Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: LmLf7f7Z2aHcWdHDz0uxSASuDI1Wbw+cZnam4ewbshY=
Subject key identifier: 66:6F:D5:2B:B0:43:94:FB:72:8B:47:9E:5A:AC:AA:42:0F:87:A3:23
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 0652
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 0652
Signing time: Fri 31 Jan 2025 01:31:29 +0000
Manifest this update: Fri 31 Jan 2025 01:31:29 +0000
Manifest next update: Sun 02 Feb 2025 01:31:29 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: EuOHdLHiPZgHtap+p57XXr7XLMYenvxnULei4pOS3wQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: Jan 31 01:31:29 2025 GMT
Not After : Feb 2 01:31:29 2025 GMT
Subject: CN=679c27f1-9dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:8e:d5:58:a2:5b:f9:a3:7d:41:4d:0e:50:
79:db:67:3f:2b:49:3a:d3:96:a4:b5:18:3c:99:bc:
09:29:d5:01:99:a0:49:6a:5a:96:3c:f3:64:34:c0:
3f:80:f8:ef:3d:65:63:8f:1b:50:a2:0f:02:14:a5:
4e:c9:76:ce:f5:2e:e0:f6:ec:65:b3:46:ca:72:32:
72:f2:e4:68:79:be:2c:76:09:df:36:58:b6:e5:a6:
15:10:f5:8e:c5:7f:14:52:4b:bc:60:a9:da:23:d1:
e9:a8:5c:1e:bb:83:fc:0c:0f:e6:bc:df:e0:6e:68:
03:36:a3:e9:d9:da:af:d3:ec:67:cb:f6:05:32:2e:
96:a3:66:ab:42:0e:a0:36:2a:91:80:10:1a:f0:af:
44:ed:5e:01:e8:b7:5c:d4:14:d7:15:ae:fc:b6:a8:
f0:82:52:b7:da:8b:86:2c:52:dd:38:86:29:8b:0a:
15:c8:38:3b:17:83:6b:9b:a2:38:1c:7f:98:6b:8e:
22:7c:ac:a8:9e:8a:36:b8:c5:75:a8:41:78:b2:bb:
a6:cc:90:f1:6b:0a:37:0d:01:57:57:c6:c7:91:ea:
d7:8b:5b:0e:bd:dd:cf:60:4f:f1:23:b5:b5:a1:38:
ee:54:91:ed:1e:fe:25:ba:7c:93:23:c2:fe:6d:85:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6F:D5:2B:B0:43:94:FB:72:8B:47:9E:5A:AC:AA:42:0F:87:A3:23
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:33:a9:4d:36:69:cc:2a:1d:cc:84:0f:e7:d4:b8:9d:ce:a2:
e1:d1:2b:8b:01:6a:c8:d2:dd:bd:56:09:e7:ca:85:ff:51:a5:
f9:c9:e6:54:1c:3d:4c:d4:f7:13:83:0e:cb:93:c9:5f:7b:04:
b8:78:b0:21:14:85:bc:68:4b:ad:06:7d:56:dc:6f:42:c7:5b:
23:02:5f:4d:18:14:96:43:62:d9:70:e5:ba:9a:a4:86:ab:26:
0f:6c:46:19:0d:61:e1:06:94:b4:b3:75:87:00:8a:e0:ae:fa:
e2:30:e7:d6:54:4a:e8:0f:ed:fc:84:2f:70:95:7d:f2:dd:fd:
6e:40:fd:23:82:a3:7d:62:93:61:35:26:d0:b1:3a:fd:fa:29:
5c:d7:36:da:66:00:39:45:36:33:67:94:e6:9b:ae:61:dc:9f:
9a:cb:31:80:74:2a:99:93:b1:68:bb:4f:b9:b6:79:67:d2:89:
6f:6b:60:f8:97:5d:a2:d0:e7:1f:bb:57:00:d3:5d:bd:b1:16:
37:0c:3c:6d:a2:41:fe:38:cb:29:94:36:f1:6c:46:62:0a:95:
94:ab:84:62:10:e9:b6:0c:49:4a:d3:15:3b:6d:44:28:8b:f5:
80:fe:6c:81:a2:e2:43:8e:43:9d:d3:e5:fb:50:d3:f2:d2:1a:
84:8c:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:45 2025 by rpki-client