Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File: IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier: 4UH2KFSGHcrgoVFsbjK6oPPJ9bOF7MODqGmk0FHysJ4=
Subject key identifier: DD:3C:C5:93:15:66:F4:87:0E:5C:22:34:B5:BB:BD:B8:9F:48:F4:56
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer: /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial: AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number: AD
Signing time: Mon 28 Apr 2025 05:06:42 +0000
Manifest this update: Mon 28 Apr 2025 05:06:42 +0000
Manifest next update: Wed 30 Apr 2025 05:06:41 +0000
Files and hashes: 1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: ixNhWOoVK/JuBPq2qPyiIiQZ+tZJQL3Ge5JdWfczLBE=)
2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Validity
Not Before: Apr 28 05:06:42 2025 GMT
Not After : Apr 30 05:06:41 2025 GMT
Subject: CN=680f0ce2-25b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:71:c9:4b:f5:02:10:87:6c:0a:23:0a:27:
4c:ec:1f:48:31:b3:69:6e:b6:66:7f:49:8a:ec:fa:
ea:06:8d:b8:76:6c:9a:05:1b:3d:d8:3c:bb:38:64:
cc:97:60:3f:62:6c:db:e5:56:b5:e9:c7:43:12:8b:
cb:3f:63:96:7e:75:0e:8c:ab:56:43:8c:a2:a2:8d:
a4:71:08:0f:6b:e4:8c:50:e2:ba:83:ab:5c:91:f7:
5a:18:0f:3f:a3:59:c0:c9:52:14:bd:d9:9f:ff:44:
4d:d6:fa:28:c3:1c:21:79:24:27:dd:df:d2:cd:69:
53:80:26:0c:01:49:41:b9:85:a9:8e:bb:97:06:48:
c3:b4:ad:ff:d6:6a:35:5e:68:da:32:e2:e7:d9:7e:
7f:85:07:b7:e9:a1:3d:1c:9a:5b:68:28:96:1c:b4:
ab:d4:be:c0:29:51:d7:5f:8a:73:d6:5a:a4:b9:48:
a0:f6:7f:f3:96:ee:c0:85:6c:eb:da:a4:33:3e:7c:
23:ba:a4:cf:30:df:1b:37:08:9e:f3:bd:89:67:20:
00:5f:eb:70:d7:dd:46:2e:05:c5:51:58:bc:eb:ff:
8b:81:ae:1d:41:1e:2e:36:0c:30:18:aa:5b:32:8f:
58:39:fb:0e:45:41:fe:8d:48:73:ff:b9:11:7a:ea:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:C5:93:15:66:F4:87:0E:5C:22:34:B5:BB:BD:B8:9F:48:F4:56
X509v3 Authority Key Identifier:
keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:44:88:9a:22:fd:8e:a0:93:87:e9:5d:65:64:ad:95:13:0c:
60:b4:90:77:ef:8a:bc:c6:da:b8:55:7f:f7:bb:8f:b5:86:b0:
9a:5e:08:01:16:22:e9:28:8c:3f:4a:da:f3:8b:a0:ad:4d:c3:
06:78:6f:13:88:4a:9c:23:69:4f:25:96:bf:0c:4d:e5:cc:fb:
99:a3:aa:fd:f6:7d:a8:44:9a:76:7b:4d:f1:77:90:f0:27:01:
67:6b:bb:83:43:a8:72:34:8c:c3:5b:25:dc:36:d9:9a:8e:14:
6e:51:45:ba:8a:d5:3b:32:22:0e:6b:ab:1b:50:f6:e6:bd:99:
87:c7:99:34:64:19:86:73:1e:b6:3e:96:7d:06:b0:5b:2a:cd:
50:e9:3d:16:d2:33:1d:1d:3f:f0:ee:08:4a:88:f6:60:6f:d7:
32:25:63:96:2f:52:58:96:1a:ed:ed:85:52:f0:3f:18:bd:71:
91:26:8a:33:fa:a0:f0:7f:33:29:72:44:04:05:10:26:60:d4:
da:bf:4c:ac:7f:54:44:98:23:38:9a:ef:31:26:88:c6:a8:3f:
a1:56:2a:7a:ca:f7:aa:ac:6e:cc:b0:25:24:80:eb:2b:e9:c0:
b3:67:b6:bb:a9:c2:6f:a1:f0:14:f9:7f:91:a1:c4:56:01:15:
a1:cb:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:20 2025 by rpki-client on console.sobornost.net