Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
File: 2LbhjGXdH5bypUTKz8mAhq75KW8.mft (raw, json)
Hash identifier: 4uVugkT3jkNgqHblSfyynpTGooWLca1OAXsR9zpu5Zg=
Subject key identifier: 0B:A3:98:4B:00:1F:FA:87:18:DF:B8:EC:6D:DE:5C:3C:CD:EB:32:6D
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Certificate issuer: /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial: 0697
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
Manifest number: 067A
Signing time: Sat 03 May 2025 02:06:31 +0000
Manifest this update: Sat 03 May 2025 02:06:30 +0000
Manifest next update: Mon 05 May 2025 02:06:30 +0000
Files and hashes: 1: 2LbhjGXdH5bypUTKz8mAhq75KW8.crl (hash: 4ROqUaFcUI7evg1pzdZ13e++Plm1gbcBnNv1Svw+sjQ=)
2: 4D448904CF5811EE973188BD775412E6.roa (hash: ySSYPE0shLpdO7tNiGvvy73ZDXbdIqU3PG2m2I/Ajqg=)
3: DCC047FEE06E11EEB2B0FC6C775412E6.roa (hash: Tz/tIAPulQlEyr/QEKB9q80Zxn8V6++we+recfQKhpE=)
4: 2DE942E8F05011EEB7E2EA77775412E6.roa (hash: GBenxdZx6aEBeL1h9fe5p87DnQDStd1SWX74CBckZcY=)
5: B26CC39CE06E11EE9B19AF6C775412E6.roa (hash: Ty5HAlTEhASXYCuUF5uWrrX1/gj8dWsdudDz16cov10=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 May 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAF, serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Validity
Not Before: May 3 02:06:30 2025 GMT
Not After : May 5 02:06:30 2025 GMT
Subject: CN=68157a27-79f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:49:15:43:53:6c:f2:2b:71:17:a9:39:7f:
98:33:88:47:e6:36:9b:3b:b6:13:15:fd:44:a8:2f:
a2:82:f6:84:88:73:41:2e:1d:76:44:db:1c:7d:df:
de:84:90:82:e7:92:04:c6:cd:21:81:22:f5:a1:79:
f8:07:ea:a4:3b:68:8c:24:e6:e4:ea:3e:ed:89:89:
d6:06:ae:a4:2c:7d:66:b9:9e:bf:b9:6a:9f:07:04:
f0:89:59:3d:12:be:6e:96:33:ee:aa:2b:d7:fb:5f:
92:8e:3c:22:b4:b9:a9:49:59:fa:33:a2:5d:80:dc:
1c:7f:ff:58:06:0a:b4:7b:31:e8:a1:33:84:46:6b:
b5:e9:fb:c3:86:b3:05:a8:51:66:b1:0f:a0:65:75:
38:2f:fa:c7:76:c8:5b:f9:ec:28:dd:65:60:06:d7:
01:8e:66:40:cd:3b:1c:20:77:37:b4:82:a0:76:8d:
9f:51:a2:99:73:cd:d4:36:f5:de:53:5a:1e:60:85:
cb:a9:5c:9d:c6:69:3e:0e:e8:ae:84:33:18:f6:4a:
36:3d:0c:cb:32:58:4e:47:15:d9:f7:80:28:18:92:
0e:89:83:a0:81:29:3c:b7:b9:fd:5e:c6:63:81:74:
09:35:10:8f:04:12:4d:e3:0a:dc:c5:fd:15:6c:0a:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:98:4B:00:1F:FA:87:18:DF:B8:EC:6D:DE:5C:3C:CD:EB:32:6D
X509v3 Authority Key Identifier:
keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:07:4d:b8:fa:aa:0e:56:a5:37:46:39:1c:07:da:87:bc:7b:
64:40:28:a5:96:c5:fe:df:2b:75:90:75:be:85:0c:45:0a:ee:
7f:48:69:3d:8e:f5:7a:7f:ee:76:e2:52:29:00:c6:a0:99:e4:
bb:b0:f9:38:94:b0:3c:80:a5:38:97:c0:df:8c:1e:72:a0:00:
6b:8d:76:9f:d5:e6:26:24:ae:2c:6a:43:6c:89:64:f8:4f:eb:
37:04:98:37:27:82:2f:d9:c4:a2:00:ad:9e:8a:c7:60:77:f7:
d7:bc:9a:12:db:25:30:c8:d2:a1:5f:81:d7:0f:87:32:7f:4d:
bb:7d:f2:c6:ef:2b:4e:cb:52:4e:38:51:6c:37:c1:04:87:96:
dc:77:d3:13:0e:8b:e0:3f:43:5c:5f:8a:85:c5:6d:23:ef:4a:
96:8e:c6:dc:50:ff:bf:ea:07:f9:0c:6c:e9:6f:db:42:ca:7f:
50:87:b8:c9:40:f9:09:93:ef:49:b4:fa:5f:3d:b3:69:28:0b:
c2:e2:33:38:31:84:7e:7a:01:74:ce:10:be:f6:c1:0c:5f:ee:
bb:8c:4d:e8:55:4d:5f:89:f3:09:5d:74:48:73:8d:fa:84:a4:
bb:ee:10:39:06:c6:c7:1d:72:da:bb:90:ea:48:56:c5:7c:81:
0b:1b:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:25:16 2025 by rpki-client