Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
File: Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft (raw, json)
Hash identifier: PSm2i/4DShaDoP+u7NFvUVXSRaangpCidhBf8ZQpuwQ=
Subject key identifier: C3:87:2C:AE:B0:D2:8C:8E:E0:DE:9C:5D:F9:45:CE:74:08:71:A6:D1
Authority key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
Certificate issuer: /CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Certificate serial: 01A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
Manifest number: 01A8
Signing time: Mon 28 Apr 2025 04:29:45 +0000
Manifest this update: Mon 28 Apr 2025 04:29:45 +0000
Manifest next update: Wed 30 Apr 2025 04:29:44 +0000
Files and hashes: 1: Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl (hash: bCCDmmW9nh07gGU9FV088mwcgoR/tZOjrRYQIFX6rPc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8434AF, serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Validity
Not Before: Apr 28 04:29:45 2025 GMT
Not After : Apr 30 04:29:44 2025 GMT
Subject: CN=680f0439-c614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:79:07:ad:ca:50:a1:27:a9:29:01:34:81:
fe:9d:b9:a8:a7:54:4b:a6:04:93:30:ef:81:45:9a:
30:ff:7d:05:e1:69:c9:f9:c4:46:99:38:59:95:3a:
06:b1:1a:ee:a4:55:5a:78:24:94:cc:5c:22:71:6b:
0c:55:fd:bd:32:cc:ca:6d:f9:f6:a7:6a:a4:32:25:
47:48:10:3c:06:03:1b:76:82:f4:34:ca:7a:12:82:
45:c7:48:c7:b0:9d:5e:7e:90:9e:e0:b1:0a:43:51:
ee:3d:e4:2d:4c:16:74:59:d8:45:64:dd:69:41:1e:
31:b2:bc:7a:7d:f2:ee:8b:ff:e3:c7:c6:47:43:78:
87:5a:92:dd:6f:b2:d4:83:29:25:4d:36:ad:10:4c:
7c:bb:3d:cb:52:b8:ae:36:25:65:90:9c:d7:4b:e4:
1a:e7:ae:6f:36:31:20:38:f0:80:1c:81:83:f0:b8:
03:4c:be:cc:2e:09:5f:b6:2d:b3:f0:40:e2:05:ec:
90:a2:0b:eb:8f:b2:d8:d2:cf:b7:ac:4f:91:ee:02:
d5:86:6b:5c:36:0e:2a:c4:6a:da:59:0c:61:89:0f:
8c:d9:da:90:58:fb:62:2e:e7:77:d4:2d:07:d1:76:
9d:fe:8d:8b:60:f5:05:7d:d4:5e:c6:7b:73:36:f8:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:2C:AE:B0:D2:8C:8E:E0:DE:9C:5D:F9:45:CE:74:08:71:A6:D1
X509v3 Authority Key Identifier:
keyid:0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1c:34:cb:8b:99:aa:15:0d:3a:9e:6b:02:1a:58:60:51:c6:
bd:d0:e1:23:28:1a:8e:d0:52:01:86:21:9d:54:ed:3f:81:4e:
25:b4:8f:8e:44:33:75:d5:13:41:8d:c2:60:29:09:c0:3e:2f:
9f:5f:40:72:79:a1:5c:76:48:49:3b:a5:8a:95:90:7e:de:89:
46:eb:50:aa:cc:5c:66:28:7d:91:a3:b2:7a:d9:5f:83:2c:38:
3b:be:4f:a0:8f:d7:bd:46:77:8c:64:05:0e:04:93:2a:f8:62:
da:d1:34:60:64:95:eb:cc:96:b3:50:d8:1d:f0:5a:e8:a5:28:
56:e7:04:5f:46:f7:d7:2c:e8:36:93:dd:c2:eb:ad:66:d0:f7:
d7:e7:d4:07:31:bf:a8:35:dd:ee:77:43:c5:c1:38:5a:53:5f:
e0:26:77:71:3f:5b:b6:f9:33:07:19:63:0e:16:5e:1d:05:01:
f5:31:35:d4:1f:17:ea:32:97:d4:0e:ee:a6:1b:df:04:f8:f9:
70:4d:64:e0:5a:da:8d:07:44:a0:d9:af:90:24:ab:37:ca:61:
5e:b3:c9:7e:5a:ad:e3:ff:15:90:8c:91:d0:24:37:f6:a6:24:
1e:f1:83:23:27:2b:c5:17:91:65:ec:b9:14:42:2a:11:86:98:
83:cd:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:42:58 2025 by rpki-client