Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File: C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier: cApgcwI6gjKqBiSZTjh6PU8dCxXa1NFqUwPryMLt6Xw=
Subject key identifier: 4D:01:8A:BF:B6:CE:70:BB:A3:D0:44:FC:48:C2:BB:1C:93:F0:10:D6
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer: /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial: 0753
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number: 074F
Signing time: Mon 28 Apr 2025 01:55:59 +0000
Manifest this update: Mon 28 Apr 2025 01:55:58 +0000
Manifest next update: Wed 30 Apr 2025 01:55:58 +0000
Files and hashes: 1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: AFVN5cXobQE1gXAdMKEj8F5GKBHD9hwx6/1U2cjQMpw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645501AF, serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Validity
Not Before: Apr 28 01:55:58 2025 GMT
Not After : Apr 30 01:55:58 2025 GMT
Subject: CN=680ee02f-b31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:6b:77:8d:22:1e:cb:b2:57:f7:e6:65:e6:
cd:c4:b2:e2:c8:fc:ea:5a:ff:7c:ed:45:e9:69:cf:
bf:4b:55:25:50:33:5b:69:6e:c0:22:a1:77:6f:90:
81:86:97:6e:66:49:55:23:8c:56:68:65:4d:75:91:
d0:eb:8c:28:0a:fe:e8:ab:ec:c5:03:e5:88:8a:76:
55:fe:0b:67:fa:3d:17:8e:2a:12:bf:f3:a0:ee:e7:
27:05:33:ab:0b:13:83:a4:c5:83:3c:33:b6:ab:a8:
4b:36:ce:8e:49:6c:72:d4:c9:9d:f5:f0:b9:5e:10:
d9:ba:f7:4e:e7:dd:f3:fa:4c:c9:77:a5:93:52:2e:
b6:a0:ef:c0:9e:2d:6a:fe:fb:46:61:e6:07:dd:b7:
e1:eb:b6:9b:92:5a:8d:3d:55:9e:ad:cb:a0:4c:72:
0b:08:8c:a4:d1:e6:57:64:fc:98:e9:e1:58:c7:ae:
a4:02:47:31:f4:ad:fd:e6:6c:7b:85:70:46:ea:66:
4c:9c:27:35:5f:0b:66:fa:28:2f:8e:1f:aa:0c:63:
d3:d2:0d:49:b1:0d:89:4f:ca:47:c8:21:04:0a:05:
36:31:e1:a1:3f:ef:61:40:18:7a:0e:92:47:93:e0:
5d:99:a4:3f:37:67:b1:54:0e:26:08:f9:a1:01:68:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:8A:BF:B6:CE:70:BB:A3:D0:44:FC:48:C2:BB:1C:93:F0:10:D6
X509v3 Authority Key Identifier:
keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:3d:48:9c:fa:4d:bd:0f:c5:79:2c:6c:3f:0b:3b:58:a9:
fb:9d:b1:50:22:8a:43:a6:29:21:51:bf:15:41:03:d0:32:01:
ea:62:45:47:6b:30:fd:61:e4:45:cb:c5:90:5f:cf:26:a5:7b:
ec:a4:c9:84:7e:aa:78:62:c7:21:a6:91:60:b2:e3:24:f1:54:
ca:c8:c6:6a:34:6f:46:ff:db:8f:d2:8e:25:49:89:e3:82:0d:
8a:0c:c8:6c:2d:81:03:a8:19:33:53:73:6f:d8:4d:77:96:48:
3e:46:dd:00:d2:06:ad:ef:8f:0a:a0:9b:14:6c:9c:17:d8:d0:
c1:91:eb:ea:6c:67:40:eb:dc:22:e4:f1:87:5e:ef:2c:54:40:
81:1c:53:53:80:69:fd:4c:e5:ad:08:e7:00:fa:29:ff:a1:86:
8f:4a:a8:48:bc:9c:f4:b2:7b:51:5e:b8:28:91:5e:4b:b0:d8:
6c:ac:e2:fd:d8:4e:b3:ca:dd:18:75:c5:fb:d4:a8:14:54:ea:
fa:cc:20:42:89:2e:cc:07:66:3d:a8:5f:7c:46:ba:dd:23:c7:
81:ff:27:39:23:fa:e3:c7:ba:61:3e:a5:bd:de:49:74:e7:fb:
85:44:74:50:d5:d1:2c:65:9d:13:f2:c8:e2:8b:25:61:8b:6b:
9e:22:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:29 2025 by rpki-client on console.sobornost.net