Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File: a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier: jnvOyk5QDra/YlXEoNUKeoWS2Flm7tip1mvoTBrGAzo=
Subject key identifier: BD:69:A5:86:99:2E:4A:97:04:BF:97:0C:65:1C:02:A4:F8:D1:02:85
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer: /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial: 0A2D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number: 0A26
Signing time: Mon 28 Apr 2025 01:14:42 +0000
Manifest this update: Mon 28 Apr 2025 01:14:41 +0000
Manifest next update: Wed 30 Apr 2025 01:14:41 +0000
Files and hashes: 1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: UbcxmgNOS/NZviR62DT2FOe6acvbLV1m3QpsVhdWJPs=)
2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2605 (0xa2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Validity
Not Before: Apr 28 01:14:41 2025 GMT
Not After : Apr 30 01:14:41 2025 GMT
Subject: CN=680ed682-5989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:ca:df:51:99:84:38:10:b1:9a:c5:e3:e4:
79:6d:87:88:ad:62:ea:09:8a:8d:70:ba:3d:97:1c:
42:68:c0:3a:8d:31:31:7e:5e:fd:7d:63:2c:05:b6:
a6:7e:80:87:8c:2f:87:67:e7:41:da:0d:1b:ca:3a:
d1:f8:85:a4:e5:63:48:64:1f:df:09:cf:79:2f:1a:
41:4e:8e:56:7c:2b:27:76:f2:79:12:3d:ec:c7:47:
cc:47:22:72:0e:e7:63:0e:d7:a6:1e:b7:26:92:ec:
e1:5b:d6:21:99:c9:a6:0d:e1:e9:c3:21:34:ae:9d:
04:b6:d8:bf:1c:66:76:42:12:76:fd:3a:aa:40:f5:
86:c4:69:2c:98:3d:e6:5a:1d:fb:e6:f3:ad:83:56:
a3:1e:fc:4f:da:c2:46:e2:ee:55:b1:1d:90:86:ab:
a5:28:0b:02:85:98:41:44:ea:9a:b8:67:e3:36:65:
f3:ee:f0:5c:e5:2d:0e:84:21:fc:eb:82:92:bb:5c:
58:18:23:00:7c:b5:bb:71:bf:dc:ec:1e:c4:da:85:
96:d5:54:e0:38:cc:9c:66:c1:bf:2d:db:f5:1c:f9:
ec:38:62:15:6b:57:8a:99:12:44:40:be:7c:3e:65:
ad:4d:3f:56:74:95:9c:a4:50:65:b0:d7:34:bf:a6:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:A5:86:99:2E:4A:97:04:BF:97:0C:65:1C:02:A4:F8:D1:02:85
X509v3 Authority Key Identifier:
keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:8b:bd:6f:3e:01:d8:8b:7e:b0:b0:e7:73:5d:e9:15:74:
36:01:06:13:43:f9:26:69:ba:92:5e:16:7e:fb:85:ca:ca:de:
64:3b:50:09:4b:e9:3d:22:81:ae:a8:34:84:e8:e2:7e:a3:fc:
cb:f9:ed:9d:1a:63:d4:b7:7d:21:75:c3:6a:71:36:05:57:38:
ff:1e:c6:03:90:91:71:95:40:b3:ea:85:29:0d:78:aa:79:34:
f3:ed:b4:36:25:60:de:6e:d1:1b:65:89:88:7f:4f:d4:35:3b:
c2:b1:09:66:34:c9:08:a9:6e:f3:02:92:bb:3b:d1:59:21:96:
6f:15:61:91:4d:8a:fa:e5:5b:fa:e9:b0:da:9b:fc:e3:0e:a2:
ef:8c:61:42:01:e7:53:dd:b9:9a:21:b4:41:98:db:d6:b9:89:
02:6a:59:73:69:b7:08:4d:6d:d4:15:16:17:2b:b3:e9:06:8a:
09:9e:13:cb:41:2a:69:40:ed:bb:60:8b:c2:87:47:cc:a0:6d:
be:9c:37:91:ca:84:9a:8d:4a:7a:bf:d1:e3:72:74:39:a1:84:
13:0f:7d:6c:3e:67:62:ad:fa:cc:72:82:71:dd:fa:32:e0:02:
1e:56:c9:71:f1:73:ff:51:c5:df:ce:83:cd:21:ba:0c:13:ea:
19:c6:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:33 2025 by rpki-client on console.sobornost.net