Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json)
Hash identifier: CVIzf5fBV9n19EdvVlR4KmmsS3W04Erye6k0krQ9owc=
Subject key identifier: 97:01:05:EF:61:F4:98:DB:8B:18:04:07:27:23:D6:8C:25:29:92:99
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 02DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
Manifest number: 02D4
Signing time: Sun 04 May 2025 03:47:29 +0000
Manifest this update: Sun 04 May 2025 03:47:28 +0000
Manifest next update: Tue 06 May 2025 03:47:28 +0000
Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: gR2VQ9TPpN99EFndw6rs/J73RV2hKN1vuf29swXAj88=)
2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=)
3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=)
4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=)
5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 06 May 2025 03:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Validity
Not Before: May 4 03:47:28 2025 GMT
Not After : May 6 03:47:28 2025 GMT
Subject: CN=6816e351-77b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:09:a9:7d:33:fe:12:d8:79:dc:a2:1b:e8:
bd:5b:0a:8f:f7:06:26:ab:33:d3:2d:63:8e:c9:69:
af:14:65:5d:3e:60:49:df:f1:bd:bd:09:4f:4e:3f:
00:30:10:b4:ae:ae:7a:72:cd:dd:33:96:93:d9:83:
a0:b7:1c:3b:5b:45:0a:ae:88:f3:61:49:41:d8:a6:
91:87:3e:d9:1a:84:8e:fe:30:77:a7:95:b9:dc:90:
fb:7f:81:3a:71:28:e8:d5:88:c5:08:5a:79:d4:0d:
d1:b7:58:41:f5:7b:a2:2d:87:94:51:3a:e7:17:8f:
54:2c:7f:a1:0e:8b:64:f0:93:72:6e:3f:1a:bb:e9:
89:d7:0c:27:be:57:57:4e:f1:5a:77:2d:06:5c:5b:
e7:50:68:ba:7d:63:0a:2e:38:91:cd:64:15:d5:42:
cc:fe:af:9d:4e:e7:f3:e7:61:0f:78:f3:7c:9c:a1:
f6:53:98:da:cd:b8:b1:00:18:25:1c:61:fc:f8:42:
de:68:9d:d2:65:7b:ae:e9:37:29:7c:09:d3:7a:13:
b5:b7:36:18:22:aa:fa:41:df:10:1e:66:1e:90:f9:
c2:d2:99:bd:68:f9:03:af:44:69:d6:3a:12:a4:26:
6b:1b:bc:e6:da:5a:33:3f:25:12:7d:18:52:e6:72:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:05:EF:61:F4:98:DB:8B:18:04:07:27:23:D6:8C:25:29:92:99
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:0c:0a:94:6f:03:98:8d:8a:1a:de:26:45:bb:06:3b:c4:
6f:83:65:cf:76:19:c8:70:ab:ac:5e:ce:34:39:7b:ff:1d:4e:
88:bd:b4:be:1c:ac:d1:9e:07:a9:92:b6:1f:08:51:e9:06:50:
0a:0b:39:00:bd:b6:02:c0:10:5b:19:65:21:33:a2:f3:46:24:
8e:a3:b0:38:10:c3:98:10:ce:96:34:6e:9e:be:6f:9a:a8:6d:
28:ec:c5:60:d5:d2:d6:8f:3d:64:a8:23:b6:39:2e:e9:31:66:
ed:b4:59:ea:2a:5d:78:be:7c:1a:cd:e5:0c:14:e8:d4:26:e2:
d8:38:a1:ab:ef:5a:12:ac:a8:9f:72:7e:ae:b6:90:0a:18:4d:
a9:d3:01:14:e3:98:b6:76:f7:99:b8:e8:4f:1d:f3:70:c8:82:
90:b4:66:18:d5:ab:f8:e5:63:66:44:1c:77:45:79:2f:19:22:
34:dc:fe:29:d4:51:b0:9a:d8:b4:49:bc:c5:fb:bf:92:45:de:
71:ed:00:f6:74:66:a9:34:7c:0a:13:46:6c:01:1b:85:63:c8:
95:7f:73:a3:8a:03:e0:40:fb:e6:ab:67:37:65:ac:6d:48:36:
d0:0a:90:16:e5:85:a5:68:43:14:64:b2:46:33:a9:d8:22:2b:
72:7d:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:57:52 2025 by rpki-client