Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier: vBY7iFWIJ7AM0NDv3iK81OwI8KZCkstvjWp4H/8z1VU=
Subject key identifier: 43:32:92:B5:E0:CF:55:42:C2:54:99:AE:38:61:F4:48:37:17:6C:7E
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer: /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial: 023D
Authority info access: rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number: 023C
Signing time: Sun 27 Apr 2025 04:04:59 +0000
Manifest this update: Sun 27 Apr 2025 04:04:58 +0000
Manifest next update: Tue 29 Apr 2025 04:04:58 +0000
Files and hashes: 1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: NkmWQob2hwW+rKQU28hXj1GThFdfqbSwDkvy49zDvmQ=)
2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3691854AR, serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Validity
Not Before: Apr 27 04:04:58 2025 GMT
Not After : Apr 29 04:04:58 2025 GMT
Subject: CN=680daceb-4784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:6f:a6:81:a0:90:01:66:f5:8b:a5:05:00:
b2:62:24:43:bf:40:c2:bd:bd:ae:1b:5f:9e:5e:2c:
f7:79:bc:1a:b1:d2:34:73:4b:87:c2:da:b6:a9:2d:
cb:59:43:30:18:94:01:07:c2:42:9b:4e:17:43:f3:
82:db:ce:9e:cd:84:bb:27:31:f5:0b:b9:d9:13:a5:
8c:06:bc:f5:f5:7c:6d:17:3f:2a:ee:2d:f3:09:ef:
50:dd:dd:4a:f6:0f:5d:f6:1c:68:a8:10:0e:f5:cb:
74:fc:1d:01:2d:f6:42:26:6a:7c:35:47:18:71:10:
26:08:f4:b6:b9:15:80:9f:0b:55:7e:40:96:9b:3a:
36:3b:a3:36:83:75:8d:3d:52:b4:5f:59:53:03:39:
12:6d:80:5c:eb:ef:7e:30:62:a2:75:59:bf:24:9f:
55:10:96:2e:b7:30:95:64:76:14:90:2a:c7:c0:bb:
6e:c3:70:9d:45:27:63:98:f3:7d:ac:51:95:4d:d9:
26:8a:b0:3e:1c:26:f9:c6:9e:14:19:c6:71:9d:c5:
05:14:ce:5c:da:aa:77:eb:c1:e0:ca:8c:59:81:d1:
e6:52:f8:17:ab:36:4c:5b:12:96:9b:ad:1c:09:c9:
3f:fd:80:88:1a:9d:f9:0f:f1:31:4e:1b:6c:86:d4:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:32:92:B5:E0:CF:55:42:C2:54:99:AE:38:61:F4:48:37:17:6C:7E
X509v3 Authority Key Identifier:
keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bd:0f:ff:2e:e7:c9:41:c6:ab:ea:25:58:33:ad:21:7e:d4:
46:ef:a8:53:0c:2c:f6:36:47:d9:96:8b:a9:eb:b4:8a:3f:c5:
e5:6b:1b:a5:9e:6d:b0:e1:08:3a:3a:ac:34:4d:63:49:98:76:
4c:22:67:05:cd:e8:c0:39:6b:90:45:17:82:f1:9d:ef:bd:67:
4d:1c:df:a5:25:25:ae:e2:22:52:1b:30:3f:c7:ce:d6:7d:f9:
bf:f8:63:48:bd:df:65:77:0d:73:c7:4c:3f:bd:d4:d4:c5:c9:
d0:5e:e0:ae:da:cd:c4:91:fb:80:78:a1:25:5c:ca:28:c1:90:
dc:4b:d9:1e:f4:85:db:55:d0:f7:13:10:53:9c:54:d7:f0:43:
99:53:fb:39:f7:13:d8:88:32:f0:27:81:68:06:21:35:56:c1:
71:a1:b4:62:4c:41:ba:24:0c:c4:9d:ca:a5:d3:c6:67:e7:f7:
87:65:e3:ad:ec:79:eb:42:a3:eb:01:de:1f:28:8e:6e:4a:a6:
3a:02:2f:13:8b:99:e2:a5:66:c1:a8:e7:0c:ff:b2:f1:6a:87:
c6:16:60:7d:bc:39:8c:96:eb:ad:7e:6c:b7:b2:77:d7:40:7f:
a8:37:b3:ed:fc:9e:af:e8:48:8c:24:bc:6d:11:a1:80:8b:7a:
02:e4:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:04:49 2025 by rpki-client