Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File: IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier: occ3gjiNVUqs2X7YcxeO4iiBlepBb2nIjas6AJfQ5XI=
Subject key identifier: 94:BD:6C:27:78:51:E3:D3:35:4F:2A:83:1C:B3:7D:64:57:05:49:56
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer: /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial: 0472
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number: 0470
Signing time: Mon 28 Apr 2025 02:58:53 +0000
Manifest this update: Mon 28 Apr 2025 02:58:52 +0000
Manifest next update: Wed 30 Apr 2025 02:58:52 +0000
Files and hashes: 1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: AuSxow1vNsq9YM6w/OblfdM54dEJNCKaVBrxIW9jUv8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138 (0x472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Validity
Not Before: Apr 28 02:58:52 2025 GMT
Not After : Apr 30 02:58:52 2025 GMT
Subject: CN=680eeeed-e363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:fe:db:cc:a6:d1:ba:f7:19:8c:9f:ee:08:
4e:15:b2:67:31:89:cd:59:f0:f4:be:f1:ad:b4:39:
c2:b4:cb:d5:c0:dc:46:e8:79:2c:29:88:c8:a7:1d:
3a:d2:0e:90:e9:7f:3e:ce:c0:9e:7b:11:5c:d5:05:
65:33:79:e6:58:dc:98:82:6b:65:4a:56:85:d5:f6:
cd:00:80:f1:4e:b4:c6:5e:27:2c:7c:e6:bc:d6:f9:
20:ab:dc:47:d5:a9:3e:cf:ba:08:b9:62:ce:58:d0:
c4:72:2c:f3:a8:2f:6b:d3:d4:c6:fe:4d:3e:cd:05:
aa:8b:b4:a1:74:f9:b1:d2:b7:e2:64:ea:d3:b9:1c:
82:72:13:fa:03:a8:23:1a:be:62:ac:18:e3:a9:23:
61:d5:df:27:8a:cf:f3:4f:f7:43:b7:a6:66:85:46:
3b:0c:51:72:7c:a3:ae:9e:20:80:5a:7d:01:ac:72:
d0:fc:4f:65:aa:4e:61:aa:81:1c:35:98:4b:dc:f0:
b3:88:fc:b0:4d:7c:74:96:c5:99:82:aa:83:83:e4:
2f:3e:38:98:ad:ac:c6:83:fc:29:66:04:70:51:7c:
cd:46:82:ea:4e:10:c9:d6:b2:50:ee:05:e6:d7:70:
86:66:91:71:27:5d:d5:1b:15:c3:c8:19:1d:6d:09:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BD:6C:27:78:51:E3:D3:35:4F:2A:83:1C:B3:7D:64:57:05:49:56
X509v3 Authority Key Identifier:
keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:5f:ae:89:6f:44:15:59:0b:92:6b:69:35:d3:c5:94:98:c1:
c8:72:aa:43:e9:93:63:73:0b:4c:1d:5e:e9:26:1a:8b:23:f5:
61:32:55:b0:01:d7:2b:59:9b:26:85:57:96:5e:5b:e0:fb:df:
6b:27:d3:05:5c:a8:ff:f1:8a:6e:59:a6:f9:03:ea:fd:aa:21:
b0:ff:27:e6:1b:d1:50:a0:6b:7b:f0:8e:16:7a:24:d0:d3:d1:
56:0f:ff:9d:78:4a:26:8d:99:d9:4b:a0:fa:19:47:de:c3:eb:
71:9a:98:ae:e3:1f:b0:28:05:fb:1b:a1:3f:0d:31:c4:6d:c2:
46:fd:15:1c:11:56:79:3f:53:c6:3a:2e:0a:24:db:90:2d:6b:
b1:b7:9b:50:32:08:a0:6d:a7:05:b1:6a:10:07:bd:1e:2e:17:
1d:9f:4f:9d:a4:cc:2e:33:86:ac:51:9f:aa:c7:d9:47:81:10:
8e:fe:54:0d:ab:3b:17:04:54:d4:39:82:b6:1a:70:48:a0:ad:
69:08:74:3a:65:b5:26:65:f3:86:f1:c6:77:09:27:a0:b4:8a:
3b:2a:5f:ad:38:23:42:8f:47:ce:d7:e9:03:9c:b9:bd:1a:a0:
71:de:d6:93:cb:fb:b0:db:d6:e1:f3:b4:7e:2f:92:d1:dd:cc:
ed:03:89:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:34 2025 by rpki-client on console.sobornost.net