Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier: yE/mg9IhKXB6H5y/4js03zCiRl08mbBelIDBovZ4vg4=
Subject key identifier: 4F:A1:E0:15:74:61:A6:6E:DB:82:6B:3B:F4:09:B7:D6:D7:C9:71:87
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 06A5
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number: 06A0
Signing time: Thu 01 May 2025 02:03:26 +0000
Manifest this update: Thu 01 May 2025 02:03:25 +0000
Manifest next update: Sat 03 May 2025 02:03:25 +0000
Files and hashes: 1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: 0KYDThEV/0mGDQdtThlb9xORpk/fsADMIiSUnSbF0V0=)
2: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (hash: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 03 May 2025 00:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1701 (0x6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: May 1 02:03:25 2025 GMT
Not After : May 3 02:03:25 2025 GMT
Subject: CN=6812d66e-44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:d3:8d:45:01:71:e5:01:ff:1c:6a:78:c9:
60:00:46:88:38:91:9e:f3:97:40:83:d4:ca:75:92:
6b:0b:97:5a:e4:7b:d5:36:a4:56:2f:b3:cd:b8:4c:
a6:10:39:ba:ca:7b:f4:69:16:8a:ab:29:b8:9f:3e:
22:0e:f3:e7:01:11:34:1e:dc:68:8a:8d:c3:d4:98:
96:56:c8:78:fa:96:e2:28:be:37:c8:29:3c:75:e2:
c2:48:70:70:e3:fc:ff:41:e3:c4:ae:dc:40:d5:48:
eb:c8:46:7f:b0:15:18:9c:9b:f2:1e:1f:1c:16:73:
02:c5:d0:0a:3c:09:5e:f8:80:57:ae:bf:0c:9d:1d:
4d:61:e3:84:c2:6b:2d:53:41:c4:84:d0:90:49:3f:
77:bd:27:f4:50:a0:31:7b:7b:5f:ec:4f:db:60:8b:
45:15:a4:55:46:ce:59:3f:b1:97:4c:c4:19:44:1e:
55:38:c1:12:0b:70:59:b8:a1:05:3f:36:f6:12:b7:
60:be:5a:04:2b:4d:fd:ba:cb:56:c4:fb:dc:e0:f9:
bb:a4:10:f5:a5:95:c6:69:ff:3b:2d:f7:b7:2e:1b:
18:e5:b8:b8:08:87:bb:c9:7a:ef:a1:c2:89:92:ab:
79:ee:c7:4d:5e:f8:51:82:0e:ac:10:7f:70:b3:d5:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:E0:15:74:61:A6:6E:DB:82:6B:3B:F4:09:B7:D6:D7:C9:71:87
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:31:85:fa:81:67:7f:f1:dd:45:3e:a4:a9:59:e9:77:3f:
db:2b:c6:bc:0a:e4:4d:32:9d:a9:66:cf:1a:fe:4c:7c:e0:ac:
bf:37:32:18:03:52:04:52:5a:b6:05:1a:5d:cb:e3:62:ab:4c:
d1:42:06:ee:97:de:da:38:a9:10:ad:5b:f0:35:dc:bc:71:a2:
e0:55:83:7b:2d:af:c5:ed:e1:79:0d:59:92:b7:54:a4:63:82:
6c:ac:f9:6a:12:d9:59:57:dd:8b:eb:ec:ab:75:71:3a:aa:e9:
a1:fe:76:9a:04:e9:cd:fc:8e:77:3c:ba:e3:39:bf:c7:c5:3b:
5a:11:c1:56:ec:31:2b:0b:cd:81:93:45:76:f7:2d:89:15:a4:
05:f1:59:1a:2a:1e:36:10:b4:3b:26:a2:9a:35:5e:47:6b:30:
fb:ae:3a:c1:29:3b:f9:13:bc:a1:bc:f9:69:ff:df:f7:2e:2e:
47:70:0c:a3:27:ee:ba:14:79:66:8c:ac:b2:ee:e1:9c:15:08:
16:99:be:1a:76:7e:fb:1d:04:e7:a5:7a:b5:7b:28:c7:e6:fb:
c7:6f:3c:12:6e:cf:b4:c8:18:34:85:98:2a:eb:ac:4f:28:0a:
52:af:c0:e2:71:da:f1:bf:e3:b5:ac:a1:d2:43:ea:74:18:c7:
78:83:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:08:26 2025 by rpki-client