Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File: lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier: Llu0vOjw7KZviaUCg9FFbwvtUUWZbDDy8tN1jtIo+4M=
Subject key identifier: A9:E6:59:0B:EA:77:29:DD:60:E0:0E:AD:AF:68:56:F1:C0:C3:F6:3B
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer: /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial: 05FC
Authority info access: rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number: 05FB
Signing time: Thu 19 Jun 2025 02:18:20 +0000
Manifest this update: Thu 19 Jun 2025 02:18:19 +0000
Manifest next update: Sat 21 Jun 2025 02:18:19 +0000
Files and hashes: 1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: yDDl3iphvq7aWv3y65fKd7XAAvGNRfpEdXio3dtpxFI=)
2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Validity
Not Before: Jun 19 02:18:19 2025 GMT
Not After : Jun 21 02:18:19 2025 GMT
Subject: CN=6853736c-259a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:1a:f5:9f:c4:94:79:b1:be:04:22:df:cc:
66:2e:7f:2c:0c:d2:ae:d3:b6:d7:59:24:e2:3b:a5:
c4:b7:56:7c:55:c6:3e:7c:67:eb:9d:2d:11:72:f7:
04:3a:5d:7f:a1:30:59:03:7b:5b:34:d4:ff:65:bd:
97:d3:71:a1:b1:6e:ce:42:dc:26:78:78:08:53:0c:
75:64:55:7d:46:99:b7:a8:c0:b0:6b:68:02:e0:0e:
06:68:55:de:5a:a3:17:80:0c:fa:56:6f:5e:05:9d:
02:07:6b:55:9a:3a:ec:68:2f:72:51:5d:23:08:df:
f5:16:89:d5:b4:59:64:13:a3:05:78:5c:67:6a:ca:
1c:00:5e:13:3f:c8:d1:59:7e:7a:dc:d9:74:13:4e:
b7:32:64:61:d3:d3:e8:c8:de:5c:7d:76:c7:08:36:
82:55:ad:e3:7d:99:a4:a7:5f:e8:f6:33:60:5f:3a:
a9:07:4a:0b:ac:7e:04:ed:1c:68:82:84:08:38:a4:
9c:a9:c2:ce:fa:e6:13:8c:17:70:c9:2e:33:de:f7:
e6:08:38:ba:2e:13:b2:db:63:b3:c2:6b:62:9f:86:
0d:7a:f8:38:e5:35:6b:f9:db:33:08:23:28:26:0a:
e9:5e:eb:ee:e9:97:2f:38:f0:fa:10:7a:c8:f3:cf:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:59:0B:EA:77:29:DD:60:E0:0E:AD:AF:68:56:F1:C0:C3:F6:3B
X509v3 Authority Key Identifier:
keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:19:3e:c4:42:3f:d1:42:b4:98:bc:f4:4c:1f:df:69:59:
46:38:6b:14:2d:f1:7d:a8:8d:ab:5e:95:7f:6f:10:4e:3f:63:
e1:ee:74:2d:32:28:17:ca:43:af:4c:4b:f3:4e:b8:f8:82:0c:
87:7e:12:eb:07:62:bb:6b:04:1f:d7:c4:11:8f:9b:59:26:6b:
93:77:f4:40:f3:aa:1b:5d:aa:48:ee:24:01:11:0e:2f:98:d2:
bb:f3:47:b9:29:eb:4f:0b:8e:13:40:54:6c:9f:39:ac:0a:ea:
1b:66:a9:dc:b1:ea:56:3a:e0:55:60:4c:ea:e3:65:81:c5:e0:
28:77:5c:5b:ab:e3:5f:71:18:e5:0f:e2:4e:d0:3d:0b:66:01:
5e:fb:fd:41:bb:7f:1b:e1:5b:97:b7:fe:ab:0e:e9:97:77:d6:
7e:cf:97:e4:26:ca:84:6d:15:84:2e:44:1f:09:95:85:a5:19:
dd:b2:85:7e:62:39:8c:61:20:77:2b:d4:53:53:d3:b2:1e:da:
1b:21:9a:82:b8:62:30:8a:3c:29:6b:67:d3:45:be:a1:c3:b0:
5e:9a:37:c9:eb:2f:e9:7d:a5:36:54:3a:89:d9:8a:d1:a7:4d:
c1:ec:68:63:31:68:fd:59:b7:ec:6e:fe:27:9e:08:47:14:92:
79:9b:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:40:54 2025 by rpki-client