Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
File: 3tjUZmQoMBoc4GZckKo0Jgr_74k.mft (raw, json)
Hash identifier: NfoEkEukaKAA4QJMIyJE/1Ucz2l+Jo1a1hPOG5wD2jE=
Subject key identifier: 28:2D:5B:2E:8A:D5:E4:AF:0A:03:D0:3D:6F:08:9E:C5:1F:39:98:E8
Authority key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
Certificate issuer: /CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Certificate serial: DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
Manifest number: DC
Signing time: Thu 01 May 2025 04:57:58 +0000
Manifest this update: Thu 01 May 2025 04:57:57 +0000
Manifest next update: Sat 03 May 2025 04:57:57 +0000
Files and hashes: 1: 3tjUZmQoMBoc4GZckKo0Jgr_74k.crl (hash: zxRSglExRqyG1KEJKXn8NhvD/ADzC3PzCLPo6KYz1tU=)
2: 9058BEEA816411EF8E2AA088762E951A.roa (hash: RCn22Xwu4T2MS/ROjl1vK38sisW96USMCz48c97gNCE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 03 May 2025 00:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A8A05AF, serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Validity
Not Before: May 1 04:57:57 2025 GMT
Not After : May 3 04:57:57 2025 GMT
Subject: CN=6812ff56-5b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:ed:ed:e1:d0:8e:f4:88:2d:ab:d1:a3:24:
c4:c0:8e:14:5c:8a:eb:69:fa:57:53:44:97:31:70:
de:b7:ab:32:30:fe:c9:bc:74:ed:5a:e4:c1:38:c6:
87:5a:aa:bb:06:26:7e:5b:0a:0c:4d:b0:40:f3:57:
73:3a:bd:17:84:a5:71:0c:a8:7f:ec:a9:e5:67:60:
cd:b9:fa:b6:4f:b0:46:c5:aa:b1:dd:d2:d2:f2:db:
65:82:22:75:55:39:78:b7:e7:5a:49:de:94:67:af:
f9:ab:d1:f6:a9:41:93:51:27:a6:3d:fc:c9:b8:86:
67:7a:65:49:ae:b7:50:24:4a:98:63:13:7e:88:68:
39:b5:f1:77:56:17:91:2d:4a:6f:09:7e:6f:d9:64:
45:3c:b4:7a:1a:d1:55:6a:f8:0a:2a:fc:d4:10:fd:
d4:ce:6c:2e:7d:e0:2d:54:59:3d:47:8a:1d:d9:e8:
7b:35:a9:48:a8:36:15:ec:42:08:e4:19:54:6f:8a:
21:61:d2:9d:e4:52:09:8b:bf:65:2a:01:c9:13:43:
65:5a:6b:c3:ac:bf:74:30:a2:6c:89:d3:f9:de:b2:
df:a2:52:f6:57:ee:42:3e:ce:86:fd:78:ae:da:44:
93:42:e0:a1:06:b3:cf:fc:43:d9:9f:2a:fd:a3:41:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2D:5B:2E:8A:D5:E4:AF:0A:03:D0:3D:6F:08:9E:C5:1F:39:98:E8
X509v3 Authority Key Identifier:
keyid:DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:81:bd:15:74:dd:c9:a2:dc:7b:ee:2b:75:1f:6c:09:c0:48:
e6:f5:95:96:63:0a:bb:66:46:3f:86:75:5e:d0:e9:55:00:ec:
37:1f:2a:06:9f:43:df:ba:de:dc:6d:cd:a0:32:b2:32:97:86:
2e:27:3f:a7:c3:17:dc:60:83:62:2c:10:19:0c:0a:f0:a9:98:
e0:b1:40:49:97:90:52:f7:04:fa:dc:3c:e7:2a:a5:3e:0f:ed:
b8:c5:01:d8:57:ea:73:19:3e:31:24:e3:49:e9:e2:2d:f5:cb:
ae:be:53:fa:88:fa:a3:ec:78:f2:1e:ff:c8:7b:c3:d2:31:92:
96:31:15:17:8c:1f:ec:a8:9a:eb:18:8e:f1:17:85:2f:66:63:
97:b1:91:83:0b:e2:4d:63:bb:4e:59:4c:8f:85:db:ba:cf:b8:
53:4c:e2:7e:1f:08:e9:e3:df:43:46:71:87:1e:85:ac:90:e2:
4e:b7:18:42:d3:b0:65:47:ab:8c:41:68:5a:a2:62:71:98:f9:
a0:69:cb:24:9f:bd:67:2e:0f:8d:a9:b4:2c:35:ff:a3:cd:c4:
ae:77:d6:d1:a9:fd:e6:f7:2c:40:ca:3f:3f:4a:5a:dd:4b:5f:
f3:bb:0b:d5:5c:55:bb:71:54:bf:0e:28:ee:96:ae:26:3a:6e:
52:30:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:23 2025 by rpki-client