Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File: HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier: 2+hVPVQ/6LxJUrq1BQG7DJu3413UMGa9PDS4iJoGkhw=
Subject key identifier: B0:DD:81:58:BD:EB:D8:3E:9A:4A:BD:FD:33:B0:6F:B5:3F:7C:42:DA
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer: /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial: 02DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number: 02DD
Signing time: Sun 27 Apr 2025 03:43:02 +0000
Manifest this update: Sun 27 Apr 2025 03:43:01 +0000
Manifest next update: Tue 29 Apr 2025 03:43:01 +0000
Files and hashes: 1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: n9eLuAnmA4ln++3VUzLn7ifbHlFLiCWvGdjOHo55LVg=)
2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Validity
Not Before: Apr 27 03:43:01 2025 GMT
Not After : Apr 29 03:43:01 2025 GMT
Subject: CN=680da7c6-0e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:26:44:27:34:3a:25:e6:45:56:2f:3b:1b:
ee:40:09:e8:ed:7a:aa:88:27:0d:29:37:5b:77:91:
6a:83:19:f1:37:e1:51:70:a2:b7:e6:98:c2:5c:c6:
26:4c:3b:a1:27:a0:41:6e:38:2e:b9:03:67:a5:dc:
d9:ba:03:ae:89:46:0b:82:ab:58:e5:95:9b:e2:76:
36:89:6c:8e:bb:52:7c:78:eb:5f:83:45:4b:07:fb:
39:e0:d4:bc:48:07:85:3a:b6:ca:2f:b9:c2:cf:50:
08:23:a5:0d:8e:9b:25:2b:a5:be:d3:ad:3d:06:18:
38:b3:17:70:06:69:b3:be:04:a2:ce:56:05:ff:5f:
63:4e:0d:0b:d5:4d:4c:89:1c:e9:94:5a:45:19:62:
63:04:e7:76:79:63:48:c5:9c:27:79:64:c7:d4:c1:
92:14:07:41:aa:35:55:d5:7e:fa:57:00:96:7d:0e:
0d:f5:cb:ab:1f:61:39:0f:c1:21:4f:9a:e4:5d:1f:
27:06:d3:9d:73:21:3f:28:61:17:b4:a4:19:8a:07:
6c:30:5e:e9:37:c0:ea:3e:dd:0d:0a:7e:78:73:ea:
f2:07:e5:03:09:b0:46:58:f4:30:5d:f8:51:5d:4b:
76:df:03:12:3a:f8:87:34:a7:c6:71:ed:82:72:2f:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DD:81:58:BD:EB:D8:3E:9A:4A:BD:FD:33:B0:6F:B5:3F:7C:42:DA
X509v3 Authority Key Identifier:
keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f0:0e:3b:2e:cd:f3:8b:1c:f2:cd:82:24:5f:e2:d7:5d:67:
51:41:52:4b:17:a0:ef:41:5e:79:99:0f:90:12:0e:3b:3a:88:
38:10:e2:d6:0a:9a:f6:e6:a9:54:29:fe:b9:f1:fb:c6:cd:4c:
43:86:7a:42:e8:4f:07:f8:29:d9:2d:9f:9f:6c:b4:1d:aa:7e:
62:18:1a:83:0d:e7:e6:e9:4d:74:9d:6b:e9:1b:bf:fe:83:74:
23:42:52:10:5c:47:3d:e1:2e:af:f6:53:07:9b:36:8f:97:c8:
13:43:7a:78:fd:b8:3f:7f:c4:ec:55:d6:36:10:14:0f:8e:9c:
a4:65:fb:c9:a1:be:7d:76:75:8c:a5:b5:38:9c:16:f1:0c:31:
5a:7d:1c:f5:37:45:36:16:8a:44:f9:ae:3b:9e:7e:c9:f2:5f:
c8:54:c1:bf:fe:8d:06:45:02:4e:fd:e6:59:5e:9a:2e:3a:17:
f2:69:a2:44:2a:7e:ab:be:12:eb:70:c4:6f:c2:15:3b:17:4f:
92:e1:bd:80:0a:29:19:38:0d:59:c3:1a:9d:cc:7a:19:b5:16:
60:86:e2:9b:da:98:f4:0a:4e:42:92:24:23:44:df:8b:17:4d:
06:85:10:06:6c:48:aa:06:78:42:72:29:54:ec:d0:41:be:98:
a8:62:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:30:24 2025 by rpki-client