Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File: CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier: gvA78JM6uh+9NVNxwRSTKoQeOqOJi5knQjIm+QgtrcE=
Subject key identifier: 3B:9D:C0:AD:0D:BB:D8:B7:2D:EA:1B:86:9C:8C:10:A7:63:30:63:8C
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 0197
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number: 0191
Signing time: Mon 05 May 2025 04:33:01 +0000
Manifest this update: Mon 05 May 2025 04:33:00 +0000
Manifest next update: Wed 07 May 2025 04:33:00 +0000
Files and hashes: 1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: Ub4GP2pUPTjRxrWliNsX5rNHUVzqpuPf03ro/xfeEeE=)
2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 04:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: May 5 04:33:00 2025 GMT
Not After : May 7 04:33:00 2025 GMT
Subject: CN=68183f7d-c65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:2a:cd:17:e5:b5:93:a4:ae:d5:b0:8b:31:
16:75:fc:73:26:7d:5f:a7:62:93:ab:11:d5:1c:1c:
c2:30:70:e2:fe:88:39:fe:21:6d:f7:1c:de:67:3f:
d6:9f:d1:c0:d0:91:d3:18:09:dc:40:db:8f:45:71:
e2:ef:6c:20:4b:9c:60:53:ee:1a:05:4a:95:38:c1:
ee:3c:f9:93:9d:71:ee:47:f5:fa:57:80:28:e0:21:
d9:c2:a3:b2:dc:4f:eb:3c:23:21:07:b7:5b:a9:f9:
62:4e:64:20:1d:6f:6d:e3:86:d2:d7:60:ba:ee:48:
0a:19:c7:05:8f:b6:b9:14:ef:75:7f:60:e9:bb:7c:
b5:ab:c8:c4:75:ff:bc:95:2e:30:29:ff:02:4d:7b:
cd:51:a2:b9:04:1e:ca:d2:cc:20:e5:8b:19:f4:50:
5c:17:5e:e7:62:04:26:04:10:58:05:22:65:81:f6:
6f:e6:e1:3a:f2:41:79:1f:4a:8a:e7:d2:a8:98:b5:
d7:9f:09:5e:35:ba:50:bd:c8:3f:59:27:40:6c:9f:
05:18:7f:f2:3f:0e:25:e0:bb:35:b2:0e:3e:08:a5:
d0:35:72:63:6f:28:f4:aa:18:54:c6:ed:65:f6:16:
1e:1c:1c:a3:2e:d4:c4:55:97:fd:34:2b:fd:62:a7:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:C0:AD:0D:BB:D8:B7:2D:EA:1B:86:9C:8C:10:A7:63:30:63:8C
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b7:6f:ed:a3:7d:ca:30:08:68:dd:f6:bc:45:73:ae:03:60:
89:96:a3:bd:a8:85:03:05:72:65:bc:59:8e:d1:fc:82:09:ff:
54:4b:b4:17:8b:56:47:91:6b:92:d5:2b:2a:02:24:10:5e:4c:
ad:3c:93:96:63:e9:9a:99:8f:80:e9:0e:9a:6b:ee:7e:b6:bc:
58:e0:4c:cb:dc:8b:84:68:7f:c8:83:bc:f6:51:7b:91:d5:81:
00:61:d6:e3:bd:c0:be:36:89:b8:c0:34:46:a4:f3:44:07:3e:
80:b9:3a:63:17:8e:f7:35:ca:9c:56:1c:22:24:22:0c:5d:c4:
83:83:8f:84:a8:f2:66:3a:83:dd:1d:6e:6b:43:85:81:db:85:
9a:03:bf:41:56:c4:28:25:21:48:70:88:81:88:29:5f:d5:b8:
ec:f9:67:35:71:c9:a9:97:29:0a:4c:dc:44:25:e2:0f:4c:88:
64:7c:1b:21:04:25:d2:a5:87:b3:26:bd:e1:88:13:3e:58:97:
04:a6:82:00:f7:d2:33:24:92:9d:cb:57:97:9c:a6:78:30:bc:
31:7c:74:fe:e3:80:d1:eb:7b:c9:af:42:3a:88:4d:a0:90:72:
43:87:18:83:16:fa:62:e2:43:c2:7a:ef:71:da:8c:58:8c:84:
9f:6e:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:38:02 2025 by rpki-client