Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File: XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier: ahPSO39oFIwobvcDCf9D47qxuWyUAm0sS6BhzcHnBiA=
Subject key identifier: BB:A9:69:9A:6E:C8:5C:FD:9E:88:EF:D6:A5:15:24:A8:4A:6E:54:72
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer: /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial: 0867
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number: 085B
Signing time: Sun 27 Apr 2025 01:38:48 +0000
Manifest this update: Sun 27 Apr 2025 01:38:48 +0000
Manifest next update: Tue 29 Apr 2025 01:38:48 +0000
Files and hashes: 1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: SfXcgwrnHvggoVEwjJ4Eu052N7KB3UA5UIVAcdT4nP4=)
2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Validity
Not Before: Apr 27 01:38:48 2025 GMT
Not After : Apr 29 01:38:48 2025 GMT
Subject: CN=680d8aa8-de0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:e7:4a:10:c7:e7:b3:50:01:2a:e0:09:c3:
2d:c4:9a:de:b2:83:57:ce:1a:d6:82:f0:20:d1:5b:
2b:4f:19:b9:c3:63:84:54:c5:f0:2b:e6:3f:c9:83:
4e:e9:43:87:fc:c7:ac:45:3d:6a:c5:4c:bb:5e:91:
84:d5:d5:a6:9f:aa:3b:17:6e:dc:4a:74:81:44:e5:
ea:d0:2c:f4:e7:3e:c4:70:eb:a6:61:bf:3e:15:e5:
59:5f:c9:c4:f6:a8:91:5e:99:10:32:b2:2a:a1:ea:
98:d6:47:65:c1:a3:90:fc:18:b8:d3:cf:4f:b7:d4:
61:d8:de:98:96:66:5c:e0:e2:15:1b:df:04:db:bf:
f3:c7:09:65:fb:cf:2c:18:0e:13:85:c9:53:2d:bc:
35:fb:e5:1a:47:42:dc:c5:78:c1:13:d8:2e:69:1e:
18:22:3e:32:7f:19:1a:fd:6b:f8:27:36:23:5a:52:
5e:f1:35:4c:0e:c9:f6:e9:92:6c:41:59:88:99:8f:
ea:71:98:4a:cf:19:35:9a:cc:bb:07:bf:f7:70:fa:
f4:87:a9:70:e5:d8:a1:ee:cb:e5:c6:b4:90:89:c0:
c9:e3:1e:31:d9:87:e0:8d:6d:8e:58:93:67:89:29:
53:ec:aa:6e:3b:fb:d6:b1:27:da:04:2c:e3:5c:1e:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:69:9A:6E:C8:5C:FD:9E:88:EF:D6:A5:15:24:A8:4A:6E:54:72
X509v3 Authority Key Identifier:
keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c0:5f:5b:bd:2f:bd:52:06:d0:70:a0:77:9c:1a:28:66:86:
9f:54:c1:55:4e:61:c2:f1:56:1f:85:e2:4e:de:7d:17:00:f8:
92:87:37:54:72:73:16:19:59:af:94:19:09:fc:41:63:54:c1:
b8:dc:f9:75:7c:b7:77:ac:6d:5f:55:82:b8:1f:2a:44:66:59:
86:20:ba:92:34:0c:a2:da:08:a1:06:65:e8:73:5b:47:03:0b:
17:ff:c1:c6:dd:52:cc:d7:11:92:44:d8:f2:f9:7e:d6:5f:a1:
fd:e1:b2:7f:dd:12:ea:4c:26:41:00:ce:d9:b3:17:5b:24:81:
20:39:26:6c:42:0e:04:af:9e:73:0e:83:5f:86:04:c8:c7:cb:
3c:f4:b1:00:da:94:7a:8e:c2:d8:08:ef:87:74:ca:aa:f7:55:
9f:9a:c0:b5:04:a2:6d:22:be:6f:15:52:99:82:4b:c5:ec:40:
3e:13:02:df:17:ec:20:42:2c:27:a4:bd:ed:2c:ce:3b:bc:3c:
b2:c2:cd:50:24:d7:6b:be:a2:ea:aa:1d:67:27:2c:1c:b6:a0:
79:57:74:a7:41:63:92:18:f1:99:9c:5c:0b:9c:5f:e5:d4:26:
b8:fc:2c:ee:99:4c:1d:42:31:77:29:44:99:76:a4:ea:2b:5f:
48:84:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:31 2025 by rpki-client