
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File: CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier: 7kg+1d5mnHNqkf4oA9oho3YctXbE9gunqUx3vzFeJ64=
Subject key identifier: 88:6E:C3:BB:12:04:DB:CD:0D:4F:2E:CA:82:39:A1:7E:C9:F4:D4:E0
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 03EC
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number: 039D
Signing time: Fri 31 Jan 2025 02:16:45 +0000
Manifest this update: Fri 31 Jan 2025 02:16:44 +0000
Manifest next update: Sun 02 Feb 2025 02:16:44 +0000
Files and hashes: 1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: XrKas+w+s5y3sEkV9lZaho1G/W75fsl5x7yzh2kpjQc=)
2: E37F763C9B3011EFADA2C9B5762E951A.roa (hash: R47ybVaM3aUIws0k7/qUMq8A9wA1Q8F/inukxAruo/o=)
3: 1F4C8FDA8D1A11EFB7560A60762E951A.roa (hash: 8RVUtIlnT7mgvh4UJvsSR317h6/XdfB/Eycnwvwy8WE=)
4: 656BBEC2E28F11EEB6E8E34A775412E6.roa (hash: 6RHj/c6Eh/Ku8hXPaLeXfn3mVJgVW335g8a2J7ti7SI=)
5: A233991AE28F11EEA83F6F4D775412E6.roa (hash: L4AMwrywInjClu9mr5kHv/t4lTu0KD2vjDx5cG/UVkk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 31 02:16:44 2025 GMT
Not After : Feb 2 02:16:44 2025 GMT
Subject: CN=679c328d-64d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:95:96:26:ce:ab:3f:60:ef:5a:b2:03:09:
a6:50:61:14:f3:46:11:c9:2e:74:50:35:55:37:7c:
7c:96:78:39:f5:32:e0:bd:95:66:9a:e2:32:72:cf:
28:66:6e:79:e6:90:51:1b:f1:c6:4f:91:05:b1:6f:
39:6c:be:e4:cd:4f:13:19:03:14:22:1d:fa:68:a6:
eb:c8:5d:8f:30:9b:c0:7f:db:a2:66:37:64:4e:43:
7f:c1:76:d0:de:15:dd:03:57:ef:96:6d:62:9a:a4:
0a:1e:5b:12:75:36:76:3a:f4:f0:01:9c:55:0c:f6:
ae:6e:ef:c9:7d:dd:a2:b0:7a:da:48:1b:dd:33:43:
95:ac:cd:85:91:22:c1:aa:98:a0:a6:70:21:11:cb:
31:2c:d3:36:a5:2d:52:7f:3c:b7:f6:a2:ca:36:e0:
43:df:86:e4:23:c3:27:ed:b3:0e:10:58:6b:5c:62:
4d:34:ad:bb:fa:f3:b6:f5:15:23:97:15:9d:cd:d5:
66:7e:03:60:6f:95:53:49:6d:af:32:45:a7:d3:b0:
32:d7:12:65:25:13:d7:84:40:a8:79:bb:66:6a:ec:
31:0b:e6:59:7b:b1:d2:8f:5d:3d:e5:e9:d7:97:9c:
31:9c:dd:19:89:d5:80:a3:44:3b:0c:1e:d9:6f:32:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6E:C3:BB:12:04:DB:CD:0D:4F:2E:CA:82:39:A1:7E:C9:F4:D4:E0
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a3:9a:c2:31:53:60:fd:1f:47:fd:fb:87:c8:0a:98:5e:b8:
5c:ce:43:ac:dc:76:4e:82:ad:c0:5e:8f:12:60:b2:0e:2d:3b:
32:50:15:cf:7b:07:f2:e3:1d:99:75:bc:f2:31:b7:63:e2:a2:
61:a5:d6:d6:b1:39:53:4e:39:40:67:90:0c:ea:90:b3:93:23:
ab:0c:49:7c:fb:0d:aa:03:08:7f:86:47:e2:e0:7b:8c:ab:d3:
90:ce:91:50:50:75:e5:88:ae:aa:be:79:9a:e3:e5:74:84:59:
ce:cc:ed:b2:19:09:e2:0f:b2:b2:ee:8b:40:40:31:99:f2:9b:
12:32:04:d0:42:25:aa:d9:7e:a0:ef:6b:ab:f1:05:73:f8:2b:
b1:3a:a2:19:73:46:80:a2:5e:ab:a4:79:da:28:22:1e:80:64:
2d:f8:21:0c:b4:84:d5:35:94:3f:81:fe:90:83:71:d3:66:f2:
d3:f1:9d:18:9d:bf:3d:ea:0b:26:68:f9:ab:5a:7b:5a:dd:85:
ac:7a:95:de:cd:0f:70:e0:b2:ff:45:e2:1e:b6:02:07:3d:fd:
3b:91:28:40:da:56:35:fa:18:2d:f0:ef:46:df:80:a8:6d:ef:
45:f8:bf:72:71:3b:a1:0a:7f:54:a2:79:31:51:20:6b:fe:7d:
c4:46:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:17 2025 by rpki-client