Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
File: D1pm1nbRb8eSfE4kaUoejHekQGs.mft (raw, json)
Hash identifier: XYZwUCfKmYe2v/CxLzC9zKGDcz5hhCmJ6GyiawE6GG0=
Subject key identifier: CA:91:C6:EC:9B:18:24:A3:4F:6E:12:CC:BF:97:53:07:46:37:B8:C6
Authority key identifier: 0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
Certificate issuer: /CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Certificate serial: B2
Authority info access: rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 03:05:39 +0000
Manifest this update: Fri 31 Jan 2025 03:05:38 +0000
Manifest next update: Sun 02 Feb 2025 03:05:38 +0000
Files and hashes: 1: D1pm1nbRb8eSfE4kaUoejHekQGs.crl (hash: xHyOv9NMdPaZpQkcVuEEoFq/kSSoLxaqsWTCDjXnf3Q=)
2: 556811145FEA11EF84A2058A762E951A.roa (hash: P0gvfxM0hcVTDkEmLqEkHZpP55/CRPi31FOdnN+KXYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Validity
Not Before: Jan 31 03:05:38 2025 GMT
Not After : Feb 2 03:05:38 2025 GMT
Subject: CN=679c3e02-fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:82:9a:c7:22:fc:0e:6e:10:6e:0e:ac:1f:
93:e6:69:65:8b:75:1a:ff:c4:e2:88:b5:d5:0e:81:
cf:76:15:f2:9c:47:cc:57:09:a1:d7:d1:4f:7b:d5:
01:2a:f6:33:04:cc:c8:5b:2c:70:3e:1e:d5:a4:20:
0b:1d:6c:ca:78:d5:af:21:2b:97:56:f6:65:38:d0:
89:a0:51:16:e5:99:d9:ab:66:82:ff:38:06:f7:6d:
74:7a:b1:95:1f:4d:d7:73:57:12:80:c8:0c:0c:37:
d8:f4:54:ad:de:2c:39:fc:4e:01:85:cb:3b:07:34:
04:22:ca:69:9a:fa:8a:dd:0e:8d:1a:0c:ee:ce:cd:
87:f5:10:e1:9e:c1:83:e4:e4:86:a1:73:f0:e3:1b:
0e:83:10:8e:f6:d5:5e:b6:14:c2:8f:65:d2:d6:0d:
92:dc:94:03:85:53:7e:ec:dc:fa:9c:ae:69:c1:ab:
6d:01:b1:07:19:20:cd:b3:90:5f:4e:85:39:84:42:
8f:fc:e2:3c:20:d5:0f:06:89:ba:9e:91:c3:5a:0d:
7c:08:cd:93:55:6d:60:50:00:f3:3f:a5:98:1f:93:
7b:f2:9c:fc:c7:db:65:15:fc:cc:74:09:63:1a:e9:
af:61:94:13:81:2e:b6:1c:53:aa:26:4c:06:cb:de:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:C6:EC:9B:18:24:A3:4F:6E:12:CC:BF:97:53:07:46:37:B8:C6
X509v3 Authority Key Identifier:
keyid:0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:d8:06:ce:9b:db:6f:40:ee:41:1c:14:9d:3a:ec:fa:c2:8e:
83:5a:59:d1:56:b0:54:86:35:63:9e:47:ad:ad:38:13:2c:85:
37:30:0b:04:f2:ad:2b:c0:22:64:c0:55:96:ad:48:df:b6:68:
97:91:21:98:ec:ce:2a:3e:82:c6:a5:e4:bf:c8:1f:2a:de:c1:
6a:64:d1:70:96:3c:79:89:64:c2:c4:7b:3f:ae:13:96:59:b0:
ea:3e:5e:13:6c:00:3b:b7:9a:0d:df:d3:08:eb:35:15:e0:1e:
b0:5a:86:69:99:d3:cd:4e:1f:f0:36:d3:9e:26:b9:01:6a:f4:
c1:5e:ed:43:2c:35:c8:ba:4c:09:00:5f:34:b1:ca:b0:ca:f3:
88:16:5c:2b:dd:c1:9d:c8:9f:57:71:ac:69:40:b5:cb:9e:79:
c1:53:2b:57:8e:a8:35:8e:f4:0f:c0:ba:3e:8c:d8:65:72:55:
9f:f7:96:46:05:3d:a7:8b:22:8f:72:c2:49:6e:96:a5:d2:40:
3c:53:1d:39:97:d0:f2:c5:13:a7:ac:80:8e:61:50:db:86:3d:
2b:02:00:c0:7d:d9:32:fb:40:42:f8:86:65:29:7c:7c:79:e6:
81:24:d6:33:db:95:81:f6:5c:25:46:28:5d:9b:84:8b:68:a2:
a2:82:81:de
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICALIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlDOENSSTExMC8GA1UEBRMoMEY1QTY2RDY3NkQxNkZDNzkyN0M0RTI0Njk0QTFF
OEM3N0E0NDA2QjAeFw0yNTAxMzEwMzA1MzhaFw0yNTAyMDIwMzA1MzhaMBgxFjAU
BgNVBAMTDTY3OWMzZTAyLWZmZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDK24KaxyL8Dm4Qbg6sH5PmaWWLdRr/xOKItdUOgc92FfKcR8xXCaHX0U97
1QEq9jMEzMhbLHA+HtWkIAsdbMp41a8hK5dW9mU40ImgURblmdmrZoL/OAb3bXR6
sZUfTddzVxKAyAwMN9j0VK3eLDn8TgGFyzsHNAQiymma+ordDo0aDO7OzYf1EOGe
wYPk5Iahc/DjGw6DEI721V62FMKPZdLWDZLclAOFU37s3PqcrmnBq20BsQcZIM2z
kF9OhTmEQo/84jwg1Q8GibqekcNaDXwIzZNVbWBQAPM/pZgfk3vynPzH22UV/Mx0
CWMa6a9hlBOBLrYcU6omTAbL3su5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUypHG
7JsYJKNPbhLMv5dTB0Y3uMYwHwYDVR0jBBgwFoAUD1pm1nbRb8eSfE4kaUoejHek
QGswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QzhDL0RFMjhCMTZDNUZEQTExRUY4QUNFQjlBOTc2MkU5NTFBL0QxcG0x
bmJSYjhlU2ZFNGthVW9lakhla1FHcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0QxcG0xbmJSYjhlU2ZFNGthVW9lakhla1FHcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTlDOEMvREUyOEIxNkM1RkRBMTFFRjhBQ0VCOUE5NzYyRTk1
MUEvRDFwbTFuYlJiOGVTZkU0a2FVb2VqSGVrUUdzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn2AbOm9tvQO5BHBSdOuz6wo6DWlnRVrBU
hjVjnketrTgTLIU3MAsE8q0rwCJkwFWWrUjftmiXkSGY7M4qPoLGpeS/yB8q3sFq
ZNFwljx5iWTCxHs/rhOWWbDqPl4TbAA7t5oN39MI6zUV4B6wWoZpmdPNTh/wNtOe
JrkBavTBXu1DLDXIukwJAF80scqwyvOIFlwr3cGdyJ9XcaxpQLXLnnnBUytXjqg1
jvQPwLo+jNhlclWf95ZGBT2niyKPcsJJbpal0kA8Ux05l9DyxROnrICOYVDbhj0r
AgDAfdky+0BC+IZlKXx8eeaBJNYz25WB9lwlRihdm4SLaKKigoHe
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:11 2025 by rpki-client