee:36:10:10:8d:15:
d8:9a:bc:ff:3c:50:5b:31:91:db:67:8c:fc:6d:37:
92:15:ac:54:46:9a:3d:e3:6f:3e:a4:5f:e8:97:fd:
57:0f:62:c4:7b:a6:c2:c8:b7:4d:5c:ef:59:0c:ad:
38:fb:cf:87:18:be:be:db:9f:00:f9:32:16:f0:93:
8f:1d:b5:43:c7:65:29:c0:52:6d:33:66:bc:c2:73:
ed:ab:7b:5a:fa:04:51:2b:bd:cf:06:6d:7d:f3:d2:
4d:a9:69:4f:0d:77:9d:66:df:c9:ed:a3:93:37:c8:
7f:45:69:6b:8a:88:e0:66:9c:e8:8e:36:12:6a:15:
5d:b3:22:87:a7:81:77:6e:73:30:5e:cd:bc:91:9d:
c3:2b:92:03:57:7f:e1:a6:56:8f:b6:a4:c0:19:cc:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CB:C9:DA:5C:B9:C5:30:51:9F:52:44:7F:20:48:E7:70:0E:CE:2A
X509v3 Authority Key Identifier:
keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:34:59:76:bc:e7:23:f0:e2:53:3a:77:c7:a8:4b:bf:d2:3d:
90:47:c6:ff:39:a1:c1:04:20:77:25:db:4a:c9:e0:98:2b:a1:
79:d2:4d:b4:9c:57:02:b6:c1:18:82:b7:df:61:b6:99:b6:46:
d2:a6:7e:a2:5a:dd:d4:86:33:bc:17:a9:51:e4:45:d7:aa:6d:
e4:f0:a5:4e:eb:85:b7:25:cb:76:60:03:f0:1b:5d:af:97:39:
6f:30:25:88:20:0c:8b:42:c2:d0:96:3a:7d:73:02:32:cb:3a:
2c:46:5b:8d:c1:78:15:4a:95:2d:12:f0:b2:98:51:8d:c6:32:
94:cb:81:90:99:d5:51:ba:d6:7c:cd:77:51:2c:17:5a:e7:93:
5e:58:73:75:71:db:4f:23:61:9b:2d:52:df:62:50:58:31:2e:
59:5d:8e:15:29:a7:fc:1a:f1:61:c2:91:6d:26:82:1f:c0:5d:
64:45:16:b7:dd:79:a6:e3:f3:45:6e:90:c3:7a:82:1b:40:ce:
46:a6:83:be:15:29:69:05:71:2b:20:3e:ed:d7:d6:db:69:1d:
a9:4b:47:ac:03:68:49:84:df:80:e8:46:0c:02:49:2d:a9:af:
b0:1f:67:56:23:af:04:aa:2f:0c:c3:6f:8e:91:53:ed:ba:b1:
c2:86:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:47:03 2025 by rpki-client