Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
File: B0rky8vOb02Yhv7yEVKxOmrac9Y.mft (raw, json)
Hash identifier: beibsHw/xYv2ihgNWRFSgAFNvNwZOPJNjw7I8jxhM8Y=
Subject key identifier: 0B:C2:63:35:E3:1B:77:BC:F8:72:60:85:DC:23:35:6F:96:F8:03:3A
Authority key identifier: 07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Certificate issuer: /CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Certificate serial: 0333
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
Manifest number: 0333
Signing time: Fri 31 Jan 2025 02:16:52 +0000
Manifest this update: Fri 31 Jan 2025 02:16:52 +0000
Manifest next update: Sun 02 Feb 2025 02:16:52 +0000
Files and hashes: 1: B0rky8vOb02Yhv7yEVKxOmrac9Y.crl (hash: XZWvEFcZGKTwp+vUZtICbfq+Hd+n1ysPrmdh0ZomBHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Validity
Not Before: Jan 31 02:16:52 2025 GMT
Not After : Feb 2 02:16:52 2025 GMT
Subject: CN=679c3294-040e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:f4:6c:31:a0:c2:51:81:a8:6a:81:17:69:
56:81:42:25:4f:25:f8:5e:71:53:a3:e1:d6:86:e0:
7b:f6:5e:70:09:29:e2:4e:41:a6:fb:5b:5a:d1:2e:
79:18:f4:72:d5:ca:b2:94:98:52:0e:d7:94:26:b2:
f8:fc:c2:e5:72:d2:3d:91:82:4f:ca:d7:d7:5c:ba:
00:16:55:97:01:74:60:c0:af:f3:4d:cb:a5:55:94:
98:4a:fe:09:ee:79:87:ef:d4:19:1f:51:3e:0c:06:
bc:3d:1b:b2:ed:90:22:7e:71:84:bb:c1:be:63:6d:
b5:9b:5f:f6:4c:d8:bd:be:57:37:18:cb:d3:9b:5d:
3e:b7:34:ba:b1:11:d2:bc:3b:9e:f2:91:ae:0f:46:
f1:1a:10:a6:a8:ed:21:a6:e9:80:71:bc:3b:ca:9f:
1a:08:cc:22:d9:c7:76:07:4e:e6:f3:ef:28:56:4c:
4a:1a:67:f2:f7:f5:6d:13:fa:e7:e4:58:e5:be:cf:
37:45:5a:9c:3f:d9:8b:99:40:8d:85:89:71:06:14:
60:87:e5:90:c5:b8:96:3d:4d:bc:c3:55:73:b2:ff:
51:f7:d5:5f:30:05:48:2e:96:8d:c3:08:e3:c2:11:
1a:2a:d7:b1:06:a2:9c:61:3c:09:8d:a3:c9:a3:3d:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C2:63:35:E3:1B:77:BC:F8:72:60:85:DC:23:35:6F:96:F8:03:3A
X509v3 Authority Key Identifier:
keyid:07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:5d:81:d2:c5:f8:34:9b:be:be:b1:63:3c:80:02:7e:ef:11:
23:af:89:da:38:b6:df:19:b0:28:0a:75:a1:7c:fa:17:06:bb:
aa:cf:35:1e:4d:9c:45:1c:82:02:6a:d6:d3:b2:b0:04:19:b7:
74:82:f0:5d:95:cf:2c:88:83:b3:9c:f9:63:41:af:3b:dc:7b:
a6:41:66:23:7c:39:6e:71:8b:15:46:25:81:d2:a7:ca:34:c1:
68:7f:83:27:2f:7e:53:ac:62:22:64:8d:23:cf:19:ce:fc:f2:
cf:20:30:4e:7c:48:67:da:42:84:ed:90:ff:15:0c:75:9a:bb:
f0:41:1f:b7:0d:08:43:df:a7:7b:9d:15:78:5b:22:4e:b0:af:
45:46:88:94:6c:47:19:82:e4:14:3a:1e:42:cb:6b:75:f4:af:
3c:d5:9e:50:ac:c9:a0:87:ec:42:f7:8e:94:7c:96:e8:c0:41:
11:3c:ba:93:dc:8e:87:eb:39:a0:9c:e0:73:d4:ae:40:ba:ab:
ca:5f:bc:60:aa:d1:19:5b:19:cb:cb:90:5c:1b:49:bb:ef:08:
38:1d:8a:5d:18:64:61:63:7c:32:35:37:1d:89:4e:0d:5c:63:
9e:a7:37:c1:a1:89:b3:b9:0b:2a:f5:1e:94:ad:f2:23:88:2f:
24:f2:40:72
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBRjExMC8GA1UEBRMoMDc0QUU0Q0JDQkNFNkY0RDk4ODZGRUYyMTE1MkIx
M0E2QURBNzNENjAeFw0yNTAxMzEwMjE2NTJaFw0yNTAyMDIwMjE2NTJaMBgxFjAU
BgNVBAMTDTY3OWMzMjk0LTA0MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8APRsMaDCUYGoaoEXaVaBQiVPJfhecVOj4daG4Hv2XnAJKeJOQab7W1rR
LnkY9HLVyrKUmFIO15Qmsvj8wuVy0j2Rgk/K19dcugAWVZcBdGDAr/NNy6VVlJhK
/gnueYfv1BkfUT4MBrw9G7LtkCJ+cYS7wb5jbbWbX/ZM2L2+VzcYy9ObXT63NLqx
EdK8O57yka4PRvEaEKao7SGm6YBxvDvKnxoIzCLZx3YHTubz7yhWTEoaZ/L39W0T
+ufkWOW+zzdFWpw/2YuZQI2FiXEGFGCH5ZDFuJY9TbzDVXOy/1H31V8wBUgulo3D
COPCERoq17EGopxhPAmNo8mjPZQtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUC8Jj
NeMbd7z4cmCF3CM1b5b4AzowHwYDVR0jBBgwFoAUB0rky8vOb02Yhv7yEVKxOmra
c9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzMyMUIwMjAyN0EwOTExRURBQ0E2NDg4NUYxMjIyNDY4L0Iwcmt5
OHZPYjAyWWh2N3lFVkt4T21yYWM5WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0Iwcmt5OHZPYjAyWWh2N3lFVkt4T21yYWM5WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTlGOUMvMzIxQjAyMDI3QTA5MTFFREFDQTY0ODg1RjEy
MjI0NjgvQjBya3k4dk9iMDJZaHY3eUVWS3hPbXJhYzlZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnXYHSxfg0m76+sWM8gAJ+7xEjr4na
OLbfGbAoCnWhfPoXBruqzzUeTZxFHIICatbTsrAEGbd0gvBdlc8siIOznPljQa87
3HumQWYjfDlucYsVRiWB0qfKNMFof4MnL35TrGIiZI0jzxnO/PLPIDBOfEhn2kKE
7ZD/FQx1mrvwQR+3DQhD36d7nRV4WyJOsK9FRoiUbEcZguQUOh5Cy2t19K881Z5Q
rMmgh+xC946UfJbowEERPLqT3I6H6zmgnOBz1K5AuqvKX7xgqtEZWxnLy5BcG0m7
7wg4HYpdGGRhY3wyNTcdiU4NXGOepzfBoYmzuQsq9R6UrfIjiC8k8kBy
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:02:35 2025 by rpki-client