Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File: qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier: 5Mp64aWaU6buLz3pd3vTBNgN+4HRXnBNguznyaf02+c=
Subject key identifier: 97:8F:3A:A0:EC:FA:8E:7C:B3:FE:FC:EF:D5:E2:29:BF:63:EB:FA:69
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 058A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number: 0588
Signing time: Mon 05 May 2025 02:28:31 +0000
Manifest this update: Mon 05 May 2025 02:28:30 +0000
Manifest next update: Wed 07 May 2025 02:28:30 +0000
Files and hashes: 1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: J32ijuTFYnY/jpL5bjyNxJ51gmCjxsg8cBRlInmoD1s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 02:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1418 (0x58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: May 5 02:28:30 2025 GMT
Not After : May 7 02:28:30 2025 GMT
Subject: CN=6818224f-389e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:bc:47:ac:f2:50:28:8b:ee:62:09:06:75:
47:8a:e4:e9:b6:77:2b:8e:4a:7c:5c:ee:1f:59:77:
b4:b5:a3:06:d9:0c:86:6a:a4:69:93:75:79:e2:b2:
94:40:91:48:35:a0:98:5b:55:d8:12:3c:7f:94:2a:
9e:12:99:dc:09:ea:10:9a:6c:de:c8:41:05:06:db:
d0:4f:85:c0:f7:9c:95:8b:b2:54:fd:8b:b8:44:74:
c4:91:c0:94:46:47:31:17:8b:33:b7:0a:b3:af:82:
1a:c3:3c:2f:1d:a8:b7:a9:6d:de:89:b3:1e:31:e3:
76:bf:dc:78:65:6d:ec:58:8a:97:df:f1:96:fb:4d:
c7:28:1b:b2:ff:1a:a6:62:8a:1e:1e:50:12:76:17:
09:c7:b2:fd:c0:e5:da:24:4e:fb:8f:15:6a:65:f1:
d4:eb:0c:70:90:ce:25:1e:46:0e:7a:08:61:ce:6b:
28:0b:29:3a:45:32:b6:29:46:a9:87:01:90:74:07:
be:c7:f7:d5:78:b4:e3:94:04:70:fc:68:e7:5a:50:
20:c4:f7:a2:37:76:f0:53:9f:2d:cf:3e:0a:dd:4e:
d6:bf:ef:2d:c2:f3:3a:43:e9:0a:fe:cf:9b:41:69:
2e:11:40:1e:60:28:cf:5a:be:d3:a1:b9:6b:d5:26:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:3A:A0:EC:FA:8E:7C:B3:FE:FC:EF:D5:E2:29:BF:63:EB:FA:69
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:48:4c:56:af:c2:8b:7c:bf:22:9f:d2:ec:b1:6e:64:ff:
f5:8a:16:5d:5b:1c:33:38:98:8d:49:67:0a:0f:39:8d:01:0b:
6c:09:57:3a:fa:a8:f0:d0:f8:ad:38:28:f6:a0:b6:a4:9b:f2:
51:8f:6c:1e:ae:d5:0c:4a:43:34:b1:5c:4e:4a:20:d5:bd:68:
d6:d1:82:2b:a7:56:50:8e:87:1d:cc:53:1b:85:9e:ef:2d:9c:
78:61:b9:2e:a6:7f:e4:0e:02:8c:e5:00:a0:31:18:4b:df:46:
69:6a:89:e4:f6:f9:59:bb:bc:50:53:09:9a:dd:79:be:63:e7:
00:d8:54:08:aa:ef:eb:bd:13:b6:2f:5b:1d:a9:ee:a8:18:5c:
fc:f4:95:e7:5b:4d:df:c3:94:52:9d:c4:0b:cf:2e:33:f1:52:
e6:f2:da:3b:23:a9:fe:15:be:72:b5:0a:5f:09:20:71:c6:7b:
bc:42:b3:0a:67:c8:0f:5c:34:f3:0a:88:20:d6:b5:b3:85:18:
49:24:f4:42:1d:ff:5e:c2:5e:eb:9d:e2:4e:35:77:78:43:8b:
7b:9b:aa:78:e8:51:cd:62:c1:b1:0c:3e:43:69:fd:d9:f0:32:
73:a5:f3:32:86:9d:28:75:f9:c8:35:ed:b2:e2:71:63:98:27:
13:08:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:44:47 2025 by rpki-client