Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File: Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier: 2h0as2879MFm+y7bedheiSKZrZ6D348ZLoNz8z61yu4=
Subject key identifier: 12:D5:4C:7E:79:32:30:39:2A:15:A3:1F:62:97:8F:3C:52:9E:4C:CC
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer: /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial: 0587
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number: 0585
Signing time: Tue 13 May 2025 02:21:53 +0000
Manifest this update: Tue 13 May 2025 02:21:52 +0000
Manifest next update: Thu 15 May 2025 02:21:52 +0000
Files and hashes: 1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: cMQ/xdHfzkzKM7ism4e1l/zFwN3sYlwR3SeJBVrcVd8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 02:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1415 (0x587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36818C8AF, serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Validity
Not Before: May 13 02:21:52 2025 GMT
Not After : May 15 02:21:52 2025 GMT
Subject: CN=6822acc1-dac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:b0:61:eb:c9:a0:a9:75:ce:e8:55:bc:ad:
1a:2c:af:3f:bd:66:33:31:cd:f2:4e:ba:a8:9b:2a:
d3:4e:12:cf:06:ec:3b:7b:4f:a0:af:b3:11:88:c9:
61:c8:02:6f:15:03:4f:71:4b:42:23:c6:fb:b7:3e:
32:05:96:62:ab:2b:91:37:91:7c:33:9c:44:f9:42:
4f:72:06:83:c6:51:9f:5a:dc:ce:f0:e7:b5:81:94:
b2:c7:c1:70:ec:2d:5e:a8:d8:76:43:7c:46:4c:61:
8a:d0:0d:23:d1:98:41:2d:c1:f9:0a:ef:73:7a:9b:
0a:57:c6:c7:f6:dd:c3:19:8a:aa:e5:79:d3:0f:66:
90:c8:65:62:fa:a4:ee:57:16:3f:79:26:12:ba:79:
14:a2:49:fe:24:be:97:5d:f9:75:a3:bc:b4:dc:80:
fe:40:3b:61:01:8a:a0:b0:4a:cd:c9:4a:78:0b:d4:
04:ff:0a:b5:8c:65:39:cb:22:c9:da:c2:81:f4:66:
b1:29:89:a5:dc:a2:c6:d3:64:b4:6a:cc:ba:ee:5e:
f0:74:b2:ef:6f:e2:f9:0a:cf:aa:aa:e1:f4:89:f9:
fd:46:66:cf:16:bb:38:a4:42:91:47:b9:e3:a5:06:
c6:87:9a:7e:71:4f:a8:4c:e6:5c:42:f7:0b:40:c1:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D5:4C:7E:79:32:30:39:2A:15:A3:1F:62:97:8F:3C:52:9E:4C:CC
X509v3 Authority Key Identifier:
keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:54:88:96:4b:db:75:4b:95:8b:02:64:95:37:90:7a:10:b6:
db:fe:2b:36:28:94:34:1d:98:5d:c7:3e:2e:b0:73:57:6c:58:
aa:68:ba:33:81:9b:f3:57:27:71:48:e6:bd:a9:60:8c:ff:08:
11:10:04:76:cc:5b:35:10:24:da:d9:89:53:fa:89:ec:5f:af:
0e:1b:dd:d7:c7:56:1a:2e:4b:11:18:f0:e6:93:85:a8:95:06:
6a:98:01:ed:71:e3:cd:38:1b:ff:c9:27:76:5a:b9:ee:f6:e6:
40:a5:88:8d:20:64:1c:f0:86:67:10:a9:a8:f2:e2:91:a9:89:
d6:44:10:c3:90:3c:cf:ca:c9:74:84:20:58:72:5c:a0:c1:d8:
7d:4e:8e:a4:20:e5:49:d1:d8:7b:eb:f3:43:35:b5:7f:c1:e1:
0f:4f:93:95:2c:00:a8:e7:a1:ff:63:4f:29:3d:99:fa:b7:12:
9d:9a:24:ec:a6:67:f9:68:28:b2:f7:4c:6c:91:2a:b4:53:d5:
a9:63:1c:ca:ae:eb:8c:6e:06:e1:59:80:07:51:d5:03:34:48:
70:de:2b:e3:1c:b2:26:b0:57:92:60:63:9e:81:21:ca:f0:e5:
29:ed:9f:e6:23:e5:77:91:04:91:fb:c9:e5:7a:e0:c1:fa:89:
76:18:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:26:45 2025 by rpki-client