Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
File: h-G7jI0reZLqTr7rMz_hQp5w7po.mft (raw, json)
Hash identifier: hyIkOzW/FOvmBl7Qn81H7506vz3L1EDakICAuoJk5B0=
Subject key identifier: 62:24:4C:78:35:5F:81:7F:B8:19:DF:49:30:86:2D:BF:3F:92:53:54
Authority key identifier: 87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
Certificate issuer: /CN=F3646FFEAF/serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Certificate serial: 042E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
Manifest number: 042E
Signing time: Fri 31 Jan 2025 02:00:39 +0000
Manifest this update: Fri 31 Jan 2025 02:00:38 +0000
Manifest next update: Sun 02 Feb 2025 02:00:38 +0000
Files and hashes: 1: h-G7jI0reZLqTr7rMz_hQp5w7po.crl (hash: FS7d0wqjYPHh3hhMEHe9UwrJ5b9DSHNDD//ndzmup6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070 (0x42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646FFEAF/serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Validity
Not Before: Jan 31 02:00:38 2025 GMT
Not After : Feb 2 02:00:38 2025 GMT
Subject: CN=679c2ec7-c477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:01:c9:84:a6:ef:ef:60:53:6c:8e:e3:db:
92:35:95:ce:76:e8:f9:f2:ba:7b:85:da:3b:b1:10:
e9:26:bb:df:19:09:60:80:23:27:37:f5:65:16:80:
86:16:59:58:0c:29:6a:c9:b1:84:a9:29:12:59:74:
95:aa:2c:b6:3a:aa:3b:12:76:b3:df:bb:a8:ba:00:
e5:76:6f:e7:7b:95:31:06:41:18:0c:b4:e7:14:a2:
9e:c6:66:34:f0:37:13:1d:d9:33:26:6a:9b:53:d5:
dc:2e:52:ea:8a:38:8f:d6:b8:33:54:04:a0:cd:5e:
59:fc:0a:e6:fd:c7:48:f6:b6:48:fc:bf:18:db:8d:
20:bf:08:bf:a7:e0:64:b5:b2:de:78:a8:50:3e:32:
93:52:ff:14:a3:0b:92:21:f3:49:46:4b:81:9c:20:
39:47:c1:10:8c:c1:54:e7:67:f5:31:b3:98:b4:ed:
3f:d8:9d:c6:79:a8:c6:cd:92:6e:60:0b:ac:fe:dc:
11:11:95:2c:c6:7c:3d:a9:f3:75:ba:18:43:d7:11:
37:1d:9b:5a:12:8b:9f:0a:e5:8c:fd:62:8f:48:e8:
ab:3b:fe:d9:61:b8:d2:db:41:d2:f1:0c:00:29:e2:
42:e3:b9:d7:89:8b:95:20:8f:c6:30:37:4e:ef:35:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:4C:78:35:5F:81:7F:B8:19:DF:49:30:86:2D:BF:3F:92:53:54
X509v3 Authority Key Identifier:
keyid:87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b4:d5:86:d9:57:48:b9:3e:9a:cd:5c:c2:de:53:2e:d8:3f:
3b:ae:43:b9:47:cf:87:c9:a7:17:45:55:b4:d3:64:dc:4a:9d:
d6:ce:fe:2a:cb:42:1b:de:3f:c0:d0:d9:ed:d0:b5:de:03:91:
4c:a1:4a:34:c7:1f:02:d4:cf:28:ea:35:dd:f8:f8:0d:80:a1:
f7:8e:a2:7d:9f:92:87:f3:79:9f:65:ee:6f:fc:1a:f5:ce:7a:
c8:73:61:d3:91:2f:ef:29:77:0d:a6:cf:38:3d:7f:ee:97:aa:
d3:c0:1c:5e:18:e5:db:93:fa:39:bf:92:35:6d:c8:e6:e1:fc:
0a:3b:48:7c:02:a8:11:0a:af:41:b6:d5:8b:0c:8e:04:4b:89:
11:c8:42:10:a5:5a:24:a6:9d:7b:82:41:07:dc:25:ca:11:e7:
53:af:5f:15:f4:56:a3:19:7a:2f:63:db:5a:a4:94:5d:b7:8e:
16:d2:a2:d9:59:fa:de:8d:8e:c9:db:f3:7c:d3:67:e3:be:75:
56:fc:bc:ee:47:e0:91:a9:19:34:0d:a0:56:00:ed:21:bf:66:
65:92:89:b5:db:6a:4e:c9:4d:b6:de:70:6d:6f:db:7c:b2:16:
10:95:72:c1:ea:94:9c:6a:26:a3:a1:d7:b7:b5:ca:b2:4d:e1:
0a:52:47:58
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDZGRkVBRjExMC8GA1UEBRMoODdFMUJCOEM4RDJCNzk5MkVBNEVCRUVCMzMzRkUx
NDI5RTcwRUU5QTAeFw0yNTAxMzEwMjAwMzhaFw0yNTAyMDIwMjAwMzhaMBgxFjAU
BgNVBAMTDTY3OWMyZWM3LWM0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYjgHJhKbv72BTbI7j25I1lc526PnyunuF2juxEOkmu98ZCWCAIyc39WUW
gIYWWVgMKWrJsYSpKRJZdJWqLLY6qjsSdrPfu6i6AOV2b+d7lTEGQRgMtOcUop7G
ZjTwNxMd2TMmaptT1dwuUuqKOI/WuDNUBKDNXln8Cub9x0j2tkj8vxjbjSC/CL+n
4GS1st54qFA+MpNS/xSjC5Ih80lGS4GcIDlHwRCMwVTnZ/Uxs5i07T/YncZ5qMbN
km5gC6z+3BERlSzGfD2p83W6GEPXETcdm1oSi58K5Yz9Yo9I6Ks7/tlhuNLbQdLx
DAAp4kLjudeJi5Ugj8YwN07vNUH5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYiRM
eDVfgX+4Gd9JMIYtvz+SU1QwHwYDVR0jBBgwFoAUh+G7jI0reZLqTr7rMz/hQp5w
7powDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ2RkZFL0MyQ0JENjVBQjAyOTExRUM5OUZBNzdDMDVBNDBENTc3L2gtRzdq
STByZVpMcVRyN3JNel9oUXA1dzdwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2gtRzdqSTByZVpMcVRyN3JNel9oUXA1dzdwby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDZGRkUvQzJDQkQ2NUFCMDI5MTFFQzk5RkE3N0MwNUE0
MEQ1NzcvaC1HN2pJMHJlWkxxVHI3ck16X2hRcDV3N3BvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4tNWG2VdIuT6azVzC3lMu2D87rkO5
R8+HyacXRVW002TcSp3Wzv4qy0Ib3j/A0Nnt0LXeA5FMoUo0xx8C1M8o6jXd+PgN
gKH3jqJ9n5KH83mfZe5v/Br1znrIc2HTkS/vKXcNps84PX/ul6rTwBxeGOXbk/o5
v5I1bcjm4fwKO0h8AqgRCq9BttWLDI4ES4kRyEIQpVokpp17gkEH3CXKEedTr18V
9FajGXovY9tapJRdt44W0qLZWfrejY7J2/N802fjvnVW/LzuR+CRqRk0DaBWAO0h
v2Zlkom122pOyU223nBtb9t8shYQlXLB6pScaiajode3tcqyTeEKUkdY
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:41 2025 by rpki-client