Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File: xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier: gTR2Nsr/nfT1U7FhwoQm7e9tTdmrybemxom+n/r9DWM=
Subject key identifier: AD:52:21:98:5C:96:C0:CC:6F:61:40:EA:4C:30:59:85:D2:7A:78:BF
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer: /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial: 056A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number: 0568
Signing time: Mon 28 Apr 2025 02:36:25 +0000
Manifest this update: Mon 28 Apr 2025 02:36:25 +0000
Manifest next update: Wed 30 Apr 2025 02:36:25 +0000
Files and hashes: 1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: J1IKJtCYW8lM8PjZr5fVK9GpB79wIxV8bUwAbegCKEw=)
2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386 (0x56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3667885AF, serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Validity
Not Before: Apr 28 02:36:25 2025 GMT
Not After : Apr 30 02:36:25 2025 GMT
Subject: CN=680ee9a9-fc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:4c:46:0f:ce:3e:e8:da:3f:f6:07:8b:eb:
5d:3d:c3:ac:9f:23:da:2a:e3:4e:fe:1e:c0:59:e5:
a8:19:cf:7a:a3:c3:4a:47:15:d3:b7:c3:3b:48:49:
25:af:b8:01:70:b2:43:6a:88:83:27:52:8a:b9:55:
cb:bd:74:7d:e3:c6:e3:6a:ca:d3:f8:89:e8:d0:31:
1d:9e:97:76:42:48:5a:d7:cf:5e:34:03:9a:c7:ab:
ee:17:41:2f:7e:33:01:5f:41:86:b1:a9:77:bd:dc:
e0:a7:7a:10:3e:dd:54:16:c4:20:d4:ff:85:3c:84:
a2:06:20:ec:d2:16:2c:18:82:f8:c7:d6:fc:cb:8e:
4a:b0:af:9a:65:0d:6c:24:3a:11:e3:ec:9a:d2:2e:
09:d7:80:f2:80:c9:ac:42:2d:58:44:e7:b2:59:df:
73:80:a5:92:de:57:6a:9f:a1:de:7c:d5:6b:c8:1f:
8a:92:77:f1:16:29:91:b6:34:fd:79:2f:5d:1a:e3:
f4:a2:67:06:72:24:72:e9:28:e4:b9:1e:76:8c:00:
43:c1:fc:a7:2d:f5:37:e8:41:bb:51:dd:5f:79:76:
e3:82:ca:65:6e:f5:7e:56:33:b9:62:88:58:ac:81:
ed:9d:f9:62:4b:e2:4c:89:ce:5f:cd:f6:88:a1:d8:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:21:98:5C:96:C0:CC:6F:61:40:EA:4C:30:59:85:D2:7A:78:BF
X509v3 Authority Key Identifier:
keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:5d:66:ae:be:73:3b:33:90:1f:4d:fd:f1:51:ea:e0:4d:56:
a6:2b:7d:c1:5d:cd:12:f7:e0:60:c3:3f:36:58:98:61:1d:3b:
43:b3:3f:f6:96:63:73:dc:0f:4b:8d:b3:55:64:c3:95:a1:b1:
b4:91:13:a3:4f:cc:70:3d:11:1a:45:de:73:50:4c:05:ad:74:
80:ac:ae:5a:1e:b1:28:5a:ff:2e:27:17:70:d1:4d:68:6f:30:
07:2c:16:fb:9e:22:fa:a2:27:96:b1:a2:66:57:5c:ef:70:c5:
b6:fd:ba:eb:68:f0:2f:76:df:89:ea:5b:cc:1d:c3:ba:7f:74:
af:10:3e:f4:0d:78:22:3d:e8:d4:39:98:96:3e:6e:cd:08:b6:
fa:c2:8b:ca:7a:34:3c:25:22:9d:3e:02:02:16:08:24:de:d3:
46:7f:4d:24:81:14:6a:af:68:f0:32:68:2c:15:7c:ed:4f:a7:
22:69:21:85:07:83:2e:44:0d:49:cc:c8:03:7e:f9:fa:a0:5a:
1f:4e:95:b8:f0:36:cb:91:15:24:b3:eb:12:5e:0d:5b:70:dd:
92:70:66:0a:40:d4:c1:47:5a:71:12:3d:72:07:a1:20:f5:bd:
3a:2e:b4:7a:d8:10:20:7c:06:93:d3:a4:67:57:ba:e2:ec:0c:
db:41:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:06 2025 by rpki-client