Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: kP0QCPBEHp6eXuub7xgcSMqkBl7oW12JoGRCNFmQgy8=
Subject key identifier: 05:A0:E2:B8:C1:C7:9C:9F:5C:71:B4:D4:B2:3A:AA:B0:D6:12:1A:5E
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 019F
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 019E
Signing time: Wed 14 May 2025 04:28:26 +0000
Manifest this update: Wed 14 May 2025 04:28:25 +0000
Manifest next update: Fri 16 May 2025 04:28:25 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: Wjziz2Ta+3RbBpIEPkp6X8egfXZxqm5DWpGAS77upUE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 04:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: May 14 04:28:25 2025 GMT
Not After : May 16 04:28:25 2025 GMT
Subject: CN=68241bea-c77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:71:f1:05:12:8e:b2:40:d5:97:56:cc:fe:
8b:b0:16:11:e9:20:ca:aa:19:d5:e4:44:7e:4a:47:
54:1d:f5:c7:11:5f:53:26:f0:98:56:23:4c:70:de:
29:3f:78:49:8b:73:88:ac:e6:5b:ca:67:55:e3:07:
ea:d4:6c:30:90:9c:76:5b:dc:c5:b9:e0:46:54:a8:
61:a9:08:04:c2:57:16:f0:f2:13:a3:5d:aa:43:f9:
5a:12:be:06:e9:3d:05:c4:d0:a9:08:d8:cf:ab:22:
42:40:0b:f4:d9:a3:08:5b:3f:97:9c:de:eb:f6:da:
80:a6:7a:c0:f7:9b:1d:b6:04:23:00:fc:89:63:17:
23:20:2d:3f:e9:6f:61:d4:86:14:b9:b4:9b:2c:0d:
aa:14:df:96:d2:a0:29:2a:cf:ff:7f:84:49:80:58:
0b:4c:a8:97:89:66:c6:23:0d:42:d5:d5:40:fd:4d:
97:e5:e9:3c:d7:38:26:82:22:b0:9f:63:19:0d:1e:
8e:5d:77:6e:4b:63:22:09:79:f3:cc:ec:d8:66:d4:
36:89:34:30:0a:5c:4d:91:01:83:5b:d6:3a:0d:46:
a8:29:53:08:bf:17:02:af:33:10:2e:83:3f:7f:37:
4f:81:30:86:36:63:67:10:32:be:59:29:fb:86:34:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:E2:B8:C1:C7:9C:9F:5C:71:B4:D4:B2:3A:AA:B0:D6:12:1A:5E
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:9e:4c:60:7c:f7:df:3c:6a:d4:98:ae:20:6a:4a:9e:aa:e3:
9b:ec:6d:17:57:46:25:c0:59:f1:e8:c8:6c:d0:0b:fc:a1:ef:
ef:28:ac:f6:bd:65:7b:88:d4:7d:0d:a7:29:fb:6d:ec:e1:6c:
fa:2a:23:6b:d2:65:ef:42:36:73:29:a5:d8:ea:9f:52:29:e6:
c4:3e:e2:4a:d6:ae:b3:bc:bf:21:3b:15:db:eb:d1:d3:13:2d:
5e:77:d3:4f:79:f0:6f:3b:43:4b:cb:cf:48:44:d8:40:58:98:
40:31:2c:07:55:34:4f:d9:df:3b:24:2b:76:69:c5:db:a8:3a:
c1:f8:ed:cf:15:b0:32:d6:6b:dd:2a:66:d6:95:be:f4:51:c6:
6b:d9:22:d0:22:19:bc:7a:c2:49:b3:6c:53:0e:93:39:6e:14:
ca:38:8b:2a:da:dd:0f:f1:75:02:5d:d1:77:33:5d:f3:61:3b:
6f:09:e9:e4:c3:22:33:2e:aa:09:31:2a:48:a2:d1:ae:e1:08:
59:ad:05:18:47:16:36:1d:c3:4d:f2:cc:e2:fa:aa:ff:5d:e6:
14:a7:4b:e3:57:42:13:da:aa:45:14:66:d4:40:ac:8f:70:be:
f1:29:1c:b3:82:98:33:f2:22:0c:04:87:b2:b9:2c:3f:10:ee:
40:1c:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:54:49 2025 by rpki-client