Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File: lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier: s5oKLuzWsp+TwXOlAsAAi4hhDVSSsgw2ofKaCwuvPVE=
Subject key identifier: 32:4F:6E:7B:5B:98:6E:78:C9:DD:FB:BC:10:2B:23:9D:41:87:42:6B
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer: /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial: 05CB
Authority info access: rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number: 05CA
Signing time: Fri 02 May 2025 02:17:27 +0000
Manifest this update: Fri 02 May 2025 02:17:26 +0000
Manifest next update: Sun 04 May 2025 02:17:26 +0000
Files and hashes: 1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: uVDJokI/Oo5vHyp7e1LvDJ5NBV/80cLuliCF1NhcT6c=)
2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 04 May 2025 00:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1483 (0x5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Validity
Not Before: May 2 02:17:26 2025 GMT
Not After : May 4 02:17:26 2025 GMT
Subject: CN=68142b37-7d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:fb:c9:7f:8a:ba:c1:d3:fc:29:91:a8:48:
24:07:81:78:f5:37:d9:7a:19:7d:e2:3d:f4:ba:dd:
cf:b4:3a:0a:86:e5:ed:19:71:4c:60:32:42:c8:c9:
fb:1b:a1:32:3b:a1:d7:0c:16:5c:88:91:5f:f0:6d:
e6:ee:ce:b9:af:41:19:14:13:b9:5d:de:6c:4b:b8:
c7:52:97:a0:a6:01:31:b3:2a:13:85:eb:70:91:f0:
64:3a:7c:3e:0c:ad:a1:d9:2e:b0:d8:fa:e8:ea:63:
ea:1c:b0:e2:9d:cd:3f:06:73:40:2f:fe:fa:c6:da:
88:a1:b9:9a:c3:e6:0a:4b:8e:cf:fa:68:52:b5:09:
f4:6a:a1:e2:df:85:b8:59:44:fd:a3:39:9e:89:e2:
36:04:05:d6:de:da:1a:c0:b2:21:eb:65:d8:c5:a4:
44:c2:c7:3d:54:eb:0e:4d:bf:c1:e3:0f:00:35:a6:
17:d5:28:22:fb:e3:7c:23:88:62:4d:37:cd:43:2d:
21:d7:f8:1d:58:6e:79:b5:34:64:19:df:fa:cc:29:
7e:f2:c5:75:df:a1:93:94:ae:7a:c1:2d:ea:60:1e:
fa:93:b7:ba:c6:05:e8:23:9e:0c:f7:e3:de:66:c4:
ca:e7:de:7b:cf:b1:ff:72:a5:38:f7:7b:a5:09:86:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:6E:7B:5B:98:6E:78:C9:DD:FB:BC:10:2B:23:9D:41:87:42:6B
X509v3 Authority Key Identifier:
keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2e:c3:8f:0b:48:6e:c9:d4:46:73:e8:06:00:fa:73:61:d9:
57:aa:52:4e:5c:d7:25:d1:08:7c:7c:de:da:ff:47:e6:1e:28:
5e:28:30:c1:d2:92:a7:10:fd:46:98:af:d6:c6:48:68:f1:ac:
52:ea:0b:82:24:21:31:d1:f9:85:09:fe:f7:77:4e:0d:b5:41:
30:7e:3f:61:4d:a1:e3:54:23:d8:9d:e0:20:d2:2e:b0:69:2a:
22:19:b0:4b:a7:cc:f3:04:64:b4:13:75:75:2d:e9:29:17:b1:
d2:8f:1f:1a:14:3d:14:ba:64:0a:04:71:a6:1e:d5:3f:b3:7e:
37:95:20:90:e8:b0:7a:b9:e8:1b:f6:ec:41:1c:32:df:40:cf:
0f:78:25:94:8d:22:37:63:ed:47:61:56:54:62:21:a8:86:2f:
e7:be:15:2b:b2:fe:b0:0a:5b:5d:bc:71:1b:ba:1f:ef:b8:c1:
6d:b6:01:33:d9:a4:e0:98:c0:71:1c:65:33:64:9f:42:7f:6c:
ca:a7:87:df:76:5c:44:fe:32:66:0f:45:d4:13:43:34:58:6f:
c6:b2:0e:90:de:a3:83:e4:54:b5:a4:16:d6:44:fb:7b:5a:ec:
18:d3:04:5e:62:b7:88:74:2a:13:b8:6c:49:1f:40:66:ba:3e:
37:ac:f0:65
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBcswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUJERDdSSTExMC8GA1UEBRMoOTcyQ0ZEQUVFQjEyNkY2RkNENDY5NkE1OTBGNzAx
ODgzN0FBNUZGMjAeFw0yNTA1MDIwMjE3MjZaFw0yNTA1MDQwMjE3MjZaMBgxFjAU
BgNVBAMTDTY4MTQyYjM3LTdkMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCXRfvJf4q6wdP8KZGoSCQHgXj1N9l6GX3iPfS63c+0OgqG5e0ZcUxgMkLI
yfsboTI7odcMFlyIkV/wbebuzrmvQRkUE7ld3mxLuMdSl6CmATGzKhOF63CR8GQ6
fD4MraHZLrDY+ujqY+ocsOKdzT8Gc0Av/vrG2oihuZrD5gpLjs/6aFK1CfRqoeLf
hbhZRP2jOZ6J4jYEBdbe2hrAsiHrZdjFpETCxz1U6w5Nv8HjDwA1phfVKCL743wj
iGJNN81DLSHX+B1Ybnm1NGQZ3/rMKX7yxXXfoZOUrnrBLepgHvqTt7rGBegjngz3
495mxMrn3nvPsf9ypTj3e6UJhriJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMk9u
e1uYbnjJ3fu8ECsjnUGHQmswHwYDVR0jBBgwFoAUlyz9rusSb2/NRpalkPcBiDeq
X/IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVCREQ3LzY3RjAwNEM2QkUxRDExRUI4NTc2Qjk0MkY4QUVBMjI4L2x5ejly
dXNTYjJfTlJwYWxrUGNCaURlcVhfSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2x5ejlydXNTYjJfTlJwYWxrUGNCaURlcVhfSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUJERDcvNjdGMDA0QzZCRTFEMTFFQjg1NzZCOTQyRjhBRUEy
MjgvbHl6OXJ1c1NiMl9OUnBhbGtQY0JpRGVxWF9JLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNLsOPC0huydRGc+gGAPpzYdlXqlJOXNcl
0Qh8fN7a/0fmHiheKDDB0pKnEP1GmK/Wxkho8axS6guCJCEx0fmFCf73d04NtUEw
fj9hTaHjVCPYneAg0i6waSoiGbBLp8zzBGS0E3V1LekpF7HSjx8aFD0UumQKBHGm
HtU/s343lSCQ6LB6uegb9uxBHDLfQM8PeCWUjSI3Y+1HYVZUYiGohi/nvhUrsv6w
CltdvHEbuh/vuMFttgEz2aTgmMBxHGUzZJ9Cf2zKp4ffdlxE/jJmD0XUE0M0WG/G
sg6Q3qOD5FS1pBbWRPt7WuwY0wReYreIdCoTuGxJH0Bmuj43rPBl
-----END CERTIFICATE-----
Generated at Fri May 2 05:29:58 2025 by rpki-client