Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File: M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier: 1JDC/pzCx0dzTW8LQASSARXvYm854HtV6iea7hHFBEo=
Subject key identifier: 48:0E:0F:9D:DB:00:31:39:F2:72:39:33:6A:15:F7:E5:AE:D6:54:DC
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer: /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial: A7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number: A6
Signing time: Sat 26 Apr 2025 05:03:57 +0000
Manifest this update: Sat 26 Apr 2025 05:03:56 +0000
Manifest next update: Mon 28 Apr 2025 05:03:56 +0000
Files and hashes: 1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: w8IlFHEBIAqGebXQqjL/6nIAlLCo7RkoJl6ZjOkrKsc=)
2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Validity
Not Before: Apr 26 05:03:56 2025 GMT
Not After : Apr 28 05:03:56 2025 GMT
Subject: CN=680c693d-73ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:d1:1d:f1:d4:7e:77:2e:fa:5b:98:81:5d:
25:23:a6:ff:09:c3:64:47:ad:44:c1:40:f7:20:e0:
ba:8e:63:c9:0a:95:20:14:e4:18:52:bc:cf:95:8c:
fb:1d:af:53:29:b5:93:b0:fe:a8:8b:d0:45:ff:2c:
e2:fb:e6:96:6f:66:9b:95:05:8d:bb:3a:4d:3f:e0:
fc:10:46:92:d4:e0:b6:bf:83:d8:9d:42:fc:c0:b1:
88:22:62:c0:75:b5:35:1e:96:86:bb:6c:5a:21:d6:
38:d0:09:6d:21:68:76:95:f0:de:1b:5b:1c:8f:7f:
59:2f:ac:9a:e5:3e:a8:19:0a:c5:b6:17:18:15:63:
db:92:c6:89:5a:1a:c3:43:f8:3c:5f:e0:03:b3:3f:
f0:5d:c2:2a:d4:a5:07:75:89:62:de:60:c6:11:5d:
58:85:a9:4b:17:5d:d9:a0:a5:6b:0a:dc:56:b5:b5:
56:04:bf:18:64:4e:7b:54:e4:67:6f:e0:f2:0c:f5:
25:bf:2b:c3:24:ad:7b:db:de:54:0e:cf:6e:59:fc:
29:3c:84:42:a3:2d:0b:7e:3b:58:4d:af:4d:a0:6a:
eb:9f:92:4c:84:72:84:03:81:46:6c:8a:65:3e:5e:
53:58:5d:c7:f5:6a:0a:17:df:75:f3:8e:81:60:81:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0E:0F:9D:DB:00:31:39:F2:72:39:33:6A:15:F7:E5:AE:D6:54:DC
X509v3 Authority Key Identifier:
keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:63:df:63:1e:35:47:a6:06:a7:ad:ff:68:0d:be:56:57:97:
c2:f9:0a:bb:cf:f2:1b:a5:71:d4:c5:b1:92:d7:07:21:32:f0:
5e:b1:6a:23:d4:9f:b6:c7:1f:66:65:7d:c3:5a:fb:51:5d:ac:
11:1e:6e:8d:1d:b2:1d:55:2e:a9:1f:bf:f8:ad:f0:7b:47:b0:
61:02:18:59:74:ed:d3:0f:27:e0:05:76:31:78:3e:cc:b7:a2:
eb:cd:26:74:98:3d:41:4a:a4:1b:51:82:c2:fb:5d:66:e3:2d:
b9:22:53:13:c6:76:28:1b:8f:26:37:37:e4:07:64:9d:53:98:
b6:33:7a:11:a6:a6:d8:37:59:23:05:d9:ea:3a:67:1f:a6:88:
12:2b:50:22:9f:f2:3d:77:21:df:25:1a:5f:4c:38:f6:16:cf:
7f:ab:ff:08:6d:61:a4:2e:ab:00:dc:5f:7c:84:ed:f8:64:9b:
0e:f7:65:b5:04:d6:d0:b9:f2:0d:ff:75:34:7c:ea:1f:e2:1b:
c7:6a:4e:a7:10:31:16:59:71:cd:7c:09:ef:92:71:2c:df:5d:
0b:49:ee:83:1a:ed:97:ee:95:20:20:6b:b9:96:14:61:af:20:
94:d9:31:6e:c8:63:53:cf:67:bf:50:02:19:e5:0d:46:42:4d:
09:9e:74:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:33 2025 by rpki-client on console.sobornost.net