Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File: 1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier: nh5cFyhd04pGygEMvAxqYyhzuZSRcOz2/1HChZ6q5EQ=
Subject key identifier: A6:05:8B:33:79:7E:B6:13:2E:0E:14:F9:35:B0:9C:E3:1A:EB:63:DA
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer: /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial: 3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number: 3D
Signing time: Fri 31 Jan 2025 03:15:26 +0000
Manifest this update: Fri 31 Jan 2025 03:15:26 +0000
Manifest next update: Sun 02 Feb 2025 03:15:26 +0000
Files and hashes: 1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: sH4OoVuVXR+ixt+clRlyH45cuewYTYjGjcp+23d/Ris=)
2: FAE9132EBEE311EFA8C67594762E951A.roa (hash: 4V2xq+YhsqcDrEW6q5qpBpAI8sGhmeoDwb8giUJL3zw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Validity
Not Before: Jan 31 03:15:26 2025 GMT
Not After : Feb 2 03:15:26 2025 GMT
Subject: CN=679c404e-dfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:ad:0f:84:da:a3:4c:06:38:67:e8:6d:7d:
43:6a:ba:68:27:e0:53:9f:ce:88:54:a7:c3:18:df:
7b:78:f2:ca:b0:2d:42:9f:7c:3c:3e:6b:bd:e7:5e:
0b:a5:9f:4a:06:d2:5d:05:21:2d:c3:08:24:48:38:
1b:b5:2f:18:7a:52:ef:1c:8b:e0:8b:a7:1f:89:61:
32:df:ae:e5:7a:1a:b8:49:7c:01:ff:ac:51:04:5f:
3b:4c:06:87:d0:be:f1:63:31:33:d5:31:5b:75:74:
3d:c8:5d:2b:43:3b:bc:6b:4b:7a:b2:10:c1:8c:63:
76:eb:e6:ec:19:7d:e4:56:73:bd:07:0b:58:6a:d5:
df:68:3d:9b:a9:57:40:73:b9:d6:a5:8a:7c:d5:30:
34:d0:e2:9d:10:4b:ac:b3:5e:cf:00:47:6e:80:52:
43:a0:06:0b:00:5a:13:24:c8:3e:2c:76:85:51:39:
55:e2:9c:5e:f8:95:a8:74:08:ee:fb:80:c4:4a:31:
80:be:0d:34:81:75:7a:ba:17:b1:05:15:56:28:fd:
84:ca:70:19:4c:8c:e0:18:4d:65:7f:d1:a7:f2:34:
71:c7:2a:ac:78:44:0a:ae:12:e8:49:fc:d7:12:e9:
fb:73:47:a8:04:7e:bd:5d:78:83:86:51:42:ce:78:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:8B:33:79:7E:B6:13:2E:0E:14:F9:35:B0:9C:E3:1A:EB:63:DA
X509v3 Authority Key Identifier:
keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:03:8a:2d:44:fb:4d:41:67:72:4d:e0:f9:16:80:12:70:16:
16:7f:dc:b4:62:a5:5c:58:1c:fd:c0:4d:97:fd:9e:e2:1e:97:
0b:7d:82:c3:35:e6:c6:f1:95:e1:9a:c4:78:c6:e8:c8:7a:e0:
9c:9a:49:4c:c1:c7:3c:69:d6:a7:41:fa:ae:fd:d0:26:22:50:
7e:aa:3e:77:b5:5e:28:98:4e:04:c8:b6:d5:cb:52:d0:26:ca:
ab:2a:9c:f0:b6:90:3a:70:d7:7d:be:ec:ef:57:30:22:b9:76:
bb:0c:17:31:83:c3:5e:ab:72:f8:9a:b3:fd:71:76:c5:39:fd:
4a:65:bf:47:0a:0a:16:15:6f:7a:ce:b6:82:7d:e6:75:05:16:
53:73:04:3f:da:eb:c4:c0:4b:c0:4e:52:01:ab:50:d9:5c:fe:
d9:e6:99:3d:82:e6:dc:ca:7d:90:f4:8a:58:f7:60:de:e0:cf:
0f:47:94:1e:de:85:5d:0d:f9:06:8f:6f:77:d7:62:0e:17:8b:
49:e3:92:c3:12:85:6f:3f:5d:a5:47:22:02:e4:09:66:66:e4:
3f:48:17:c4:52:10:f4:4d:e2:44:d1:24:fb:d9:a8:19:ea:39:
f9:4f:f3:75:cd:98:4e:3d:79:a6:ef:1d:64:20:ed:52:09:92:
3c:1e:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:29 2025 by rpki-client