Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
File: pZcz3KUuEYvmm3dYljNX3ajFFCg.mft (raw, json)
Hash identifier: puHlSJVliRfR6RMf+0oKsysLHcI18rLuj41URNEhyV4=
Subject key identifier: 9C:53:21:99:CE:CD:D2:E1:D1:E9:10:BC:29:12:9D:1A:25:1C:67:AC
Authority key identifier: A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
Certificate issuer: /CN=F36AC63AAF/serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
Certificate serial: 0280
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
Manifest number: 0280
Signing time: Sun 27 Apr 2025 03:57:54 +0000
Manifest this update: Sun 27 Apr 2025 03:57:53 +0000
Manifest next update: Tue 29 Apr 2025 03:57:53 +0000
Files and hashes: 1: pZcz3KUuEYvmm3dYljNX3ajFFCg.crl (hash: 41v3wDEuu83WbnykG3LEGsqqH4lCQ+5qzUxcqhKSFEY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC63AAF, serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
Validity
Not Before: Apr 27 03:57:53 2025 GMT
Not After : Apr 29 03:57:53 2025 GMT
Subject: CN=680dab42-45f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:f1:6a:fb:fd:00:5f:79:1f:2e:67:60:a5:
15:eb:2b:8f:dd:c3:43:d6:00:6d:f2:3e:d2:26:14:
17:5b:b1:b8:ba:6c:fa:72:49:47:90:41:3a:23:8b:
5a:56:c6:65:43:ab:b8:69:07:15:7e:8e:b1:15:ba:
c0:95:d4:49:65:f0:a9:58:03:9b:25:46:70:52:a4:
af:b9:ff:8a:86:db:c0:ce:0a:b5:5e:4a:fc:b5:76:
e0:9f:5f:fb:91:d4:b4:28:bb:38:ad:47:92:06:19:
6d:9c:09:63:db:39:94:1e:31:89:bd:ae:c3:8a:4f:
51:4a:f4:df:5d:11:cf:4e:71:2b:b1:a2:f5:b3:62:
59:e8:94:48:d5:e0:50:cf:fc:eb:9e:33:e8:1c:45:
a8:93:ab:84:ae:83:39:66:c8:0a:14:ed:63:84:37:
ac:b8:c3:53:53:86:0b:fe:ba:9c:61:c2:96:ce:8e:
45:0c:be:57:67:77:e4:31:97:d6:6f:8a:86:7b:b5:
c0:86:40:32:ca:64:f2:f5:16:58:6b:7f:72:b9:95:
25:92:2a:ea:5a:32:f5:ea:11:ce:ae:b9:8e:63:dd:
3c:97:45:e5:45:b0:8e:de:54:08:2c:7f:b1:10:6e:
a6:d9:a7:e9:6d:e5:1a:c2:d4:96:24:b9:b9:25:70:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:21:99:CE:CD:D2:E1:D1:E9:10:BC:29:12:9D:1A:25:1C:67:AC
X509v3 Authority Key Identifier:
keyid:A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:61:19:c3:71:f5:9c:c6:04:65:77:5b:77:e5:12:6c:07:42:
3d:19:85:42:b0:b7:87:c3:a9:e8:58:49:4d:70:61:d2:65:5f:
7e:03:62:af:50:c5:8a:2e:c6:42:76:99:dd:85:0a:bd:d0:0d:
c8:8e:d1:74:ac:43:b1:31:8f:e3:58:50:de:14:8b:fe:5c:dd:
9d:4e:5b:04:e8:e6:20:6b:d7:eb:47:3e:37:53:68:54:b5:d4:
41:d2:0a:9e:02:6c:5e:99:ba:5a:89:e9:0f:da:d9:79:8a:d3:
03:d0:44:2f:1d:74:7c:ab:89:66:fc:87:f3:12:80:06:cc:81:
68:25:d9:e1:d0:67:dd:f5:6a:21:c5:3c:5e:4a:24:1a:2b:7f:
e7:18:3b:6a:f7:38:08:8c:20:71:e0:8f:f1:d5:88:ad:31:02:
a2:c0:34:b1:3a:52:b4:40:ad:f5:4f:54:37:17:2e:25:4b:06:
bb:7d:af:3f:c8:16:f3:7e:33:45:61:ce:2e:2f:83:f5:36:4f:
dd:a8:78:a5:82:cd:e1:d2:5b:8b:eb:fa:9f:e2:f7:90:08:4b:
da:e6:1b:f7:64:14:5a:c7:61:10:f3:de:96:bf:d7:85:ac:52:
96:64:a7:c9:dd:58:df:7d:07:80:ed:9f:73:4f:e0:08:5a:b7:
e8:d3:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:54:55 2025 by rpki-client