
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File: cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier: uWZ6myZNgu6NvVgmF18dnQLWCjIGR+VnheoC/jQz+XM=
Subject key identifier: FB:FD:59:20:F8:14:BA:15:A8:FD:1C:54:F0:48:24:02:EF:4B:E1:2C
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer: /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial: 05AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number: 05A7
Signing time: Fri 31 Jan 2025 01:38:26 +0000
Manifest this update: Fri 31 Jan 2025 01:38:25 +0000
Manifest next update: Sun 02 Feb 2025 01:38:25 +0000
Files and hashes: 1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: Kj7/A4TXk+Eb2IrlqMQq5xespnbZDkevYjR/YjDrySU=)
2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450 (0x5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Validity
Not Before: Jan 31 01:38:25 2025 GMT
Not After : Feb 2 01:38:25 2025 GMT
Subject: CN=679c2992-ccfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:87:c3:09:35:db:1a:6a:77:ac:5b:da:32:
0e:1d:d8:1e:1d:11:5c:b7:f6:2b:45:95:07:d6:dc:
30:df:83:5d:30:63:0b:b7:bf:51:40:43:0f:64:70:
7f:95:18:87:de:01:00:79:d6:58:ec:7a:d4:1f:a5:
fc:fd:1e:aa:d4:ec:24:f6:71:d6:9b:71:4e:88:29:
14:f8:9c:13:6d:2d:85:0b:79:2c:13:19:61:1a:8c:
d2:80:0a:6c:5a:a5:70:e3:52:41:3c:59:59:7d:6d:
8c:37:97:d1:90:30:ef:48:c6:57:9a:07:38:71:08:
97:fa:92:f7:76:dc:b0:7f:66:1d:6b:ca:d3:bc:23:
70:60:b3:52:3f:e4:a4:02:42:06:9b:c1:5e:5e:99:
3c:3b:66:1f:54:5e:91:7d:98:a7:43:cd:94:3e:a2:
21:dd:b8:56:52:c7:b8:c8:f2:da:65:4f:be:20:a9:
18:22:8f:cd:be:c4:1f:de:90:1f:2c:23:e5:79:6f:
eb:5a:01:f1:6a:67:3b:89:5b:d9:a3:9e:f6:7e:db:
00:4d:96:8b:09:5b:77:ba:e3:ff:f9:be:de:58:ff:
11:2f:b1:40:93:93:a6:ba:45:c8:84:74:07:4d:fc:
3e:ee:3c:68:f9:13:90:25:6d:64:06:f1:72:6f:54:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:59:20:F8:14:BA:15:A8:FD:1C:54:F0:48:24:02:EF:4B:E1:2C
X509v3 Authority Key Identifier:
keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:87:b6:03:f9:bd:4d:93:06:69:c9:7f:01:9f:42:41:cc:a3:
cb:9b:b1:c1:4a:7a:d8:83:2f:63:f2:63:46:5a:28:48:67:6c:
8b:f1:2b:da:54:7d:16:5c:9e:8f:f3:e2:2e:ee:82:51:f5:8f:
de:80:91:95:4e:05:75:3b:e5:a3:80:1b:0c:8e:16:0c:52:0d:
38:86:74:94:50:54:8b:1e:f7:d2:1a:95:55:b5:5a:2f:fa:78:
a3:77:02:35:34:7d:c5:eb:0b:5f:ce:be:de:de:d2:d4:88:e5:
b6:eb:f8:b8:28:1c:4b:01:ea:b6:16:07:e9:43:10:6d:3a:e6:
35:b5:65:d8:17:9d:7f:e4:73:18:e2:6c:1f:93:8d:67:56:f1:
51:47:a2:1d:08:a3:8a:c4:d0:75:c5:14:2f:c6:1e:d0:a0:97:
55:ba:47:2d:33:b7:60:dc:81:69:a4:89:a6:26:66:b4:c5:78:
2d:fc:20:4e:31:ec:ee:39:60:a8:7e:00:ee:c3:cd:51:8f:34:
56:fa:75:6f:d1:4a:60:4e:f2:d5:2b:73:48:ad:16:e6:6c:6f:
5a:58:f6:68:77:b0:b3:9e:4e:0d:6a:08:3e:86:f6:cf:70:bd:
b9:64:35:82:68:53:c2:08:ba:75:9f:3f:22:0c:df:d6:9f:94:
53:91:8d:b9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBaowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUVBRjExMC8GA1UEBRMoNzA3QTFGMjg2QUUyOTg2REY2NDkxMEMzMDM0RTUx
ODlBN0MyMTZERDAeFw0yNTAxMzEwMTM4MjVaFw0yNTAyMDIwMTM4MjVaMBgxFjAU
BgNVBAMTDTY3OWMyOTkyLWNjZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8hofDCTXbGmp3rFvaMg4d2B4dEVy39itFlQfW3DDfg10wYwu3v1FAQw9k
cH+VGIfeAQB51ljsetQfpfz9HqrU7CT2cdabcU6IKRT4nBNtLYULeSwTGWEajNKA
CmxapXDjUkE8WVl9bYw3l9GQMO9IxleaBzhxCJf6kvd23LB/Zh1rytO8I3Bgs1I/
5KQCQgabwV5emTw7Zh9UXpF9mKdDzZQ+oiHduFZSx7jI8tplT74gqRgij82+xB/e
kB8sI+V5b+taAfFqZzuJW9mjnvZ+2wBNlosJW3e64//5vt5Y/xEvsUCTk6a6RciE
dAdN/D7uPGj5E5AlbWQG8XJvVJFVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+/1Z
IPgUuhWo/RxU8EgkAu9L4SwwHwYDVR0jBBgwFoAUcHofKGrimG32SRDDA05RiafC
Ft0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFFL0Y3MUU3NjU0OTcwNDExRUJCOTM2MzczMEY4QUVBMjI4L2NIb2ZL
R3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NIb2ZLR3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhB
RUEyMjgvY0hvZktHcmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkh7YD+b1NkwZpyX8Bn0JBzKPLm7HB
SnrYgy9j8mNGWihIZ2yL8SvaVH0WXJ6P8+Iu7oJR9Y/egJGVTgV1O+WjgBsMjhYM
Ug04hnSUUFSLHvfSGpVVtVov+nijdwI1NH3F6wtfzr7e3tLUiOW26/i4KBxLAeq2
FgfpQxBtOuY1tWXYF51/5HMY4mwfk41nVvFRR6IdCKOKxNB1xRQvxh7QoJdVukct
M7dg3IFppImmJma0xXgt/CBOMezuOWCofgDuw81RjzRW+nVv0UpgTvLVK3NIrRbm
bG9aWPZod7Cznk4Nagg+hvbPcL25ZDWCaFPCCLp1nz8iDN/Wn5RTkY25
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:24:10 2025 by rpki-client