Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: mI68HRZQazNks5CJJhSnLvmyiukuZPpO0D9/VAWNUVQ=
Subject key identifier: 42:D2:00:AF:5B:D6:91:FC:C7:2C:DF:84:FB:E2:E4:04:3D:91:4E:08
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 08A8
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 08A7
Signing time: Sat 26 Apr 2025 01:28:56 +0000
Manifest this update: Sat 26 Apr 2025 01:28:55 +0000
Manifest next update: Mon 28 Apr 2025 01:28:55 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: y8qh+9mLw4zHBeOrDP5lEKv/zu8XKeTv5ggeNo+XvPI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Apr 26 01:28:55 2025 GMT
Not After : Apr 28 01:28:55 2025 GMT
Subject: CN=680c36d8-eff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:c6:76:ce:8a:08:4b:f7:45:ae:18:ae:4b:
1a:89:4e:b9:fb:9d:3a:e5:a3:9d:fc:5c:49:8f:5d:
b0:16:21:0d:01:65:f6:01:38:df:d5:65:ef:5c:b1:
41:d9:c7:5a:90:91:6b:32:19:60:b9:cf:01:c5:8e:
c4:0f:61:7d:39:cc:56:57:98:af:ce:2e:a1:7e:12:
71:20:6f:2c:21:79:80:31:b0:e8:5d:fd:cb:c8:7e:
eb:75:b5:8e:58:bf:e1:26:7c:c7:22:ed:af:dc:59:
45:69:29:28:db:48:f0:aa:3e:59:69:31:e5:29:32:
5b:f1:81:b6:61:01:27:f1:d4:10:12:0e:ce:9c:c3:
c4:c0:7c:5d:bd:40:26:95:d7:59:98:4c:af:a3:71:
eb:1d:82:22:d7:de:ee:24:df:8a:79:8e:9b:21:45:
3c:16:6a:60:40:7b:ba:99:47:db:5e:66:8f:48:0a:
16:a3:53:6c:05:01:c3:49:45:2d:89:7c:9b:69:a2:
68:8f:1e:62:07:67:df:c9:3c:8a:a3:81:2a:e9:fb:
38:bf:79:1b:b9:03:a1:8a:d7:cc:64:52:53:31:44:
af:00:b1:87:40:c7:e3:20:1b:38:66:28:ed:02:ec:
40:fe:22:e0:d2:e5:f7:c3:b4:42:47:a1:0d:d9:13:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:00:AF:5B:D6:91:FC:C7:2C:DF:84:FB:E2:E4:04:3D:91:4E:08
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:39:72:44:e2:8c:17:ce:df:2e:66:02:ed:06:8a:2f:30:f5:
e3:cc:16:fc:52:2c:41:73:5b:93:db:1a:1f:a0:f3:38:66:2a:
1e:39:33:74:c1:db:33:e2:3c:44:d2:b2:25:0a:b0:2d:d0:23:
fa:e0:56:6b:0c:59:4f:d0:5b:e3:a4:76:3b:3f:95:78:78:25:
ed:97:43:e2:bc:e2:c2:f9:fc:20:49:f6:01:3c:27:72:5c:a8:
67:b8:76:27:40:9e:ef:bb:a4:be:24:7f:de:87:d2:cf:11:13:
a4:d2:06:52:1b:4a:87:17:6d:d1:4b:a0:2c:a7:da:0e:ea:b0:
ba:88:80:21:41:68:0f:46:64:b4:70:15:c9:bb:85:16:2a:19:
70:9e:d8:8a:cf:8d:ea:e0:41:14:a0:e1:90:e3:99:c1:46:cf:
cc:06:ac:d2:15:0c:68:21:7b:d5:7d:15:77:4a:1d:bd:83:69:
81:29:d7:1f:02:2b:ce:64:0b:ae:f5:37:30:d4:02:91:b8:65:
1f:91:43:8f:9e:02:ed:a3:8b:91:aa:d8:db:76:db:66:ea:2f:
a4:29:c3:49:b5:7b:6e:00:d8:a6:2d:17:bc:21:0d:2c:48:95:
db:92:84:cd:6c:00:79:52:10:72:fc:64:a9:b6:77:14:c2:df:
70:7a:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:35 2025 by rpki-client on console.sobornost.net