Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File: zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier: ViECfoDz3Foa1FPy35kX2igUFMQKxf0lcPuROyuSD2w=
Subject key identifier: DF:3D:F4:E1:F8:8C:94:F5:85:45:E9:AA:E9:AF:D4:86:60:B9:93:A5
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer: /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial: 06A9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number: 06A6
Signing time: Fri 31 Jan 2025 01:30:22 +0000
Manifest this update: Fri 31 Jan 2025 01:30:21 +0000
Manifest next update: Sun 02 Feb 2025 01:30:21 +0000
Files and hashes: 1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: Jo9R6J6NbvCIZPQ8paktWLZjE+xDnUj/BRTk1y6zQpo=)
2: E27073C0F1C111EB9AE36071D8A014CE.roa (hash: y0Q3Frj55z+tecyGPqJPk0LP5+vSEULCrL6Cm5KqQeE=)
3: 6CB087F0CD7E11EA9E3A5845F8AEA228.roa (hash: rBsld+QOBW/CrzRT0eM+UJTuXYzPefxB5jKhtvGTg/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705 (0x6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Validity
Not Before: Jan 31 01:30:21 2025 GMT
Not After : Feb 2 01:30:21 2025 GMT
Subject: CN=679c27ae-85a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:27:ef:ba:7f:21:1e:c2:a0:89:64:d3:d9:
22:c7:f3:b8:44:d2:c9:92:f6:a4:60:8f:ef:56:ec:
ce:bb:3b:12:5b:8d:f6:f7:b0:2e:3c:be:27:64:22:
a0:f0:95:a2:b5:13:2a:2a:33:78:a3:c4:37:8d:79:
cf:5c:9e:fa:d2:b5:9c:27:74:4d:78:a1:9b:ff:89:
07:30:5f:9e:88:c8:56:aa:94:e9:ba:e3:21:e3:26:
b1:ee:c4:d4:4e:00:50:52:fe:99:d7:fb:c6:93:bc:
c5:8d:26:f3:10:08:8c:1b:6d:e6:51:62:8f:c2:79:
3d:05:97:b5:0f:e3:90:d6:6b:70:62:4f:f1:be:37:
32:23:df:79:0b:6e:c4:4c:29:4e:f7:fa:c9:b0:b9:
2e:eb:e2:66:6a:ee:2f:b0:ff:d2:96:30:6c:ff:c9:
a2:bb:c7:31:07:c1:c9:ba:b4:81:12:c2:a4:82:5e:
79:33:09:00:f1:28:d1:f6:94:5c:f2:f6:fa:df:89:
2e:cd:85:c0:a4:be:e7:cc:7e:58:22:52:69:17:1b:
2e:3b:24:70:36:2c:b5:c9:b1:00:10:9b:ad:e5:8f:
8c:96:07:d2:8f:c8:02:91:88:76:45:08:7a:70:a7:
4e:6a:8d:d3:cb:f6:b9:94:50:6e:87:b6:e6:1c:8b:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:F4:E1:F8:8C:94:F5:85:45:E9:AA:E9:AF:D4:86:60:B9:93:A5
X509v3 Authority Key Identifier:
keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:ec:0d:de:c6:2e:60:55:8d:56:d5:dc:a4:80:ed:ce:b3:90:
41:71:99:68:cc:eb:b9:b3:d8:37:2b:d7:46:43:52:26:36:db:
c3:6f:c2:99:68:d7:81:5b:6b:5a:49:1f:58:3f:7c:3d:39:82:
20:90:8d:33:1b:cf:bd:98:cf:99:1e:71:cd:b3:d0:5a:52:45:
47:2b:03:1e:a8:14:2e:74:83:51:e8:1a:11:0f:7a:c2:12:9c:
d2:41:3d:4b:9a:0a:5a:7d:75:7a:ad:8c:a7:6e:d4:ea:77:58:
58:29:13:19:f3:ed:75:d2:ab:00:0f:53:d3:2b:cd:d6:1a:77:
38:5d:18:36:7d:9c:3d:d0:c1:4f:0c:75:51:f4:3b:c8:32:32:
b3:4f:73:e3:65:b8:9d:5f:5b:1a:78:0f:f0:c7:36:1b:4e:f4:
2b:d1:a1:b4:e5:e3:42:7a:3d:81:a2:a8:95:42:84:87:be:1b:
bd:e0:e3:0f:a5:be:4d:be:5e:8d:58:ac:37:bf:0c:25:95:cc:
c1:ed:be:53:18:1f:b4:9c:0c:7b:fe:99:59:04:c1:e2:3e:6c:
08:7b:f6:11:dc:23:27:18:73:96:0a:c2:93:df:c0:1f:09:ee:
7e:ed:49:a6:30:d7:69:5a:a0:16:f4:cc:48:b3:fe:d1:d3:f8:
cf:d1:ee:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:26 2025 by rpki-client