Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: V63J6h0Xnbm2lZKKhlNLgCCWsBKqyu7v5FGMqCBa9Pk=
Subject key identifier: 57:08:99:0D:5C:89:4E:B1:29:04:77:D5:40:8C:EC:FD:D4:F3:21:BB
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 06B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 06B1
Signing time: Mon 05 May 2025 02:02:11 +0000
Manifest this update: Mon 05 May 2025 02:02:10 +0000
Manifest next update: Wed 07 May 2025 02:02:10 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: btcpuO1ICRv4F0ihrlBwE0zNokIwbsVIFEPgHiKwJag=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 02:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1713 (0x6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: May 5 02:02:10 2025 GMT
Not After : May 7 02:02:10 2025 GMT
Subject: CN=68181c23-ea7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:60:44:5f:86:f2:bb:a5:cd:26:8c:bd:47:
b3:29:4f:1f:84:96:82:73:8e:94:cf:35:16:9c:7a:
88:a9:d4:87:34:fa:f1:49:b3:ed:2d:65:72:50:98:
d5:22:1c:f7:43:95:d1:85:ef:40:e3:62:4a:8e:9b:
59:70:1f:e0:44:97:dc:a3:59:0e:e8:bb:4f:e9:1f:
0e:84:64:fa:2d:ed:a3:33:a7:0c:1c:b2:42:f7:3c:
1b:4d:12:7c:7b:dd:76:20:6f:26:a2:cb:79:e8:6d:
f8:cd:0c:ba:a7:97:2f:fa:87:88:d7:08:52:5d:0e:
84:1b:1c:04:96:79:c3:18:10:22:f3:00:9c:a8:18:
2a:82:f6:22:7a:75:ec:db:0b:db:20:2f:ba:1c:5e:
17:0e:ee:8a:84:51:22:bd:22:ee:48:9c:c5:f4:32:
af:54:ee:9e:2d:17:54:df:e3:f5:90:bb:61:e4:65:
29:81:90:a2:72:9e:a6:2e:1d:7e:4d:b6:ff:64:2d:
35:ab:a8:9d:0c:fd:bf:17:22:f7:0e:40:ab:14:68:
c9:13:3f:e4:a9:d0:fe:6d:53:31:ff:c7:e9:28:c6:
40:18:32:a3:dd:7d:a2:61:e2:e0:09:be:26:cb:3a:
4d:b9:0c:db:8f:52:20:7b:e7:b8:82:e5:96:15:63:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:99:0D:5C:89:4E:B1:29:04:77:D5:40:8C:EC:FD:D4:F3:21:BB
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:66:3e:61:a9:93:ed:71:3b:5b:7e:ae:d2:5d:f9:f7:30:f6:
77:2a:ae:7f:2b:c1:d3:81:fc:60:ce:8b:05:23:58:46:a7:a1:
e9:97:ba:c4:ce:af:21:43:bb:a4:8c:5f:f8:07:f6:17:d1:0a:
72:36:c7:a6:19:29:c6:e8:5c:70:65:80:3a:9c:6f:70:a7:c6:
e2:31:33:b7:0a:c3:78:ab:ae:79:da:6e:5d:65:ea:90:53:88:
34:82:e4:d6:c4:8e:86:22:cb:8a:63:1d:4b:80:fa:9d:92:ab:
11:7b:ae:f2:ba:e4:6b:2b:d8:8a:66:0f:6f:e0:84:94:7a:37:
f8:39:fc:1e:f9:20:45:0f:9a:69:75:b9:c4:94:a4:36:43:f2:
ae:f4:31:f5:6a:fc:88:d8:ee:84:ab:04:46:6c:5f:4b:a8:b5:
4e:1e:04:21:a4:9a:cf:fb:af:4f:a7:6b:f9:18:3c:fc:aa:ab:
fa:42:ff:de:28:36:35:f7:74:96:02:8e:4e:05:6d:9b:b6:d3:
2e:c0:18:4c:76:95:48:75:d9:d1:88:55:7e:e5:3c:fd:f2:ab:
ea:88:73:27:99:4c:a7:27:d5:9a:3d:54:a1:81:b8:f7:6a:dc:
b6:16:ea:e3:0e:64:41:06:ba:78:a4:f6:33:b8:c5:4b:be:6a:
41:1d:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:26 2025 by rpki-client