Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File: KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier: XIp5uE4+mUe5upq4MY8vm1lAR573S+P6Rk1LKZvrXmM=
Subject key identifier: 31:B7:70:19:85:8F:A7:1C:31:CF:86:3E:90:4C:CE:56:8E:A4:B8:57
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial: 0E31
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number: 0E24
Signing time: Sat 10 May 2025 00:56:26 +0000
Manifest this update: Sat 10 May 2025 00:56:25 +0000
Manifest next update: Mon 12 May 2025 00:56:25 +0000
Files and hashes: 1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: k3oS08fCE8MRWG7X2mHjOp8tqEtnUrSedzTGvcqWuEQ=)
2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
4: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
5: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
6: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
7: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
8: A66C5B60EEFB11EAB67BB760F8AEA228.roa (hash: FhdIMm+EQ8oEL4UIZyKUV2bOPB0gTKOHcKnmpA8WxzA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3633 (0xe31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Validity
Not Before: May 10 00:56:25 2025 GMT
Not After : May 12 00:56:25 2025 GMT
Subject: CN=681ea43a-8ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:60:26:7f:a6:4a:8c:91:f7:0a:d9:ff:01:
ee:22:70:8a:08:d9:31:3b:ba:61:86:be:72:f9:b1:
0c:f1:51:46:99:1a:b8:41:5c:51:86:5e:87:32:5a:
43:09:71:97:d6:d7:8b:27:04:1a:b5:e8:c0:ff:06:
b1:05:dd:7e:13:a8:b0:bf:9a:f9:ef:9f:8c:fd:6a:
0f:fb:df:53:27:f8:e2:19:82:a3:86:24:de:18:54:
5e:4e:44:c4:46:2c:c0:eb:dc:75:a4:54:1f:20:12:
e1:02:9a:b1:c3:10:f9:cd:fb:41:a6:ee:20:ae:76:
ef:c7:4d:b1:4c:bf:af:36:d3:30:d7:7d:46:4c:af:
9d:b0:56:ad:51:2b:ff:9b:e0:a4:ed:e4:3f:15:38:
23:e0:3f:86:9b:56:45:59:50:46:18:34:87:52:a1:
8d:74:2d:52:f2:d2:a1:75:95:af:7d:38:b3:64:22:
6a:ce:1d:53:f1:a9:f6:e0:31:a9:06:d0:62:34:90:
42:17:28:30:97:16:96:b4:8a:e1:de:4a:ac:20:fb:
f3:25:57:f5:82:a6:b2:1a:92:97:d5:f8:7f:0f:83:
f6:23:6b:46:11:de:91:e1:f6:fe:0c:77:7f:52:79:
a7:cf:74:36:5c:e2:ee:a8:42:61:b7:c7:a4:eb:44:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B7:70:19:85:8F:A7:1C:31:CF:86:3E:90:4C:CE:56:8E:A4:B8:57
X509v3 Authority Key Identifier:
keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:85:9e:de:c9:e4:44:1e:4b:f1:c9:f0:f6:8d:9a:74:7d:e1:
a0:84:e5:96:9f:e4:ea:04:4b:c4:bf:33:97:4e:bb:92:70:99:
86:ed:e2:43:19:c4:ca:a4:b1:c3:0d:6e:2c:e3:e9:43:3b:48:
7f:2b:08:ac:eb:cf:31:61:ce:27:aa:c3:5f:61:6d:06:52:9e:
04:4c:ff:74:bd:ca:7b:eb:f5:5c:c4:e2:1e:f3:d3:8d:2f:85:
6f:4c:70:39:b7:a3:4d:77:45:3e:f8:42:c5:fb:b6:18:1f:a3:
58:c1:fe:6e:64:c2:ce:94:7b:51:c1:17:54:16:ed:17:65:e1:
af:f8:90:78:75:27:1c:f2:43:3f:7a:31:4e:61:38:37:4e:47:
30:a4:08:af:9e:a6:3d:7b:6f:a1:92:21:c1:2d:b7:cc:21:11:
b8:df:9a:5d:d8:22:4a:f8:bb:3b:4a:3a:55:d8:63:ec:49:9f:
7a:6e:0b:c5:40:ed:68:e8:ed:65:30:d3:32:52:7d:44:17:75:
80:3a:f9:73:ae:d6:4b:ab:ae:2c:0a:67:47:fe:31:44:bb:70:
bc:c8:12:41:b0:4d:44:c4:7b:ec:24:27:2d:58:ae:67:46:b9:
19:95:5a:a2:77:17:ac:80:3c:bd:ac:80:8b:a2:de:0a:ab:f7:
4e:3f:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:56:28 2025 by rpki-client