Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
File: Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft (raw, json)
Hash identifier: dLJAto+7ep0hUaKljjtAmb81/Y++rDVma2ozCnTBZn4=
Subject key identifier: 45:23:0E:0C:74:81:94:8E:32:F7:AF:18:52:5C:9B:6B:BB:A9:AB:A6
Authority key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Certificate issuer: /CN=F36AA788AF/serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Certificate serial: 03E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
Manifest number: 03E5
Signing time: Mon 28 Apr 2025 03:16:10 +0000
Manifest this update: Mon 28 Apr 2025 03:16:09 +0000
Manifest next update: Wed 30 Apr 2025 03:16:09 +0000
Files and hashes: 1: Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl (hash: 2aORe0tOLIOUZUKThdqrF/3D7MA7DJx5S0MqReBvzlc=)
2: E3F54648303711ED9A084DD9F1222468.roa (hash: gFeaumPVCdd6tZ5UsCnpNw/LwtGf891vKHW1FGcYpBY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998 (0x3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA788AF, serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Validity
Not Before: Apr 28 03:16:09 2025 GMT
Not After : Apr 30 03:16:09 2025 GMT
Subject: CN=680ef2fa-d0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:a4:7b:ce:a7:08:df:ab:62:29:d9:9c:e8:
6d:43:60:0f:0b:69:4b:c0:08:28:90:36:eb:4e:ab:
c7:61:e6:d8:63:c7:0b:1a:ba:2d:41:bf:4c:29:6f:
bb:6b:4e:52:76:e7:17:30:2b:64:33:7a:c1:fc:96:
32:9f:f5:d7:30:e9:f2:92:96:2c:0a:38:f4:a9:6c:
b6:d2:15:eb:9a:65:0c:a5:c9:61:e4:ba:0e:d3:ab:
8b:2d:66:3a:87:8f:78:41:5d:f8:26:c9:fa:53:7b:
a7:d2:ef:d1:5c:f2:d2:a4:0b:e3:39:21:f8:9e:87:
2b:cf:97:6f:92:5b:46:5a:b6:65:00:24:bb:62:75:
ce:45:14:9e:c2:e4:b9:8b:7d:ba:8e:15:ae:8c:b9:
8b:c9:ef:17:53:21:8d:a3:ff:32:65:16:19:ca:cb:
df:bd:36:17:da:ee:91:15:a1:ff:c2:a1:08:24:72:
92:90:95:c4:7b:99:8d:cd:8d:2d:28:62:cb:2b:bb:
bc:43:1c:eb:0f:8f:26:03:e4:a7:3a:c2:e4:a8:79:
84:f9:17:a9:1d:e4:f4:f7:85:43:c1:94:fe:41:3f:
4d:1d:ae:89:27:65:a2:1f:02:9d:c0:7c:58:8f:0f:
8d:74:4e:ed:fc:f8:26:9e:f2:25:a0:6c:d0:60:54:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:23:0E:0C:74:81:94:8E:32:F7:AF:18:52:5C:9B:6B:BB:A9:AB:A6
X509v3 Authority Key Identifier:
keyid:67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:50:84:da:ca:41:14:c7:4f:3b:0f:87:12:a5:09:1e:fe:5d:
26:39:34:de:51:3a:e5:19:27:13:fc:3f:ef:5c:15:56:56:ba:
c3:b2:e8:e0:20:19:bc:ef:55:b9:a9:f0:1a:47:9c:45:80:14:
1b:b8:ab:c0:f0:72:98:07:70:70:2a:9f:00:89:58:e6:72:76:
9f:0e:e5:fe:9a:e1:25:d9:06:a1:cf:c8:cc:a9:4a:19:50:2a:
d3:3e:03:f8:44:6c:84:0b:b1:fd:a8:a0:de:d9:8d:ef:ad:e9:
4e:29:62:80:f9:b6:09:b3:54:eb:87:1a:bf:d1:62:78:07:99:
3f:84:d2:6e:bd:0c:ac:1e:3d:c4:f8:b9:f9:e8:eb:ba:39:02:
36:a7:81:35:0f:54:c0:76:f6:44:cc:47:b1:1c:6a:9c:83:14:
98:43:3d:d6:d3:ba:58:64:60:c1:6b:ee:45:04:30:49:20:7a:
14:d6:6d:5e:97:81:96:b3:3a:25:8a:49:e6:59:a5:82:8f:0d:
17:cc:1f:1a:78:d5:c6:84:2e:3e:0f:b8:fa:a8:a4:79:83:8d:
c0:b6:dd:e8:b2:24:88:e8:52:bc:5e:06:a0:b8:4f:25:e5:2c:
54:f9:4c:f3:d0:ab:68:04:88:77:f0:1c:23:4a:dc:21:fa:06:
17:cc:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:18:09 2025 by rpki-client