Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File: LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier: fAMWfTvDccqgdNkYW+eX6cs3FwZGnfTnBML1YaNir1Q=
Subject key identifier: 27:AA:E4:CD:5A:9D:84:AE:95:06:E2:D4:48:C1:26:12:F5:33:19:88
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 01BA
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number: 01B5
Signing time: Sun 27 Apr 2025 04:24:31 +0000
Manifest this update: Sun 27 Apr 2025 04:24:30 +0000
Manifest next update: Tue 29 Apr 2025 04:24:30 +0000
Files and hashes: 1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: Bc2qz11AM0ueG00uIFYZ0/Wu7kTJlepgiF78tAuNvXU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: Apr 27 04:24:30 2025 GMT
Not After : Apr 29 04:24:30 2025 GMT
Subject: CN=680db17f-ef9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f4:6a:c0:72:0d:43:a7:18:77:54:5c:73:ce:
8c:15:d6:fe:07:a2:a4:e5:95:15:ab:99:4b:0d:3c:
a7:29:f3:43:b7:1a:8a:6b:46:6f:23:ef:bd:d6:c8:
d1:59:c8:5f:8b:c8:02:ea:e6:7f:9d:01:30:ba:97:
40:88:ef:e0:69:5e:43:df:b9:57:d9:06:b2:6e:33:
c8:cf:2b:d5:ce:61:39:71:6b:89:4b:d5:e8:26:49:
4b:dd:e0:79:33:40:9b:31:86:3c:01:97:7c:14:cf:
61:f2:6e:35:be:16:8c:a4:9d:77:25:c7:bc:1c:6a:
f5:dc:b1:e4:ac:59:2b:af:9a:34:22:27:ef:ea:03:
ba:f9:d5:5e:5e:bf:5d:46:5d:c0:1c:ee:00:56:b8:
76:c4:7c:81:e9:ad:e1:6c:fb:cf:a4:8d:2b:7e:f6:
56:2d:c2:fb:61:0d:ad:3e:2c:48:c7:49:e6:c3:39:
3e:7f:b7:66:7c:3a:32:dd:08:08:76:64:b7:3f:66:
95:57:0d:b1:2d:79:a2:e0:de:1e:d4:ba:de:08:05:
c9:6e:66:ea:e0:82:79:8e:aa:c3:3e:64:28:2d:f1:
6f:79:6c:96:cb:32:56:fb:fd:d9:a4:0f:af:44:de:
24:87:99:d6:36:96:f7:bc:8f:0a:35:10:da:d4:06:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:E4:CD:5A:9D:84:AE:95:06:E2:D4:48:C1:26:12:F5:33:19:88
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:65:71:04:a3:dd:25:0b:d0:6c:bc:df:dd:18:4c:78:1e:ea:
fb:02:1e:37:9b:ed:0c:bb:5b:1f:cf:cd:ed:74:ff:aa:72:3c:
74:2c:d4:6f:2c:e7:dd:47:d0:a8:e4:77:95:5f:7a:a0:6a:b0:
d2:b3:71:14:58:4e:e5:a1:24:02:ee:5f:bf:de:4a:d5:18:2e:
6b:0c:1c:2a:56:9f:99:fc:40:3c:99:f0:1a:18:40:f3:ed:69:
20:56:ef:3d:eb:6d:29:09:70:ad:bc:22:8c:f2:e6:0d:ba:93:
60:e6:8e:4d:7a:27:0b:0e:d2:e5:fa:45:f7:a0:ec:29:50:ee:
af:3a:39:e5:13:f9:de:ca:c0:a3:7b:05:3d:9b:33:b5:9d:f4:
c7:cd:05:f3:a5:55:c1:51:f5:f5:cb:13:91:23:34:1b:0b:67:
0b:bf:b7:43:6d:9f:b6:24:98:b4:12:2f:71:46:bf:f3:fc:e0:
a4:d4:0f:43:9a:f3:5b:8b:66:0a:ea:2b:5c:52:3b:25:22:c8:
fa:53:f3:cb:4e:59:67:a0:f2:5d:0e:02:c8:10:86:f4:6b:06:
8a:a4:74:f1:f7:39:6c:f6:d7:04:f7:47:dc:ee:20:66:dc:4f:
d5:2e:43:95:0a:82:9c:39:b9:ef:53:de:32:59:df:f3:ec:2f:
a5:5a:d4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:20 2025 by rpki-client