Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: TsBfsPY1E93S05nJc/Rqx/+TCZFubP1QHaVZplNrtSU=
Subject key identifier: CE:A8:0E:23:6A:60:5A:8A:0A:A7:70:5D:3D:13:75:B2:24:19:14:83
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 0448
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 0447
Signing time: Mon 28 Apr 2025 03:02:52 +0000
Manifest this update: Mon 28 Apr 2025 03:02:51 +0000
Manifest next update: Wed 30 Apr 2025 03:02:51 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: uWLdEEeYXz2ArwHwBnbBeuvk9Diji13OKxxX+9K/Xss=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Apr 28 03:02:51 2025 GMT
Not After : Apr 30 03:02:51 2025 GMT
Subject: CN=680eefdc-853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:94:a6:69:a8:de:e2:ec:9c:a1:f1:bb:e8:
64:fc:24:65:b4:eb:25:9e:56:ff:3a:f5:b2:53:68:
f0:8f:0b:9b:da:7e:c3:22:27:f5:c3:56:68:1f:af:
1e:b0:2b:fa:f3:d9:fa:84:55:a0:e4:e0:05:8e:77:
d4:ae:40:f0:bd:3b:8c:c8:cf:17:2f:29:68:33:9e:
0d:43:ab:ed:0e:76:76:a6:72:30:5e:2d:d2:8a:fe:
b1:44:06:7a:f3:3f:95:ff:38:93:c0:bf:5c:6d:62:
c9:ae:5f:6f:7c:02:90:6a:f5:7d:8a:fd:97:47:d4:
6c:b4:d0:7c:b5:0e:f9:2c:5c:26:f0:42:41:72:ae:
9f:be:9f:2f:4f:5a:bf:f1:b0:a0:01:8b:21:74:65:
a0:fd:7c:3d:85:84:c2:53:f7:c1:3c:32:3f:a0:0e:
3a:86:a3:4a:91:0f:3d:5c:6e:df:eb:68:76:c6:dd:
52:72:d0:cd:0c:57:13:9b:98:3f:3a:d0:01:37:51:
5b:ec:a9:ae:b5:0d:3c:5b:d1:35:7d:b4:2d:ee:02:
c2:c5:bc:ab:48:ac:9e:5e:4e:e2:7c:22:52:e3:1a:
9a:cf:8e:1b:34:e0:69:6f:e4:25:bf:26:81:7e:84:
b8:05:23:bb:a9:cf:79:ad:c9:c0:3f:1f:e5:0f:76:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A8:0E:23:6A:60:5A:8A:0A:A7:70:5D:3D:13:75:B2:24:19:14:83
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:24:e1:26:83:6f:62:90:3c:d6:ee:34:36:c4:70:7b:ef:fc:
11:b6:78:53:1f:42:75:fb:fe:1b:6e:ee:4f:17:44:62:3e:e6:
1e:0b:54:cf:6a:d9:14:44:bc:ed:df:fb:0c:36:62:df:a6:9a:
ae:18:42:87:32:9f:be:76:90:8c:8e:14:af:20:77:5c:a2:86:
ba:23:56:f2:a9:9a:d9:5b:64:e0:95:e8:d6:c1:b5:8b:47:24:
5f:54:3f:34:77:26:24:b3:18:fc:34:b0:fb:73:08:a5:65:fd:
95:b0:ed:5c:1a:da:42:91:a5:30:d9:26:a5:19:93:e8:49:08:
ac:33:c6:48:7f:26:89:ef:93:2e:85:b3:27:65:ec:84:39:8d:
42:b7:27:61:5e:62:10:1d:69:fc:e1:72:13:10:cc:be:d5:0c:
ac:0b:cf:2f:33:bf:9c:cb:09:eb:16:bd:8d:45:f2:31:1b:23:
42:b9:9d:cc:59:45:42:ff:0d:59:27:10:57:24:b3:7b:be:a6:
96:0b:24:2a:1b:72:cb:51:79:f0:a1:c8:b2:66:c2:32:ef:f0:
9e:3c:ce:0b:0b:dd:92:42:59:07:7b:a6:b5:b6:1b:79:a9:05:
1a:c4:23:63:bd:1e:60:c5:c6:5e:ae:f6:5c:7d:48:f1:0a:12:
1c:a7:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:26 2025 by rpki-client on console.sobornost.net