Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
File: iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft (raw, json)
Hash identifier: NtnoZ0W/qJlJlmR+jhjKIcBWxMpGPZehcYKJPZFVSpc=
Subject key identifier: 1C:31:05:B5:19:24:B1:88:BF:D7:F8:2A:1B:2F:57:B0:A9:87:3B:6A
Authority key identifier: 88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
Certificate issuer: /CN=F3622A10AF/serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Certificate serial: B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 03:04:34 +0000
Manifest this update: Fri 31 Jan 2025 03:04:34 +0000
Manifest next update: Sun 02 Feb 2025 03:04:34 +0000
Files and hashes: 1: iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl (hash: rPpFTlVQwm8CYzur1lKvgadvePTSTDC7E+Z+0o97qyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3622A10AF/serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Validity
Not Before: Jan 31 03:04:34 2025 GMT
Not After : Feb 2 03:04:34 2025 GMT
Subject: CN=679c3dc2-a0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:99:b7:9a:dc:66:9a:1b:bb:d2:d7:2d:b5:
31:3f:a4:9a:be:28:0d:7c:0b:1e:6f:63:84:44:72:
b7:c2:61:2f:9a:d2:57:ec:00:72:ab:14:7c:5a:0a:
5b:01:b6:c5:44:0f:25:4b:20:3a:1f:77:e9:b8:02:
a5:2d:11:1d:7a:bd:ad:79:4b:9c:ac:8f:0c:91:7f:
57:a2:62:f2:1f:b1:bb:78:99:a9:d3:62:f1:ac:bc:
30:6b:f6:23:79:d5:71:4f:7d:10:0f:05:ce:2d:b4:
0b:59:26:06:cd:d9:c2:f0:65:2c:44:90:e7:06:4e:
31:b5:0d:88:5e:e1:c4:1a:9b:f0:19:1c:45:78:44:
1d:75:8e:54:9f:48:40:7c:56:b0:11:3c:8d:d5:21:
79:2d:8e:f6:b5:4a:e0:d5:44:28:f9:4f:1c:e2:d2:
6a:8d:b0:b4:86:ac:64:fe:a7:95:af:d1:47:f3:39:
ab:db:b8:42:79:0d:b7:db:65:59:3a:63:01:43:2e:
6f:65:39:af:33:c7:5d:35:95:da:aa:13:08:e1:ef:
3c:82:0d:12:e2:65:07:99:fa:9a:e6:e8:f4:e0:14:
bb:3c:5c:bd:56:5b:ea:4e:43:d9:ee:10:84:b9:8a:
d8:f4:8f:ec:88:78:58:cf:bf:3d:4c:98:a2:ea:5b:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:05:B5:19:24:B1:88:BF:D7:F8:2A:1B:2F:57:B0:A9:87:3B:6A
X509v3 Authority Key Identifier:
keyid:88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:dc:80:d1:1e:5b:4d:56:5a:a7:63:50:8d:25:8d:61:77:00:
78:e2:22:a8:67:49:9f:80:6f:52:87:f4:e4:0b:eb:29:75:1c:
15:5b:1b:8f:a7:c1:2a:ec:be:48:27:8b:cf:e3:84:29:46:c5:
d3:fc:d2:c3:87:8c:c7:ac:6c:95:0c:fe:0f:ef:81:6e:45:16:
0a:cd:02:21:b5:b5:15:dc:b4:98:87:cc:1e:fa:bc:2d:83:f5:
e7:30:1d:88:24:dc:aa:92:f0:ce:2e:69:56:28:f0:c0:6f:3c:
d6:be:7d:67:93:8c:f7:5c:95:dd:29:a1:d3:63:b3:f3:a6:81:
3e:0f:3c:82:56:06:ae:20:7e:53:05:c0:ae:ca:39:e9:02:6a:
5c:46:c9:f6:74:ea:88:40:5f:09:7e:8b:10:6f:fe:7d:88:5b:
3d:0e:59:49:4b:a2:41:e0:1f:69:2e:ef:ac:86:8d:29:44:47:
9e:c6:2f:10:66:ed:c5:09:3e:46:a9:ea:13:ee:97:1a:79:db:
69:d5:9d:7f:41:1c:8e:f8:f4:1b:d6:45:a3:0a:4d:32:ea:f2:
47:6f:ae:d1:b0:fd:9e:2b:ba:83:39:21:4e:3c:89:57:4e:e7:
f3:4f:69:d8:0c:1f:85:f9:e1:2e:e7:2b:e3:08:eb:38:f5:69:
94:83:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:46:27 2025 by rpki-client