Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier: A9DxIZzl24sJVDxmg8XLa+1L0mQrLt71UiwPXlbD+1M=
Subject key identifier: 70:40:5E:CD:81:BA:18:15:1F:3B:52:4B:59:A9:E7:A6:98:21:0F:F4
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 03A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number: 0397
Signing time: Fri 31 Jan 2025 02:12:44 +0000
Manifest this update: Fri 31 Jan 2025 02:12:44 +0000
Manifest next update: Sun 02 Feb 2025 02:12:44 +0000
Files and hashes: 1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: NH30SiGygqGTYOPe+Cw2C5UvO7ReDfNnyPXcJXxQGlE=)
2: 68F04452BF2E11EEB8BC67B5775412E6.roa (hash: UaIFMI+EAxlvctjyv1TCRjt/oHPIwIYRacpeQ9D+Rvc=)
3: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
4: 18EDE088BF6311EE99EADF92775412E6.roa (hash: DMAyg/1TpBA37dpUkOJbmTQhKfDvssYWs4tQ4EWAWxY=)
5: 14D14DF4BC1211EE9F256B8C775412E6.roa (hash: G0rVIWv0ZhhjYOQXOO/y9xbORs3FLthAc8WqD626SHI=)
6: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
7: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Jan 31 02:12:44 2025 GMT
Not After : Feb 2 02:12:44 2025 GMT
Subject: CN=679c319c-bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a9:e2:df:76:4c:c7:d1:7c:44:8a:b1:14:93:
c2:a9:fd:4c:98:10:62:60:ba:a9:5e:f5:8f:69:50:
50:ef:81:51:7c:d9:92:3d:c9:8e:e9:22:19:cf:58:
fe:43:06:ed:f0:fe:ca:bd:d0:b7:10:f1:20:0f:ba:
f5:d2:f3:22:3e:16:b7:32:37:60:0d:c9:f3:e3:6a:
a8:6f:bc:f4:9e:e6:d3:cc:6e:eb:89:8c:42:08:3c:
62:31:f8:3f:da:d6:b8:5e:d1:8b:bb:c0:5d:59:f8:
9e:47:63:9b:cb:90:b2:92:12:62:43:cc:f2:16:6e:
a2:82:f8:03:24:3a:dc:c8:2e:0b:ee:20:23:86:de:
cb:53:44:c2:3c:ff:c8:3a:02:b0:02:83:f9:2e:00:
a5:a1:97:35:9a:12:31:36:4c:73:46:f9:34:45:e4:
b5:3f:37:b2:e7:d5:43:a8:4d:20:d6:a7:71:ab:de:
32:c4:57:ad:96:6c:5f:70:62:94:fe:da:ee:56:96:
bb:1f:80:95:d4:65:df:de:e5:c9:c1:e5:2a:5f:44:
32:de:bb:32:0f:f0:40:27:e8:d6:ee:1f:c5:ba:00:
f5:24:29:62:6a:3e:8d:f9:a8:c5:cd:ba:5a:b4:31:
be:7c:54:e3:3a:b3:17:0b:59:b9:fe:07:77:c2:ed:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:5E:CD:81:BA:18:15:1F:3B:52:4B:59:A9:E7:A6:98:21:0F:F4
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:9d:4d:06:c1:5c:f6:19:0c:bb:e5:12:af:f1:6d:e0:21:57:
c9:fe:e7:7b:6c:24:2c:0d:ae:b9:88:b8:e4:f5:85:10:fe:04:
d0:26:9d:33:ac:86:56:74:79:ea:23:f0:d2:b3:4e:98:9a:43:
b3:98:7b:19:25:d5:8a:f8:f7:7d:36:e6:68:9a:07:5f:39:b4:
b7:3c:ca:8b:07:26:9f:d3:ef:cf:59:3e:1a:5f:d7:d4:0e:0e:
35:26:1b:8d:63:45:95:93:8a:86:8a:98:7c:7b:78:85:82:bc:
b5:44:6a:e4:da:6f:b4:d3:38:fb:52:30:8d:59:b0:cd:e5:59:
7a:94:4e:b0:2b:ed:9e:6d:36:fb:59:26:71:91:de:06:f5:13:
32:42:52:5f:de:55:7c:72:86:c9:21:b2:5b:ab:2c:d5:ff:42:
fe:14:bb:ff:f4:a3:c9:a6:d8:7c:33:bd:90:f8:d8:a5:b9:23:
e7:0d:4b:93:cf:79:34:26:f2:10:14:a2:43:9d:4c:de:13:eb:
e7:b4:fe:f0:2f:2d:3a:0b:ee:93:2f:fb:6a:7a:60:31:fe:1a:
03:28:d1:1e:e5:bc:5e:65:e9:f4:52:96:1d:8c:a3:d9:39:3d:
53:4d:05:8d:5d:ed:c6:67:ae:fa:a5:dc:f2:b2:4c:b9:74:4b:
d4:a1:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:12 2025 by rpki-client