Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File: IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier: zg7qYQdObeIwB8TlFgNpM07HdLjJi+Pc0MFurXhGyl4=
Subject key identifier: DD:88:8B:E3:F5:E8:3A:2C:D8:98:12:21:E3:F9:35:A0:84:02:06:EC
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer: /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial: 0482
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number: 0480
Signing time: Wed 14 May 2025 02:53:30 +0000
Manifest this update: Wed 14 May 2025 02:53:29 +0000
Manifest next update: Fri 16 May 2025 02:53:29 +0000
Files and hashes: 1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: tXnDIbGiWbtnhXvqAPUxJ1FGGxUQc7thYcci5G7nBjU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Validity
Not Before: May 14 02:53:29 2025 GMT
Not After : May 16 02:53:29 2025 GMT
Subject: CN=682405aa-64c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:16:8c:83:12:e6:e9:f6:5a:7a:5e:a5:74:
09:39:67:81:e5:be:09:7e:2a:92:d4:1a:38:2b:c4:
b1:f1:62:34:e7:14:97:93:51:c7:5f:17:88:4a:f4:
c5:77:37:81:c5:25:cc:08:24:ad:78:d0:54:91:af:
23:1e:9d:85:89:5b:b4:cf:6e:a0:33:2b:f0:f8:ae:
27:00:ed:d0:ec:5f:11:42:33:c1:92:d8:cb:ec:ff:
e1:ab:da:d4:24:6e:09:03:41:0d:4f:57:fd:6f:2d:
a1:48:6f:60:c3:22:f5:2f:88:54:44:5a:c1:e6:a6:
c3:47:e0:43:cb:f5:3f:f6:f6:1b:4e:6b:d7:6d:73:
c1:03:ff:60:98:85:a9:7e:c7:da:85:69:0a:03:3e:
f7:24:9a:91:98:b9:b8:33:3c:fb:55:6a:e6:55:4d:
1b:33:e7:1b:46:00:6b:5a:64:cb:5a:85:77:02:7f:
39:d8:ec:f3:fb:c7:38:f3:74:ce:d5:00:8a:4f:06:
bb:4f:b1:4c:82:3b:5e:5b:47:43:99:59:3b:40:1c:
70:5a:da:80:c2:93:b0:21:07:32:38:c7:6d:5f:50:
3f:04:c0:82:be:fa:5e:b0:95:02:6b:b9:6e:c6:78:
a2:5a:69:63:4a:ea:83:3f:93:be:6d:66:7d:b3:80:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:8B:E3:F5:E8:3A:2C:D8:98:12:21:E3:F9:35:A0:84:02:06:EC
X509v3 Authority Key Identifier:
keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:45:de:ea:1c:ad:40:32:df:8f:38:56:e9:fa:4b:2c:c9:42:
b4:d7:6e:70:0c:73:60:9c:3a:69:19:60:92:f8:66:c9:6a:04:
a3:0f:be:95:f1:34:0e:df:f8:7e:b3:0e:61:e3:08:76:fb:6a:
ba:92:b7:1b:b0:b5:f2:23:3f:ee:14:59:bf:6f:a3:2c:e2:1c:
16:80:18:3d:0a:e1:a3:ed:b4:49:bd:b6:2c:36:4b:f1:60:14:
8a:5b:c1:5d:2b:0c:a3:68:71:21:ff:4f:7a:f1:c0:a5:d5:fa:
99:7a:c5:aa:78:71:b8:be:26:95:15:ca:31:3d:29:b7:c5:8b:
ff:b4:99:3e:40:2a:10:21:84:5d:f5:06:51:d3:4f:c3:22:1b:
d8:b1:bc:68:a9:be:00:89:85:a3:18:5f:04:a5:19:c3:c4:ef:
20:48:39:75:c1:31:55:75:e4:2b:96:14:34:75:ac:10:ac:5b:
7b:d4:d3:9b:6f:ea:ed:ef:66:df:4a:80:01:b6:8e:d2:ab:eb:
52:d5:77:f7:78:e0:b8:f0:78:b8:fa:ff:f9:21:c1:0f:05:8a:
eb:e1:59:48:f9:f0:57:7d:71:2f:85:06:2f:3c:5d:cb:ee:05:
92:5a:52:f0:81:ec:f9:75:17:9f:b3:a3:a9:ef:66:03:a4:24:
d0:63:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:11:57 2025 by rpki-client