Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File: kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier: cxgz1XMX3fcm4YbkujbDg+YbNxrIRxEt0Wj0klgLz1M=
Subject key identifier: 65:C3:6B:D9:9F:F1:4B:64:91:6A:0D:3F:1A:6B:8E:03:78:43:D4:89
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial: 0390
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number: 038E
Signing time: Fri 31 Jan 2025 02:11:53 +0000
Manifest this update: Fri 31 Jan 2025 02:11:53 +0000
Manifest next update: Sun 02 Feb 2025 02:11:53 +0000
Files and hashes: 1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: sBtiHa2eP9rKTAD33usO8iBbez0nka6D4EFhvH1p3pI=)
2: AD72D8203AC511EF8BAB4075762E951A.roa (hash: uGjLeTcQtjvoi+G1lNbi/6hF5oa6IK/lI55KybZViDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Validity
Not Before: Jan 31 02:11:53 2025 GMT
Not After : Feb 2 02:11:53 2025 GMT
Subject: CN=679c3169-ff91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:33:e4:e3:6f:35:97:46:d7:df:11:99:a5:
5f:9d:4c:06:7f:41:6a:b0:c5:76:78:77:55:30:ef:
dd:ea:63:2f:a9:e7:a7:d6:a1:f7:46:f8:11:6f:e2:
cd:b4:18:86:54:a2:e3:c9:a3:6f:af:9f:8b:6d:15:
6b:49:64:a9:b4:43:12:e4:03:b2:f0:0d:3a:a2:26:
d4:d5:77:7c:23:d3:8e:7e:25:43:b1:74:be:a6:19:
00:89:09:e9:d6:8c:b5:f0:eb:05:3e:ba:31:ff:f5:
c1:e5:68:99:09:00:57:d4:65:a2:95:5f:74:99:bc:
07:d4:08:23:c2:b0:16:bf:f2:e9:22:2a:0d:58:54:
75:56:a9:da:a3:75:cf:3b:a5:02:88:ed:79:94:ed:
69:de:d5:fb:cd:08:42:92:26:cb:af:12:23:dc:f2:
31:6a:4f:88:48:bb:9e:4c:e1:d1:50:dd:05:e7:7c:
0c:bc:f6:ba:3f:89:6a:14:cf:bb:4d:b2:2b:94:a4:
55:c7:31:b2:de:89:9e:aa:e2:e1:a0:bf:77:80:59:
90:34:0a:5c:32:43:0a:95:85:6b:f9:b0:dc:e4:a6:
84:f4:be:6e:a2:09:20:25:58:3c:63:8f:ce:08:28:
03:d4:5c:66:fa:fa:5d:28:18:b5:6b:3c:a1:09:d9:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:6B:D9:9F:F1:4B:64:91:6A:0D:3F:1A:6B:8E:03:78:43:D4:89
X509v3 Authority Key Identifier:
keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:8e:6c:ef:a1:4d:48:ba:fe:be:b4:10:ca:1b:4d:87:c0:
5d:d2:d3:f1:6e:b3:fc:62:0b:e5:aa:d4:67:78:03:4c:0e:1d:
1a:5d:9f:3b:7c:da:f0:d6:00:f0:05:ed:b7:ac:4b:e0:f6:ce:
e5:2f:0e:5b:ff:db:d7:6a:64:30:b6:73:42:64:f8:22:69:5b:
0c:e1:1e:98:d1:48:af:0b:70:22:64:bb:72:28:df:81:77:e2:
ee:fb:9a:ac:77:10:26:88:f7:e2:26:dc:fd:02:db:91:50:61:
e6:40:e0:a1:67:32:8a:0b:be:c3:b4:13:6c:b1:ad:4b:de:ce:
54:8c:70:b4:c6:2a:fe:e3:67:f9:db:af:36:70:99:ba:65:75:
d0:17:d0:ec:c7:ca:e0:06:8d:2b:ed:03:11:8d:ea:49:89:e0:
bd:11:60:88:d5:87:a2:a7:14:db:df:79:7c:b2:d6:79:27:5b:
e6:74:fe:7c:5d:d4:19:c2:27:6a:a1:7d:0d:9d:06:fb:43:1b:
d3:ab:b7:a4:fb:4b:a3:c6:4d:1a:a0:12:d9:33:95:7a:4b:3f:
de:49:04:a8:4b:cd:7c:a9:9b:31:cd:55:5b:cb:4e:54:32:ea:
93:0d:c3:fc:7b:bb:e8:af:56:b0:30:3f:ff:98:d0:5c:04:35:
2d:a5:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:10 2025 by rpki-client