Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File: 0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier: Bsz1fwM6bvwi3c5z2ujHvPs1sxyipjSA1SPR4CnBTG4=
Subject key identifier: E2:F9:5A:49:04:DB:34:12:96:88:F7:99:C1:F5:C4:13:1B:F9:A4:19
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: D4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number: D4
Signing time: Fri 31 Jan 2025 03:01:07 +0000
Manifest this update: Fri 31 Jan 2025 03:01:07 +0000
Manifest next update: Sun 02 Feb 2025 03:01:07 +0000
Files and hashes: 1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: lwMipyOVBtwjW05gqB2KJ9mh15wL+OABRhOck/Za9i4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Jan 31 03:01:07 2025 GMT
Not After : Feb 2 03:01:07 2025 GMT
Subject: CN=679c3cf3-a13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:88:3d:a7:93:1d:8f:21:77:26:93:fc:b1:
58:91:bf:b7:0e:6f:2f:6c:35:65:29:d9:fd:b5:e8:
d0:cf:b7:e0:1f:a9:29:e6:43:d6:c7:41:7c:ed:02:
d0:af:06:7b:7e:db:b6:9d:a4:a7:58:86:3e:c0:10:
ec:df:bf:d4:2d:a8:b3:ce:65:91:70:73:86:4c:27:
a9:45:62:5c:72:4c:a2:24:bc:d0:e0:ab:a5:bb:54:
97:4f:1b:97:98:06:56:d4:40:cd:00:3d:16:36:58:
6f:87:6a:a3:b8:f6:62:8c:e6:2e:7c:12:28:4d:ab:
c5:64:44:e4:1e:66:9e:31:e6:86:80:24:aa:1f:3f:
a8:60:ca:98:69:e1:05:7a:3b:12:c7:aa:d6:6d:db:
e6:22:e6:55:7d:23:2b:d4:b0:d1:40:16:66:5c:75:
c4:f7:35:65:fa:12:30:53:08:b3:53:22:68:67:51:
a7:62:22:cd:7b:ce:f6:aa:e2:7a:f0:e9:0f:30:18:
41:31:24:a0:46:ab:c5:ed:7c:cf:87:50:c3:86:74:
4f:17:4b:f5:b3:db:0c:e5:55:a7:6a:3a:00:a5:fa:
81:0c:a0:5a:70:e2:18:83:8a:29:f4:91:ef:9f:8c:
0c:53:20:3d:11:40:0c:95:4a:69:d4:2e:2a:3f:81:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:5A:49:04:DB:34:12:96:88:F7:99:C1:F5:C4:13:1B:F9:A4:19
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ae:9f:70:45:38:80:91:9a:f5:f8:50:65:35:1c:1b:60:17:
fe:8a:84:bf:dc:dd:c0:9a:46:13:c6:62:ee:77:74:ec:7a:f1:
a7:04:14:f2:ef:72:ba:6c:b8:01:d8:36:b0:45:ae:fa:ff:2a:
9d:7e:f1:8d:60:8c:39:ca:e9:d5:fb:f6:9e:2f:d1:32:52:ac:
b5:de:f4:e6:77:40:b9:cb:e7:e6:3e:3a:03:e7:64:d0:e0:0a:
34:9b:d9:71:45:52:88:68:39:21:6b:4b:28:22:69:10:1f:55:
bf:7c:09:37:22:08:ac:8b:0a:2b:4b:46:d0:67:8b:e1:de:c7:
08:62:57:3e:a2:d0:8f:ba:ae:c3:fb:25:14:1e:c5:7b:62:89:
91:cb:fa:bc:b4:f9:68:99:87:cf:1d:4a:60:97:0e:f4:44:60:
c0:85:ca:4e:80:3f:c5:f1:e1:e0:9d:26:be:ab:ab:5b:93:47:
f2:07:3f:17:24:b0:5c:7e:9b:69:24:ce:a2:8e:64:54:bf:60:
a9:af:b1:d5:7b:71:2c:f4:43:77:b1:64:48:2b:4e:a7:55:4a:
ff:32:ca:73:ad:e0:7d:e0:3b:53:36:f7:ea:07:df:0c:e4:66:
2b:a4:96:2f:80:67:58:c1:6e:69:59:38:2a:1a:1a:21:c3:fa:
40:50:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:52 2025 by rpki-client