Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: kONHnq5PmNSlHOz85qGaoR4lmTg3yiFZGjRGxHfAWTs=
Subject key identifier: 98:AB:23:FD:56:1A:87:65:1E:07:FC:9B:D2:52:5B:21:F8:18:5C:96
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 02C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 02C1
Signing time: Fri 31 Jan 2025 02:24:57 +0000
Manifest this update: Fri 31 Jan 2025 02:24:56 +0000
Manifest next update: Sun 02 Feb 2025 02:24:56 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: 7VImDphi4qvSnZHEiiBTkc69dK9qUmZXvJLsSjZ8NEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Jan 31 02:24:56 2025 GMT
Not After : Feb 2 02:24:56 2025 GMT
Subject: CN=679c3478-53e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:04:f1:3d:17:84:fe:7b:d4:eb:c7:89:52:
77:3c:e2:45:62:10:c9:0b:91:da:ac:b3:9e:23:bf:
14:82:d6:58:c5:d1:c6:eb:96:3f:c2:6c:16:35:52:
49:24:1c:57:e6:79:68:9f:ab:35:bc:e1:67:96:49:
f1:7a:30:0a:84:aa:9e:de:0b:32:34:10:c5:b2:e3:
8e:ad:b6:2b:c8:73:ab:5d:c0:ed:b8:52:9e:18:64:
a0:00:8c:32:4c:c1:d2:fc:27:b5:af:b4:f1:10:be:
e2:2a:55:b5:95:9c:96:df:5d:25:83:ec:50:1a:2e:
59:59:16:5c:fb:ec:b5:b0:d8:04:a9:0e:3c:71:43:
a6:2f:cd:95:60:fc:3d:c8:a6:6c:c8:5e:57:e9:aa:
60:ed:90:8d:64:25:75:fc:05:cc:27:db:f2:45:6e:
a3:ae:db:cd:db:cf:1f:d1:5f:1b:ee:8e:18:c3:5d:
a9:7d:5e:06:48:c9:e0:ee:e7:69:1e:ac:9a:25:65:
f1:c2:7d:cf:92:ac:ec:05:35:a6:c9:eb:f6:42:50:
4e:30:20:dc:6d:79:a9:5d:e4:fa:f2:9b:f2:ba:30:
79:1d:9c:e5:e8:6e:31:41:8b:fb:e1:89:4e:f4:3a:
66:c7:71:b5:95:57:00:85:a3:cf:6c:bb:2f:f0:17:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:23:FD:56:1A:87:65:1E:07:FC:9B:D2:52:5B:21:F8:18:5C:96
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:77:30:3e:d4:cf:17:37:56:42:75:b0:42:61:97:7e:90:4a:
f3:5e:fe:5c:2c:e5:6f:47:09:e2:69:5a:e9:62:ea:43:3e:e2:
22:2b:b2:f2:b2:2b:03:79:63:3a:6a:15:38:bd:7c:fa:6e:2f:
61:a7:4f:2e:87:4d:c9:07:c2:32:4b:39:10:7f:8c:f1:84:9d:
2a:24:9d:93:22:30:50:c8:d3:5c:8b:3d:71:36:ef:74:37:e6:
ca:b3:05:38:58:50:f3:cd:d0:a2:10:75:54:34:17:c0:12:98:
04:62:d7:d2:13:eb:5f:b8:81:4a:a4:22:6b:70:17:20:ac:03:
70:f8:b5:62:b8:3b:88:c8:03:d3:73:ba:97:40:e5:25:e7:52:
3a:97:9c:92:36:2c:8d:a8:2e:a7:dd:33:42:bf:01:4a:ef:e0:
7c:f5:9a:f7:8d:ec:35:19:29:21:12:97:ed:72:dd:6b:ec:38:
d3:68:ce:e9:ae:e6:de:ab:07:ff:40:8f:65:9c:95:cd:1c:95:
f7:83:bf:9f:bb:82:42:bb:9b:2b:a5:cc:be:de:c9:55:a7:a4:
46:4b:01:aa:47:8c:81:0d:45:55:54:e5:7e:2e:aa:2f:e4:da:
99:7b:68:b4:35:92:6b:9b:65:34:f2:44:ef:f1:57:b0:a6:8a:
4d:c0:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:43:18 2025 by rpki-client