Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: FDn8ce/IUvXalnMrMfUcGNscakwW06nxwLynskCT3SA=
Subject key identifier: D3:FE:21:0F:B9:4B:43:DC:E8:FA:F9:A4:8B:71:77:15:BB:A6:35:B6
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 029F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 0299
Signing time: Fri 09 May 2025 03:57:20 +0000
Manifest this update: Fri 09 May 2025 03:57:19 +0000
Manifest next update: Sun 11 May 2025 03:57:19 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: 2nDpCgtt6YwLmmlISH4tDE5m7yCCN9a36/aIz8oXdBY=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 03:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: May 9 03:57:19 2025 GMT
Not After : May 11 03:57:19 2025 GMT
Subject: CN=681d7d1f-1f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:86:11:ad:71:b0:94:42:cf:28:ac:13:0a:
fb:f9:b2:5c:59:7a:55:0f:76:36:12:0e:75:9b:9f:
88:94:d9:72:15:a5:2c:ee:50:a2:53:5a:86:29:58:
af:93:52:85:32:1a:d6:ac:5a:c7:26:dc:54:35:d2:
42:78:28:7c:34:cd:d1:f1:8f:23:49:e0:e9:dc:24:
30:64:0f:8e:c4:f6:62:e4:2d:ce:30:13:b4:4b:01:
a2:06:09:c5:8b:62:06:33:f4:37:0b:a3:00:70:13:
96:81:c7:38:06:a2:e5:4a:ef:64:2f:0a:7d:f3:d5:
13:62:64:f7:da:cb:82:30:e3:c6:f6:d5:a3:09:8c:
ed:df:8b:4d:8d:2b:a0:de:d0:eb:18:41:31:9b:5c:
c6:b0:f2:2a:4a:33:82:58:f1:8e:82:2a:ad:26:0a:
80:da:a4:43:ef:5f:65:28:01:80:00:d6:b8:9b:60:
9d:1a:ca:bf:4d:cb:b2:0c:2f:19:d7:f3:4f:d9:23:
a9:37:54:1e:63:a2:b4:bc:2b:1a:be:e9:c1:8e:dd:
ef:13:1a:97:66:8d:d5:56:f9:55:15:43:7b:e2:f3:
38:51:c8:6b:f5:81:84:c6:3f:80:6f:0a:de:2f:a6:
33:9a:17:a5:81:4b:24:79:24:a5:56:ac:1e:18:25:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:21:0F:B9:4B:43:DC:E8:FA:F9:A4:8B:71:77:15:BB:A6:35:B6
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:5f:6d:5b:bb:b8:d9:8e:b7:b5:3c:bc:30:3b:c0:8b:d9:fd:
10:d2:a1:2c:aa:5f:cd:a1:e7:fc:6a:e1:8d:4f:d1:f8:07:a2:
8e:be:e8:cc:6e:ff:90:01:b1:87:d0:b6:ed:b9:41:79:61:1d:
fa:c2:17:12:41:eb:44:84:57:b2:46:11:5c:63:8e:d6:ec:63:
69:3e:eb:5e:44:d4:15:1f:eb:df:ad:43:cb:ff:f6:bc:b2:87:
15:7a:31:e8:28:79:3c:bb:a8:32:a4:69:e2:aa:e5:a8:16:c1:
cd:6c:08:6e:22:20:81:c3:9b:6c:8c:ac:ff:0d:5e:0c:bc:58:
78:51:19:08:18:a1:12:d3:bc:95:7b:34:79:4d:8b:6d:b4:de:
4a:a5:6a:b5:4a:6c:78:c0:bb:61:63:24:f8:61:39:00:48:17:
3e:bc:4b:da:ed:59:54:50:c2:a8:f3:b8:68:3b:98:0b:9c:59:
ba:a9:61:e2:b2:e2:76:66:2c:a9:3c:ca:31:da:04:ad:a0:a1:
12:37:93:f8:72:21:04:25:a9:68:2e:49:ab:03:7d:ca:86:3f:
af:7f:0f:e2:13:1a:73:13:7e:8d:b2:33:a9:26:8e:16:52:df:
e8:1f:46:23:9c:99:cb:7d:86:b3:91:91:b0:35:3b:d8:5b:a7:
41:d7:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:51:06 2025 by rpki-client