Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: hWS5dt/itMavX0ktyg1siXRaz1Cz8OGuobZINFSdv0A=
Subject key identifier: 0E:CD:8C:1E:21:08:35:61:BE:AD:34:66:51:B8:2E:17:31:A1:CA:FF
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 08B8
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 08B7
Signing time: Mon 12 May 2025 01:28:43 +0000
Manifest this update: Mon 12 May 2025 01:28:42 +0000
Manifest next update: Wed 14 May 2025 01:28:42 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: 3o85WXSM+nN4ng/4h98xmiiBCOejgWJ8nPZSFiWYVDQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232 (0x8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: May 12 01:28:42 2025 GMT
Not After : May 14 01:28:42 2025 GMT
Subject: CN=68214ecb-382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:70:c9:4e:6b:26:a2:ee:96:f0:de:3c:80:
21:d3:91:89:f9:ef:fc:64:2d:9b:84:12:1a:69:a9:
c9:78:13:7b:32:49:16:83:1c:43:0b:08:90:ee:ef:
39:f1:8c:35:5b:e0:1c:a8:2b:ca:42:bf:d5:f0:89:
8f:4a:ae:0e:3a:1c:90:28:5e:de:ed:1f:a7:3f:39:
ca:9a:b5:2b:20:01:a7:96:dc:5b:59:cb:d2:dc:e6:
df:37:68:ee:80:aa:79:ad:87:90:76:71:af:87:68:
51:7a:6f:0f:be:63:de:c3:50:d1:d6:d1:f1:4b:a7:
18:22:42:02:32:45:96:d5:5d:0c:5f:1d:0b:d9:fa:
79:7f:d4:03:5c:f5:a3:b7:cf:4d:50:e6:26:d2:b5:
5f:2b:2c:b3:ef:49:85:13:39:b6:20:5f:9f:78:9f:
3d:80:9d:97:bf:bd:b5:0a:c1:22:dc:98:9c:5c:12:
ed:d3:9c:7d:b0:5b:ba:ea:35:6d:f6:fb:3d:33:7f:
36:95:e6:6c:95:2a:3d:d4:01:48:d9:ab:9b:28:76:
fa:05:f3:a1:d4:ea:4a:ba:1c:c2:de:c3:f7:c5:e0:
c3:6f:dd:0d:f7:e9:35:40:36:59:7c:62:1b:6c:68:
7c:7d:10:ea:f4:fa:e6:38:2f:af:db:e5:5b:4c:c3:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CD:8C:1E:21:08:35:61:BE:AD:34:66:51:B8:2E:17:31:A1:CA:FF
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:20:78:54:9a:06:34:a8:4a:5f:78:96:51:17:01:11:5f:
b9:85:5a:81:80:a5:8a:9a:79:ee:f9:be:c4:24:ce:b3:90:21:
5b:20:26:90:b7:2e:13:ff:f9:63:f8:0a:e7:ad:e0:62:e8:d2:
ac:74:dd:55:74:65:11:80:a5:4f:d7:ed:83:33:e8:5f:f0:f8:
ba:38:c7:57:70:7a:88:15:04:12:fb:5b:69:bb:17:e4:42:64:
81:dd:8f:0b:87:68:43:03:b1:71:3b:17:a4:9e:79:4a:41:72:
bf:26:77:a9:85:12:5d:77:bf:fc:22:5d:2f:02:79:ff:3f:00:
a9:94:7e:23:c0:9c:8e:a8:07:22:73:17:ab:97:0a:67:de:00:
ba:29:bd:96:fa:b5:e8:85:15:52:2a:47:fe:39:6a:04:45:d5:
69:f9:98:09:18:55:b5:9a:a5:32:64:87:5e:66:d5:71:a5:6b:
98:83:4d:6b:9c:f2:d2:21:af:52:cb:ab:fa:04:2e:d8:e3:45:
96:31:7a:82:f1:62:42:63:1d:fa:d1:4b:d7:a7:93:c4:79:dd:
9c:e4:53:3f:8e:20:dc:3e:bb:48:4a:ae:9c:a8:ba:de:33:d2:
03:0a:07:cb:91:70:a5:4f:19:7c:94:2b:a3:d6:a2:da:30:90:
a7:10:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:25:41 2025 by rpki-client