Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: es/S1kcXcKhv+In/ddViOjWZd52jIoBgqgK7SLz/r6Y=
Subject key identifier: 4E:D1:20:45:52:8F:59:BF:CF:C1:DE:3C:4B:6B:45:12:50:2B:2A:53
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 01EB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 01E8
Signing time: Sun 27 Apr 2025 04:15:50 +0000
Manifest this update: Sun 27 Apr 2025 04:15:49 +0000
Manifest next update: Tue 29 Apr 2025 04:15:49 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: FC4TlIblo7QyNWrBcqaswlRuOID5BkwA5gInhySAvGU=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Apr 27 04:15:49 2025 GMT
Not After : Apr 29 04:15:49 2025 GMT
Subject: CN=680daf76-d69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:cc:ab:d3:ca:34:cc:2b:7d:10:f6:f1:b1:
79:0f:8c:a9:8a:44:b8:d1:8d:bf:88:ee:56:f6:a0:
a4:06:79:c6:99:be:16:6a:96:37:4c:58:1c:a3:fa:
2b:4f:8c:65:76:e9:de:75:d0:1a:c6:7e:fb:e4:0e:
29:86:64:53:56:90:67:0f:dc:c3:41:88:5b:f5:0a:
69:a0:da:f7:86:cb:49:41:c6:35:6b:37:6c:2c:23:
e1:5d:4f:65:c5:a9:fe:16:28:7d:da:92:59:43:bc:
17:81:9c:46:a5:b6:ff:09:c7:45:71:c7:78:a3:d1:
5b:91:94:e3:40:8d:8a:b9:4e:63:1c:23:bc:d0:b1:
b0:02:82:82:a0:13:54:d0:67:19:e1:b4:2b:88:cf:
14:84:31:95:97:54:4f:e3:46:47:8a:21:38:24:b7:
9b:47:f8:53:5e:32:3e:a3:2e:43:b2:10:4f:56:9d:
64:9d:85:97:0f:cb:62:d6:b0:1e:d5:8f:b0:5c:d8:
7d:a2:85:70:fd:a1:7c:07:82:1c:0f:de:fa:88:97:
8c:84:92:79:0c:3f:ef:cd:00:3c:27:d8:b4:f4:e7:
d1:af:c3:c5:68:ee:84:a3:eb:ea:aa:2b:85:3e:f3:
01:27:72:85:99:8c:2b:68:bd:b7:1e:1f:0e:4e:cb:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:20:45:52:8F:59:BF:CF:C1:DE:3C:4B:6B:45:12:50:2B:2A:53
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:fa:ba:64:34:23:39:3a:93:0e:20:ee:8b:db:39:de:02:0c:
7f:98:14:19:c3:5b:0c:c5:9c:e3:21:52:df:70:a8:7e:43:a8:
84:4d:1b:66:34:77:4d:29:df:11:5b:cd:a4:08:8c:c2:f6:28:
fe:5c:14:89:77:03:33:7f:df:33:63:c9:34:ab:ba:42:54:4f:
a8:a0:c4:2a:71:b9:ec:1f:b2:24:e9:37:97:a2:e5:4b:53:72:
10:b4:51:59:90:51:c3:38:69:de:08:54:02:95:bf:f7:b4:80:
31:20:f9:68:cb:ae:c9:c8:50:13:b9:9a:95:ce:02:9a:fb:d8:
6c:a0:13:c3:80:7f:46:c9:19:fb:30:59:a4:f8:08:fc:5d:d4:
ae:2b:19:68:b3:64:89:13:04:19:ec:11:99:e4:63:9c:29:62:
b7:ce:4c:af:de:49:13:8d:08:59:e6:05:e8:f2:19:f5:68:ac:
67:55:f2:7c:d0:93:96:41:2a:a1:1e:6e:78:98:6f:f3:d6:23:
dd:d2:c0:b3:81:3f:36:2a:61:a7:ea:e8:24:cb:7e:3e:1f:60:
87:56:8f:e0:08:a6:25:a3:57:b5:89:45:e7:16:d8:bf:71:e1:
10:75:46:22:dc:f1:d4:2d:81:3a:e6:03:cb:55:00:0f:33:3f:
79:92:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net