Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File: v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier: rkUXOLPezMaVt6KbIUDvJ61vpmkBRvSmX2FZL4ZDj/s=
Subject key identifier: 4B:FA:D3:50:5B:3B:8E:85:E2:DE:00:51:9F:9C:84:91:A9:46:09:E5
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer: /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial: 07
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number: 07
Signing time: Fri 31 Jan 2025 03:17:32 +0000
Manifest this update: Fri 31 Jan 2025 03:17:31 +0000
Manifest next update: Sun 02 Feb 2025 03:17:31 +0000
Files and hashes: 1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: 7tqqWyRJ8rC+ekm7JUkXCw3lqEQcLAbMqh5OdQRmiVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Validity
Not Before: Jan 31 03:17:31 2025 GMT
Not After : Feb 2 03:17:31 2025 GMT
Subject: CN=679c40cc-4709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:63:db:76:4b:8a:81:dd:fe:18:22:98:d2:
29:66:de:d1:2b:01:0a:70:d1:76:8f:85:9b:ef:d0:
61:5c:b5:4f:a3:ad:20:f2:4a:81:6b:d9:f7:cd:7a:
b8:a5:e7:b0:59:0f:e9:80:33:1f:de:af:e2:ae:0b:
cb:eb:08:e2:0f:b2:7a:91:98:4f:70:38:64:5b:fc:
f7:94:21:21:b5:c5:49:2f:41:63:45:fb:df:11:d1:
72:75:e5:20:d6:34:11:0c:da:95:a1:35:1f:e9:cf:
43:d6:d7:2a:6c:3b:e0:80:c3:4a:11:03:9e:a1:3a:
8c:b4:d1:23:7b:ad:34:3b:a0:91:8f:96:58:53:6c:
d1:48:fe:82:e2:39:da:25:4e:d4:c3:39:f3:c8:79:
a9:64:4e:dc:82:5c:e8:ef:41:60:a9:c7:ab:4a:64:
15:41:53:e3:09:bd:ff:b9:09:e2:ae:19:fb:76:7b:
10:7a:fb:9e:82:bb:dd:1d:a5:39:5f:13:f7:5b:d2:
85:3f:4a:83:cc:eb:d4:cc:18:03:a5:a9:b6:05:3c:
a2:e9:34:f6:e5:85:c7:a4:a6:1d:6c:29:3d:9b:cd:
ed:5e:d0:d5:b7:fc:cf:dc:3b:1a:9c:b9:e0:db:e6:
26:10:74:9d:4e:6d:a6:75:a0:cd:9a:a0:99:5f:c8:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FA:D3:50:5B:3B:8E:85:E2:DE:00:51:9F:9C:84:91:A9:46:09:E5
X509v3 Authority Key Identifier:
keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:b6:1e:55:c2:fb:7c:2e:4f:94:60:1f:4c:c2:05:b6:88:
e1:d3:f8:d3:32:16:9b:dc:c5:96:e6:f4:b3:05:c3:a1:c9:5c:
80:8f:be:bb:13:2b:19:44:39:4a:d4:92:34:a2:dd:d5:ac:43:
1d:4f:10:05:6e:f1:95:ad:f5:be:b5:90:be:12:2c:13:3e:5d:
40:06:6f:8e:45:de:bb:e0:2f:7d:9c:54:2f:66:d1:34:43:74:
c4:1a:5c:2a:46:59:48:61:55:13:d5:4d:0d:15:f9:6d:9f:10:
e8:c7:35:22:58:57:a2:1e:97:13:59:c5:76:a5:6f:8a:1a:ac:
43:b5:7c:7e:6a:bb:89:16:80:83:8a:b0:9e:f2:7e:3c:4f:18:
4a:3d:97:8e:8d:58:f5:24:cd:c5:04:54:10:19:40:33:2a:09:
0b:fa:46:b5:f2:9e:47:59:ea:c4:2c:b5:c3:55:16:62:63:d1:
95:06:90:53:7c:c1:e8:30:0b:5f:39:95:18:c7:bc:6b:95:36:
0c:b9:79:93:94:38:47:b0:d5:aa:90:63:94:9a:89:e3:e1:b8:
a0:86:c6:2a:95:88:ec:6b:d0:1e:90:97:59:ce:a7:01:0d:d6:
4b:7b:70:da:7b:41:5b:8d:b7:0e:c6:c0:23:70:93:57:6c:b4:
af:4d:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:12:37 2025 by rpki-client