Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File: kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier: dXiJ5wwkadveY1/qhwa8IAvg6jhpBouz9fNcRM9/lf0=
Subject key identifier: 1F:AB:75:CD:AC:B0:46:FD:AA:D2:69:AB:99:27:19:03:70:F5:90:32
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer: /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial: 05DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number: 05DC
Signing time: Sat 10 May 2025 02:16:22 +0000
Manifest this update: Sat 10 May 2025 02:16:21 +0000
Manifest next update: Mon 12 May 2025 02:16:21 +0000
Files and hashes: 1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: smydS9XZgQe/+tMplzYDb8M6RdkciHv0r302Gux1jvI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Validity
Not Before: May 10 02:16:21 2025 GMT
Not After : May 12 02:16:21 2025 GMT
Subject: CN=681eb6f6-72d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:b7:56:b8:6d:1d:db:0a:77:7b:f7:b3:d9:
d0:1b:d6:1f:f1:29:67:a4:92:96:db:b2:cc:b3:10:
2d:ea:42:23:56:22:33:11:52:de:32:6c:52:03:d7:
6d:bd:ad:b5:46:89:41:ed:53:a7:ab:76:da:fd:a1:
4a:61:1a:80:2e:6d:96:33:8f:b5:bd:d9:8b:b5:a4:
aa:12:fe:fa:a0:2d:6a:ba:2d:5d:0b:b9:75:3d:15:
39:22:65:43:17:2e:32:f4:a9:17:1b:c6:32:5a:ac:
0d:4a:09:fe:0e:48:1e:87:b5:76:88:cf:06:c9:bf:
5f:4d:5a:4f:3e:5b:86:99:35:36:66:c3:6d:b2:03:
eb:ea:dd:21:f1:7d:14:4f:9e:5d:60:c7:c2:98:af:
76:a6:5c:0d:fe:4b:c0:21:57:e3:a4:96:9b:84:83:
21:30:0a:f1:e6:27:70:35:05:93:88:9f:8d:b6:9e:
4f:5d:dc:b2:96:61:bc:73:75:95:8e:92:7b:fd:d4:
00:6f:6a:e5:c8:ac:c4:6b:c7:4e:ec:4a:00:e3:7a:
7b:ed:a6:7a:b0:78:e7:e3:36:3a:f5:13:d5:7f:a6:
9c:34:28:7f:77:32:4b:35:76:45:83:e1:f8:7c:68:
66:4e:b0:bb:18:9e:52:40:ee:d8:eb:c0:c6:42:5c:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AB:75:CD:AC:B0:46:FD:AA:D2:69:AB:99:27:19:03:70:F5:90:32
X509v3 Authority Key Identifier:
keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:16:94:74:31:92:10:0e:df:80:30:dd:6c:1d:a5:13:d0:
c4:5f:18:62:a6:d5:0f:7b:58:95:2a:2b:be:d4:14:46:46:9e:
a7:1d:0f:3c:68:20:73:02:e0:44:bb:58:23:73:a6:6a:0d:6d:
e7:2b:5f:a7:a3:01:c2:dc:a6:76:54:4a:86:ec:53:4a:31:b0:
32:87:2a:75:c7:f5:18:a9:b9:4a:96:1a:b8:2f:e1:6d:b2:43:
04:b8:34:eb:af:e6:15:e5:34:86:3b:e3:b3:5e:8d:5d:d9:5d:
62:43:88:05:67:d3:aa:22:cf:a4:27:e5:25:a3:d6:96:c7:8f:
49:9b:bb:1a:7f:18:59:32:7c:f1:42:16:37:4b:32:48:10:90:
2a:32:ff:41:69:4f:c2:b2:7e:5b:36:b7:13:0a:0d:72:a1:e4:
d5:b8:21:38:51:57:01:e5:80:a6:1a:fb:fb:e3:c8:72:99:05:
6c:c9:de:b9:9b:0d:0c:85:ac:1a:26:1e:b2:9c:cb:b8:0b:6f:
fd:81:49:fd:19:0c:49:a1:61:ca:99:96:94:1a:04:97:f9:06:
95:4d:25:12:4f:ad:60:c9:33:bd:13:22:90:43:5b:87:f9:41:
5f:56:4a:75:20:d4:0b:a3:33:31:68:35:6b:6d:8a:f8:5a:20:
94:57:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:34:11 2025 by rpki-client