Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier: c2AvQsJCzy4AcOhEXYrqzMGNTPooo7Tbuf1icc1HhyQ=
Subject key identifier: 53:0C:BD:6C:F9:D1:0A:DD:1C:70:86:FC:B6:C3:CF:0F:8A:CF:F1:70
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer: /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial: 036D
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number: 036C
Signing time: Fri 31 Jan 2025 02:14:26 +0000
Manifest this update: Fri 31 Jan 2025 02:14:26 +0000
Manifest next update: Sun 02 Feb 2025 02:14:26 +0000
Files and hashes: 1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: HBWpwmm81ZCR3NC2xnZj9hsMGRMwZn5vUeph+KdbGlY=)
2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Validity
Not Before: Jan 31 02:14:26 2025 GMT
Not After : Feb 2 02:14:26 2025 GMT
Subject: CN=679c3202-7f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:00:f2:f0:9b:56:e4:a4:85:1b:1c:d9:dd:
a1:27:d5:ab:8a:e9:f6:92:87:75:8c:ff:94:8b:85:
a8:99:38:84:67:80:92:f4:46:4d:a2:52:ed:5a:51:
5a:64:4f:3a:15:0b:11:d2:bf:35:79:55:6a:35:76:
1e:1f:e0:95:fa:4b:5f:50:ab:66:d1:ce:10:be:af:
08:ee:52:17:9d:03:78:6e:71:52:1c:b6:6e:78:43:
e3:85:9c:88:fc:6b:f9:e0:3b:bb:48:14:dc:64:65:
5a:23:39:f1:5f:58:6c:81:de:5e:d2:a1:f5:c7:db:
84:df:ae:1e:7b:0c:98:4c:13:a3:c3:27:a2:14:44:
eb:6f:d4:b9:65:bc:e4:e1:1f:d3:75:c4:77:db:84:
d1:50:ba:dc:5c:76:e2:f4:09:89:36:ad:06:76:75:
c4:16:8a:61:98:1d:f1:71:cc:a0:7a:d2:87:77:1e:
aa:09:b3:87:04:87:93:7a:6b:b3:55:28:4b:d5:ba:
79:fc:67:9c:c4:90:19:40:2d:26:39:c1:28:a6:b2:
a7:3b:d4:79:cf:b3:20:8a:ca:08:9b:a5:80:7a:41:
e2:42:80:66:54:db:27:ea:26:8c:01:9a:8a:bb:ee:
15:f8:44:ec:a7:b0:64:39:c6:fa:7f:fc:07:d7:77:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:BD:6C:F9:D1:0A:DD:1C:70:86:FC:B6:C3:CF:0F:8A:CF:F1:70
X509v3 Authority Key Identifier:
keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:c1:fa:b8:93:fa:89:ec:ab:a0:1f:e6:2f:d1:21:51:ea:
70:40:63:b9:bc:1c:dc:f5:81:44:20:aa:41:9c:65:17:4a:6e:
11:c7:e0:a5:25:84:33:1e:c1:ec:db:89:c3:49:d8:ec:48:a9:
b9:e1:f4:8b:7d:3b:87:8e:0d:8a:96:83:f5:20:f1:e5:2a:ed:
99:24:e0:1d:97:65:75:b2:7d:26:1c:63:97:f6:d7:f4:09:b1:
34:d9:94:14:b2:df:67:f8:15:c5:86:52:15:7e:b4:4e:43:25:
ac:74:c3:b2:d2:8e:d7:55:7b:c3:a3:34:1a:5e:fb:fc:58:39:
22:84:a9:7b:8d:9f:aa:48:6c:d3:a2:57:00:08:ee:2f:76:32:
bb:61:cb:26:75:ef:b0:48:67:3a:a2:93:31:d6:82:ad:f1:45:
68:a2:02:6a:19:00:3c:41:eb:77:b7:85:c7:8f:3b:50:00:8e:
bb:36:ad:42:62:b9:c0:14:27:cc:52:f4:a0:20:a9:bc:d9:89:
62:2b:4a:ee:45:bc:b5:92:6e:41:01:81:3d:17:c5:5c:c8:57:
ce:b2:4d:13:34:82:ff:00:45:1f:05:12:ed:a4:ad:48:d4:e9:
f2:18:27:48:32:36:e6:e4:2d:ff:4a:43:a7:80:76:ba:67:4e:
33:c7:11:52
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA20wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzIxNTlBUjExMC8GA1UEBRMoNjcyMUExOTJGQ0ZEMjYxQTc3QzFDRERDNDc4OTFD
NzgxNEZBQzc3NzAeFw0yNTAxMzEwMjE0MjZaFw0yNTAyMDIwMjE0MjZaMBgxFjAU
BgNVBAMTDTY3OWMzMjAyLTdmMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8gQDy8JtW5KSFGxzZ3aEn1auK6faSh3WM/5SLhaiZOIRngJL0Rk2iUu1a
UVpkTzoVCxHSvzV5VWo1dh4f4JX6S19Qq2bRzhC+rwjuUhedA3hucVIctm54Q+OF
nIj8a/ngO7tIFNxkZVojOfFfWGyB3l7SofXH24Tfrh57DJhME6PDJ6IUROtv1Lll
vOThH9N1xHfbhNFQutxcduL0CYk2rQZ2dcQWimGYHfFxzKB60od3HqoJs4cEh5N6
a7NVKEvVunn8Z5zEkBlALSY5wSimsqc71HnPsyCKygibpYB6QeJCgGZU2yfqJowB
moq77hX4ROynsGQ5xvp//AfXdx0PAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUUwy9
bPnRCt0ccIb8tsPPD4rP8XAwHwYDVR0jBBgwFoAUZyGhkvz9Jhp3wc3cR4kceBT6
x3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyMTU5LzhBMEE1QUU4NEFCQzExRURBQ0ZEMzE4NEYxMjIyNDY4L1p5R2hr
dno5SmhwM3djM2NSNGtjZUJUNngzYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1p5R2hrdno5SmhwM3djM2NSNGtjZUJUNngzYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzIxNTkvOEEwQTVBRTg0QUJDMTFFREFDRkQzMTg0RjEyMjI0
NjgvWnlHaGt2ejlKaHAzd2MzY1I0a2NlQlQ2eDNjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZe8H6uJP6ieyroB/mL9EhUepwQGO5vBzc
9YFEIKpBnGUXSm4Rx+ClJYQzHsHs24nDSdjsSKm54fSLfTuHjg2KloP1IPHlKu2Z
JOAdl2V1sn0mHGOX9tf0CbE02ZQUst9n+BXFhlIVfrROQyWsdMOy0o7XVXvDozQa
Xvv8WDkihKl7jZ+qSGzTolcACO4vdjK7Ycsmde+wSGc6opMx1oKt8UVoogJqGQA8
Qet3t4XHjztQAI67Nq1CYrnAFCfMUvSgIKm82YliK0ruRby1km5BAYE9F8VcyFfO
sk0TNIL/AEUfBRLtpK1I1OnyGCdIMjbm5C3/SkOngHa6Z04zxxFS
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:03 2025 by rpki-client