Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: OGG8FyT3OrJq7R6xtcsVPNV2l4UGvJE7pxA/clsXmFI=
Subject key identifier: 0E:6D:0A:FE:24:D6:A6:BF:3D:F9:35:47:7E:52:9A:67:E1:D5:E6:8E
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 01D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 01D0
Signing time: Sat 26 Apr 2025 04:21:13 +0000
Manifest this update: Sat 26 Apr 2025 04:21:12 +0000
Manifest next update: Mon 28 Apr 2025 04:21:12 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: T65yqNmwJavIiJjAG+5M+hv2a48HdoBNFgLocYxLkVo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 04:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Apr 26 04:21:12 2025 GMT
Not After : Apr 28 04:21:12 2025 GMT
Subject: CN=680c5f39-c132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:01:e7:94:da:66:4f:bc:d4:0d:4c:68:6b:
fc:85:0c:9c:9d:66:24:4a:f4:f0:ea:3d:4b:e6:42:
79:bd:8f:81:8b:2d:a8:3a:7d:c6:aa:50:60:36:03:
35:65:44:6e:32:97:6a:43:b3:96:f3:29:df:ef:46:
55:3d:49:a8:12:38:74:9d:17:1d:4d:0d:fe:ab:a8:
dc:0e:2c:d6:03:9e:8c:47:e5:82:4e:eb:b9:3b:9d:
c0:db:ec:4e:33:4a:4f:60:3d:34:03:8a:cf:a5:53:
74:cd:a3:99:5a:15:f7:af:2c:a0:93:31:09:6c:d1:
5d:32:e6:fe:da:2f:b1:72:52:13:02:4c:10:44:5d:
ad:03:bd:ca:55:4c:3e:75:92:15:12:9e:7e:46:58:
0a:d5:e1:b4:60:58:88:76:ad:10:11:7a:6e:e3:2d:
c2:44:66:53:8d:04:46:bd:7c:4a:6c:28:71:b8:98:
60:7c:fc:62:77:0a:f2:07:03:a3:21:cf:b6:d0:b3:
9d:ae:cf:ad:14:45:a8:85:22:42:83:ca:41:6f:99:
ed:03:c6:c5:4f:a2:63:f0:e7:21:e0:74:c6:04:c4:
0d:7e:08:3b:47:37:55:c7:16:86:e5:09:7a:fa:da:
3c:33:3d:48:df:3d:b9:cf:ec:07:ec:03:6e:0c:dd:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6D:0A:FE:24:D6:A6:BF:3D:F9:35:47:7E:52:9A:67:E1:D5:E6:8E
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0f:0e:6e:f5:01:db:d9:48:16:c1:c5:06:23:46:44:28:55:
fc:a4:5a:ab:77:50:1e:46:9a:29:06:1a:57:4d:a3:70:8b:9d:
6f:bf:40:b8:ff:f0:77:fd:13:e5:f5:18:86:50:83:c9:cb:23:
9c:c9:d8:c0:f7:32:95:a0:70:e4:ac:1e:cc:fb:db:77:7f:d2:
eb:c8:6b:22:88:ab:73:e3:19:0d:e5:5a:25:9f:17:b7:2b:f5:
1f:eb:0f:7e:7f:8f:f1:a0:e3:f7:8f:01:52:d5:ad:4b:53:f5:
1a:0e:5a:41:fb:c0:c3:42:30:b2:e5:58:aa:7d:4c:3e:ec:5d:
7e:02:f2:c2:f5:00:6b:da:80:b7:f2:22:10:be:89:ab:c2:0f:
b9:3e:da:44:30:9c:f5:d2:04:81:5d:8e:3c:1a:4d:90:32:d7:
6f:c5:37:c0:26:4f:d8:81:c3:ac:ce:26:96:b5:a0:82:e1:ff:
05:f7:1e:11:29:d5:ba:7b:76:c0:66:da:f7:90:55:93:1d:8d:
ba:4e:b4:ad:c2:a1:e5:7e:e9:6d:da:41:86:e3:96:55:37:3a:
05:2c:f5:b6:1e:01:54:fa:7d:24:2d:cc:a7:be:ec:46:e7:b0:
26:8e:20:ab:fd:4e:fb:ff:ae:b8:4f:74:47:5f:94:bc:dd:aa:
e6:f8:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:55 2025 by rpki-client