Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: VCA8/iqWf2vzjxCRi1KkbbWM7uNQsQgUTF9NpdQYLMU=
Subject key identifier: C2:FD:93:F0:31:9A:A3:B6:82:F3:20:64:23:76:39:29:3F:AF:F9:BA
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 018E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 018E
Signing time: Tue 13 May 2025 04:34:36 +0000
Manifest this update: Tue 13 May 2025 04:34:35 +0000
Manifest next update: Thu 15 May 2025 04:34:35 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: hgTDXDK3E48YaixJwRz329S6yjr/CziVOD3MnVXXMJg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 04:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: May 13 04:34:35 2025 GMT
Not After : May 15 04:34:35 2025 GMT
Subject: CN=6822cbdc-1c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:47:0f:13:25:74:f3:2f:59:fd:d5:e1:cb:
0e:88:5c:64:28:89:19:28:db:b1:f2:a8:45:c3:fd:
c8:5c:90:d5:7b:55:8e:05:81:b7:f6:14:42:ed:9a:
33:ae:87:54:51:d7:d8:c1:e2:c3:2f:bd:60:20:3e:
23:83:e7:8d:9f:76:ad:74:68:7f:bf:88:62:0c:4e:
ae:d3:27:fe:35:e7:48:b1:b1:a9:b9:00:aa:21:d5:
13:38:37:36:1c:1d:09:11:ad:3a:89:d7:d6:f4:17:
37:d3:f5:76:ed:19:f5:54:ca:e8:67:46:b2:ce:23:
00:39:53:b4:de:8a:ea:c7:7c:b4:60:92:bd:36:0d:
13:5b:24:7b:64:b3:0e:7b:db:10:52:9d:0a:9e:b1:
c8:5d:05:bf:4c:bb:d2:98:b2:7b:9b:29:16:c9:c6:
99:9e:42:35:a4:97:c0:2b:74:74:3b:ee:19:63:58:
a4:0d:46:65:b9:bd:7f:54:d0:69:57:02:f0:69:ed:
c4:6d:16:d2:7e:27:ea:24:b1:11:59:de:c9:a2:b6:
64:9a:d6:92:e5:17:ec:15:81:86:16:af:71:39:be:
60:34:ed:fb:37:80:6f:a4:c1:99:14:04:ec:f1:58:
34:1f:4b:9f:d0:dc:35:7b:a7:5b:20:15:e3:a8:e9:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:93:F0:31:9A:A3:B6:82:F3:20:64:23:76:39:29:3F:AF:F9:BA
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:32:34:25:45:d3:63:08:98:d0:f0:48:9d:72:b7:ec:34:ca:
f9:23:8b:86:e6:d2:ff:c1:34:9f:9a:f5:ee:4a:dc:be:94:20:
72:83:12:d2:32:5f:d6:45:12:39:96:5e:99:86:0b:fb:2d:97:
a2:34:51:10:32:51:c7:9d:05:0a:fb:9c:cb:5d:5f:a3:be:ce:
2a:4f:35:cf:90:32:d6:54:6d:55:a0:39:33:30:96:dd:e5:e3:
51:3a:96:4b:44:f8:03:40:1c:01:53:48:e9:49:56:af:dc:bc:
27:55:17:0d:13:69:be:4d:4a:8d:d8:fd:a0:56:34:3a:99:14:
4e:fc:05:34:4a:60:a4:97:68:d7:b4:5c:42:54:63:d9:7c:28:
18:a1:f2:ec:55:2c:ee:48:c2:a4:44:99:27:26:9c:fd:96:08:
5e:45:a4:bf:9c:3b:5a:3d:d5:7f:88:ff:88:43:c2:c6:52:87:
09:27:8f:f5:8d:65:64:42:c6:80:d2:9f:86:e6:e8:09:33:b8:
1c:76:de:30:de:44:ac:33:f8:ab:d6:7e:03:f0:36:35:3a:79:
73:cc:43:2e:20:1e:9a:f6:76:e1:ff:b4:21:86:ab:14:69:2c:
32:1b:d6:ee:bd:cf:96:33:2e:8a:9a:ed:43:e9:85:49:32:53:
f7:7d:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:25:18 2025 by rpki-client