Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File: xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier: m1mzNRcf82PA9Iz2l2ILdSd8WtDLldCnU3XZQP2xkf0=
Subject key identifier: B2:30:60:3E:99:22:DB:A6:AE:AC:67:39:E9:5A:2A:C3:43:63:44:4B
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer: /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial: 041A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number: 041A
Signing time: Fri 31 Jan 2025 02:01:23 +0000
Manifest this update: Fri 31 Jan 2025 02:01:23 +0000
Manifest next update: Sun 02 Feb 2025 02:01:23 +0000
Files and hashes: 1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: 7/SIY4MEklITtBIWDknUpwfNoo/VPSj0RuSBPZxanwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Validity
Not Before: Jan 31 02:01:23 2025 GMT
Not After : Feb 2 02:01:23 2025 GMT
Subject: CN=679c2ef3-b648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:d8:6e:b0:cb:f3:c6:f7:c2:6a:19:d5:3c:
24:27:fb:8f:74:04:35:fa:86:56:da:60:d3:93:8b:
d7:72:03:52:71:65:cb:0e:82:cb:6d:a9:0c:6b:d2:
67:2b:cf:6c:2d:9b:d2:05:38:16:1e:2a:67:31:2a:
77:02:4f:e8:cd:d7:9d:4a:40:01:7b:11:ec:a8:00:
d6:92:bc:94:68:1b:06:1b:96:48:ac:88:4c:97:95:
9b:dd:72:22:11:63:aa:0c:01:f4:6c:ae:37:4b:bc:
07:a2:28:91:8c:cb:23:d4:14:3a:17:ee:61:f5:23:
27:00:43:c9:80:91:7c:80:7d:4a:cc:92:87:dc:4f:
0a:0c:fc:5e:88:6a:05:32:4c:ae:38:40:95:43:80:
b7:78:b7:14:41:00:c3:04:54:64:6f:05:c1:08:80:
c1:89:59:de:66:19:c0:22:dd:17:52:90:09:7c:1c:
c4:fc:6c:ea:7c:d7:de:4c:ec:93:87:b8:f0:63:af:
1c:f4:9a:13:95:0a:4a:f9:f5:67:44:1c:46:97:c5:
1b:c4:da:df:7a:43:81:8e:54:b5:d6:29:4a:3d:6e:
d4:5b:12:4b:19:ba:88:4f:00:42:44:97:04:86:58:
63:58:95:60:71:36:35:31:9b:6f:24:12:0f:c7:3d:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:60:3E:99:22:DB:A6:AE:AC:67:39:E9:5A:2A:C3:43:63:44:4B
X509v3 Authority Key Identifier:
keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:1a:5b:2e:9a:ba:57:3b:b8:83:a0:0d:48:7a:7a:23:61:5e:
06:0b:7a:4a:19:4c:84:35:3c:f1:7d:d9:28:1d:76:c2:d9:d5:
a6:bd:de:8c:4f:98:8d:e4:e3:93:95:f8:c9:7a:d4:32:6f:7c:
0e:b6:02:be:7d:f7:bd:f9:0d:6f:e0:47:ef:7b:4e:f5:5c:71:
9c:bc:aa:d8:93:d4:f9:80:2c:d8:db:9e:11:e6:35:1b:72:18:
2e:4e:54:c5:32:22:a8:eb:1c:ba:ca:14:01:94:a4:e5:92:75:
7f:2b:da:a4:68:d8:cc:f6:00:e3:71:bb:9f:e7:d7:29:c9:bd:
f1:ee:ff:3e:72:55:27:e7:bc:bd:7f:6c:69:83:cf:f9:d9:ff:
83:10:bb:30:d2:40:fb:1c:df:1f:89:c8:9a:2c:5b:87:46:d8:
64:42:41:df:84:fd:25:f5:a6:97:36:14:e5:7e:5b:8e:4b:d2:
43:e6:31:85:02:dc:61:33:a0:42:db:fe:83:11:1c:ea:18:ec:
f7:34:3c:57:dc:86:6f:03:6f:1a:e0:55:61:a8:f7:33:34:8d:
bc:0f:18:ff:7b:cb:15:41:f2:e8:e7:82:91:e5:c3:a4:2b:1d:
e0:47:2b:7d:2b:57:5f:ea:0c:d1:cf:91:bf:a4:a7:56:92:b7:
74:8f:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:54:04 2025 by rpki-client