Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft
File: RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft (raw, json)
Hash identifier: U1ONdQ4Fhb+aQheVyGuaaqKvO77aBVLiG0+iNPX++RA=
Subject key identifier: 3E:9E:15:38:4B:C9:89:B9:64:60:C4:E8:C3:73:E9:1A:A3:F5:77:52
Authority key identifier: 44:8B:19:3F:7D:AB:A4:CB:06:F0:C5:92:44:53:C5:BF:8B:2A:62:34
Certificate issuer: /CN=F3624904AF/serialNumber=448B193F7DABA4CB06F0C5924453C5BF8B2A6234
Certificate serial: 0729
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RIsZP32rpMsG8MWSRFPFv4sqYjQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft
Manifest number: 0728
Signing time: Sat 29 Mar 2025 01:53:01 +0000
Manifest this update: Sat 29 Mar 2025 01:53:00 +0000
Manifest next update: Mon 31 Mar 2025 01:53:00 +0000
Files and hashes: 1: RIsZP32rpMsG8MWSRFPFv4sqYjQ.crl (hash: SSjIaAPZIRxTy8MSq6vWwz+QmH4Hh84Rz7tPuVmzunk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624904AF, serialNumber=448B193F7DABA4CB06F0C5924453C5BF8B2A6234
Validity
Not Before: Mar 29 01:53:00 2025 GMT
Not After : Mar 31 01:53:00 2025 GMT
Subject: CN=67e7527d-0a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:da:bf:fb:73:51:a4:49:da:6f:88:f5:ef:
19:ed:1d:92:0b:d8:84:80:ca:36:ff:03:56:9d:41:
6b:72:79:23:97:5d:05:53:a9:f8:1f:2d:00:14:ac:
38:f6:92:23:f2:5a:b8:c9:0a:74:00:75:2f:58:70:
1d:0a:83:52:cd:38:e4:3d:28:98:55:ac:3c:bc:21:
68:45:8c:6e:3f:72:04:8b:2c:b9:f2:d7:f9:f4:e5:
9a:c7:eb:72:a7:3a:4f:05:92:f7:94:ac:46:d9:48:
a2:1f:f4:88:ad:34:54:dc:c2:8e:e8:e1:5c:42:dc:
a9:b9:8f:96:13:48:3a:2e:9d:03:5f:a2:6a:4b:5a:
85:4f:c0:10:e1:b9:19:b2:dd:1b:e9:b6:25:1f:58:
ca:e0:10:3c:cd:ed:c2:e2:01:b7:33:e1:b5:29:d6:
5d:2f:76:73:30:89:6a:3e:d5:aa:a4:49:23:de:6e:
a9:7b:02:1b:81:a5:06:20:02:16:29:e3:8f:0c:9a:
2b:a6:96:fc:75:63:1b:05:80:d6:90:09:39:7d:0e:
61:d0:30:77:86:ba:c8:bf:9f:c9:56:07:e1:ef:b3:
8b:33:18:0e:a7:c6:a1:e0:2a:85:84:b5:e1:2c:e5:
03:59:18:bb:fc:47:37:dc:45:06:15:db:34:bc:6b:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9E:15:38:4B:C9:89:B9:64:60:C4:E8:C3:73:E9:1A:A3:F5:77:52
X509v3 Authority Key Identifier:
keyid:44:8B:19:3F:7D:AB:A4:CB:06:F0:C5:92:44:53:C5:BF:8B:2A:62:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RIsZP32rpMsG8MWSRFPFv4sqYjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624904/DE5318BA910011EAB27D9072F8AEA228/RIsZP32rpMsG8MWSRFPFv4sqYjQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fd:b0:f5:35:90:00:87:28:b4:79:76:fd:ff:4f:38:25:d3:
82:ff:dd:48:5d:12:62:b5:5e:f3:c5:68:e2:90:5c:fd:dd:41:
63:03:f5:c0:32:74:4d:51:22:0b:eb:d8:18:33:79:9a:cd:9c:
66:78:75:7f:68:ef:7e:b2:ea:aa:e4:66:e5:67:32:fd:cc:84:
8b:b5:5f:14:e6:1a:c5:a3:c0:aa:c8:48:a4:b1:0b:20:45:c7:
ed:3a:e2:53:9d:5f:ef:6a:36:bc:14:93:6b:a6:3a:43:fb:39:
df:a3:f0:f1:81:12:cb:9e:9c:3b:f0:c1:b4:37:bb:31:2d:7c:
4a:67:79:69:cb:fe:ef:10:93:39:79:90:27:99:79:d0:a4:5d:
ae:dc:6b:98:7e:55:2c:11:e6:79:bc:8b:2e:9c:7d:9d:3a:12:
4f:20:01:b7:b0:9c:7e:c6:ed:03:42:18:02:54:06:e4:7a:77:
3d:74:70:3c:c9:a6:e0:85:40:70:44:4f:6c:e5:f4:fd:66:ed:
a1:db:31:ef:a1:0a:43:94:31:e4:bc:57:de:21:47:84:e4:4b:
15:33:cd:bb:b4:f1:b4:7a:ef:fd:9f:04:2a:7c:09:00:39:49:
a4:68:01:d5:26:94:5a:ab:fa:8a:84:93:c7:82:44:f0:e4:fc:
a4:db:b2:14
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBykwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQ5MDRBRjExMC8GA1UEBRMoNDQ4QjE5M0Y3REFCQTRDQjA2RjBDNTkyNDQ1M0M1
QkY4QjJBNjIzNDAeFw0yNTAzMjkwMTUzMDBaFw0yNTAzMzEwMTUzMDBaMBgxFjAU
BgNVBAMTDTY3ZTc1MjdkLTBhMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGoNq/+3NRpEnab4j17xntHZIL2ISAyjb/A1adQWtyeSOXXQVTqfgfLQAU
rDj2kiPyWrjJCnQAdS9YcB0Kg1LNOOQ9KJhVrDy8IWhFjG4/cgSLLLny1/n05ZrH
63KnOk8FkveUrEbZSKIf9IitNFTcwo7o4VxC3Km5j5YTSDounQNfompLWoVPwBDh
uRmy3RvptiUfWMrgEDzN7cLiAbcz4bUp1l0vdnMwiWo+1aqkSSPebql7AhuBpQYg
AhYp448Mmiumlvx1YxsFgNaQCTl9DmHQMHeGusi/n8lWB+Hvs4szGA6nxqHgKoWE
teEs5QNZGLv8RzfcRQYV2zS8a3jPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPp4V
OEvJiblkYMTow3PpGqP1d1IwHwYDVR0jBBgwFoAURIsZP32rpMsG8MWSRFPFv4sq
YjQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0OTA0L0RFNTMxOEJBOTEwMDExRUFCMjdEOTA3MkY4QUVBMjI4L1JJc1pQ
MzJycE1zRzhNV1NSRlBGdjRzcVlqUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JJc1pQMzJycE1zRzhNV1NSRlBGdjRzcVlqUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQ5MDQvREU1MzE4QkE5MTAwMTFFQUIyN0Q5MDcyRjhB
RUEyMjgvUklzWlAzMnJwTXNHOE1XU1JGUEZ2NHNxWWpRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAs/bD1NZAAhyi0eXb9/084JdOC/91I
XRJitV7zxWjikFz93UFjA/XAMnRNUSIL69gYM3mazZxmeHV/aO9+suqq5GblZzL9
zISLtV8U5hrFo8CqyEiksQsgRcftOuJTnV/vaja8FJNrpjpD+znfo/DxgRLLnpw7
8MG0N7sxLXxKZ3lpy/7vEJM5eZAnmXnQpF2u3GuYflUsEeZ5vIsunH2dOhJPIAG3
sJx+xu0DQhgCVAbkenc9dHA8yabghUBwRE9s5fT9Zu2h2zHvoQpDlDHkvFfeIUeE
5EsVM827tPG0eu/9nwQqfAkAOUmkaAHVJpRaq/qKhJPHgkTw5Pyk27IU
-----END CERTIFICATE-----
Generated at Sun May 11 06:37:25 2025 by rpki-client