Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier: U+HDD5E/BexDGpqtxxzTSj5pSRcBTipLrcizF0ty7b4=
Subject key identifier: 8E:C8:54:86:AC:DF:95:09:7B:EF:B1:00:9E:FD:F3:BD:4B:30:A4:50
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer: /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial: 0355
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number: 0354
Signing time: Sat 10 May 2025 03:28:30 +0000
Manifest this update: Sat 10 May 2025 03:28:29 +0000
Manifest next update: Mon 12 May 2025 03:28:29 +0000
Files and hashes: 1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: e7PcDLkX7UrfGNtVTq/H4yEVBB+hl4j/AwWI/2rX6dw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 03:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Validity
Not Before: May 10 03:28:29 2025 GMT
Not After : May 12 03:28:29 2025 GMT
Subject: CN=681ec7de-38b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:21:93:a9:0a:c8:b1:89:87:28:43:c7:c5:
b6:47:4b:c4:e6:09:7b:fb:b1:cc:88:a8:44:58:2e:
6e:bf:35:d2:23:66:d2:1c:b4:df:39:d2:94:ab:1d:
50:a7:8b:0d:9a:46:05:0a:45:2c:65:be:cc:1b:e7:
1d:ce:40:6f:12:5a:ad:7b:93:01:6d:4a:94:55:08:
4d:13:be:0d:26:6f:44:78:e1:c8:4d:93:e3:d4:12:
bb:4a:79:3f:dc:d3:95:75:5b:75:93:a8:2a:72:5f:
e2:11:a9:4b:5b:b8:d2:eb:78:ca:7f:1e:36:33:40:
cc:3d:3c:0a:8f:2f:be:34:44:4f:30:3f:5f:d6:6d:
5a:79:ad:cd:01:7e:de:44:fd:7d:01:07:b9:7c:7e:
d6:d7:96:47:e3:99:96:47:b0:22:07:7e:7b:13:fd:
e4:08:b8:68:98:60:72:5b:46:8a:68:3c:d3:7c:2f:
48:a4:e9:83:c8:eb:12:85:5b:b4:0f:44:eb:63:f6:
79:07:5f:21:c8:33:98:14:b5:fb:d4:ef:02:77:e6:
0d:93:e0:c8:9d:a5:96:68:cd:1c:ce:3a:82:89:0c:
05:00:89:cd:92:f3:04:7e:01:16:96:49:5d:b2:97:
34:61:76:2a:70:94:82:42:d3:35:0e:08:4d:f5:a7:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:54:86:AC:DF:95:09:7B:EF:B1:00:9E:FD:F3:BD:4B:30:A4:50
X509v3 Authority Key Identifier:
keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:48:01:04:2f:fc:a2:a7:d1:35:dd:be:82:1d:fd:14:c6:b7:
b8:bd:fd:81:55:03:90:bb:11:9b:fa:ff:ed:94:cf:89:11:ab:
20:f2:0f:6f:00:20:36:19:f8:00:d9:ec:b2:98:99:06:6d:b4:
c6:ae:32:a6:a5:ae:cf:2c:eb:8a:84:d9:94:1e:cf:88:1f:cf:
ab:21:8d:4a:d6:d6:9e:ff:42:c1:df:d1:8d:b8:46:07:b9:a3:
7d:a8:de:36:04:1f:54:41:63:4c:04:10:9a:ca:95:d4:5b:c5:
0b:79:95:2b:60:1e:2c:2e:01:47:e1:c9:96:a6:83:0d:ae:4d:
7b:0f:5f:7a:32:9e:2c:df:e2:19:df:68:24:87:f8:60:6b:d2:
e4:7c:77:c1:5f:74:b6:ed:e1:b0:d0:43:24:05:b9:df:d0:ce:
02:50:ed:21:2b:e1:2a:63:38:8e:c5:5a:ed:cd:d7:12:5a:b6:
10:f2:04:50:a0:d1:9f:6b:08:a3:c9:2d:43:69:f5:a6:67:09:
9d:20:2e:8d:33:68:8b:39:d3:0d:f7:b8:50:e0:30:6f:49:c6:
35:d6:27:f9:db:c6:8c:f8:59:35:48:52:1e:20:44:89:a4:8f:
64:8e:ba:d1:6a:4b:b9:c9:46:1a:9f:d0:0c:46:b4:29:52:2b:
19:8f:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:56:23 2025 by rpki-client