Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: y+ee20DkvHr9WO2yfhhrwy8mZEpjKkSGo5NHtAnUBCk=
Subject key identifier: E8:08:A2:BC:61:BF:E7:37:D1:8B:16:B6:D1:43:6E:F0:37:DE:9A:E0
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 51
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: BE
Signing time: Wed 08 Jan 2025 11:00:09 +0000
Manifest this update: Wed 08 Jan 2025 11:00:09 +0000
Manifest next update: Sat 15 Feb 2025 11:00:09 +0000
Files and hashes: 1: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
4: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: 3bH/a+AO/s1wt+UhB5VKUoqHyE/vP5tlp61BXq0ct3o=)
5: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
6: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Jan 8 11:00:09 2025 GMT
Not After : Feb 15 11:00:09 2025 GMT
Subject: CN=677e5ab9-94e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:6d:ea:d7:7d:5d:db:ee:a4:20:90:41:9e:
2e:ac:28:00:5e:77:55:ed:af:3f:d6:4f:79:4e:2c:
e4:2c:65:eb:d7:76:a1:35:36:4f:ca:1a:6e:73:59:
17:7a:69:3e:7e:f2:32:41:5e:5f:8e:b3:b8:68:e6:
c6:96:ec:87:6e:c2:9a:4d:55:86:e2:75:f9:27:c8:
b2:3d:dc:e2:74:52:20:2e:e1:14:40:9c:5e:dc:8b:
7e:54:2e:17:0c:56:0f:25:f0:cb:61:ec:e5:01:cf:
4e:ef:4e:a3:88:7e:84:93:95:cc:92:2e:33:dd:9a:
8f:0c:fb:bb:04:a9:5c:e6:c0:2c:ad:ea:c0:f8:d4:
39:bf:20:5c:b8:11:9c:5d:7c:bd:9f:5b:4c:c6:12:
f6:6e:9f:91:6a:37:6b:66:77:df:0e:85:32:50:36:
da:68:5f:d1:e0:54:99:2f:5e:b3:15:15:82:76:fd:
9f:3b:00:df:9f:2d:d8:b1:2e:9b:14:e1:91:7e:d2:
6a:75:b4:b7:2c:f2:46:f7:93:7c:17:f8:ab:d8:75:
ea:35:1b:c9:e3:73:09:c9:a5:4a:fa:72:af:99:71:
14:7f:b6:57:e9:87:d5:75:96:76:c5:66:19:bc:ff:
17:da:cd:58:69:b1:28:7d:ae:10:39:0a:33:f8:2e:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:A2:BC:61:BF:E7:37:D1:8B:16:B6:D1:43:6E:F0:37:DE:9A:E0
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:31:76:37:0b:57:30:71:da:5c:0a:72:f9:41:3d:08:8a:1b:
f4:af:e9:6a:0f:a3:55:fc:69:ec:26:57:56:2b:85:df:e4:4b:
70:4f:ea:60:93:9b:1d:b7:26:94:88:00:c1:8d:a5:01:09:7d:
7b:e1:96:95:a7:ec:43:5b:48:26:09:a5:ce:50:cf:e0:68:00:
1a:29:76:c9:25:ce:4f:02:3e:14:29:61:7c:fb:50:6a:f1:f0:
e5:78:15:02:2d:21:9a:75:f0:73:fb:0a:60:f6:1e:5f:1a:a7:
8e:e1:d5:d3:b9:d0:1f:fe:1b:f4:9c:19:87:73:db:d9:34:36:
1f:9c:cb:99:53:a3:48:e2:2d:8d:bb:90:04:dc:b3:c2:32:75:
d4:19:a5:fb:fd:5e:81:2e:fb:c4:00:09:7d:27:d3:85:0f:d3:
05:a6:eb:ed:4d:bd:1e:de:92:51:5d:08:42:c1:f7:97:6a:11:
77:23:f8:09:97:a8:7b:39:54:53:0c:91:68:80:13:d1:22:7e:
c5:f7:44:4d:b5:c0:37:09:77:04:84:5e:e1:c8:c6:70:6f:1f:
ce:5a:bb:ab:c8:25:b9:62:50:f6:26:bb:86:93:47:45:d6:99:
ff:06:49:49:47:35:ac:60:91:ee:f5:4e:c7:ee:19:3e:f9:85:
b3:d2:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:56:35 2025 by rpki-client