Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File: vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier: Z+iBlD4eBftO98oAdvMe0BRblpN+Dv+xbn67ggS6Op4=
Subject key identifier: 23:83:C1:9F:D5:CA:A6:6F:62:E1:68:E5:A8:92:1E:4B:AF:41:4F:0B
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer: /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial: 0239
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number: 0239
Signing time: Fri 31 Jan 2025 02:35:05 +0000
Manifest this update: Fri 31 Jan 2025 02:35:05 +0000
Manifest next update: Sun 02 Feb 2025 02:35:05 +0000
Files and hashes: 1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: b6hhRK3s5nOOJzMdznyJgykwqCSOsnT4v58sfK6/ZeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Validity
Not Before: Jan 31 02:35:05 2025 GMT
Not After : Feb 2 02:35:05 2025 GMT
Subject: CN=679c36d9-afb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:89:01:76:dc:63:82:0c:6e:56:ed:c4:e1:
a0:b1:51:11:2b:f0:fe:b4:ad:1d:57:d3:2c:ed:64:
74:5b:50:37:eb:bc:3b:17:5e:06:9d:74:ed:8f:0c:
0d:c2:a2:46:67:60:f2:df:5e:c2:69:c2:f0:94:98:
a5:af:a1:5b:b0:78:dc:f2:71:8a:6a:34:e2:ec:0c:
79:d6:57:da:c2:f0:73:05:bb:d7:c0:0d:09:e9:01:
b7:62:dd:79:ef:3e:56:f0:0f:84:4b:c7:22:92:11:
0a:f0:49:2f:10:8a:49:b7:20:23:3a:40:4d:ec:62:
16:53:be:98:73:7a:ee:b8:bb:7b:54:4a:13:67:16:
f5:f1:b2:47:eb:19:e9:bb:53:75:28:b7:d4:f1:95:
e7:11:b6:6b:1c:4a:87:c5:4b:74:cd:f8:11:c8:2f:
09:51:6a:a6:e9:02:cf:d1:dd:c0:0f:94:a1:57:e4:
c8:18:8d:b9:2f:68:ad:d9:e8:a7:f0:96:18:a5:04:
f9:ff:3f:f4:b6:0b:bc:87:2e:29:69:40:25:9c:97:
ab:f9:d4:d8:27:32:45:af:5b:5d:30:36:aa:4e:02:
50:3f:01:a1:32:f1:36:a7:69:84:a2:5c:1b:20:86:
3a:eb:34:4b:34:4a:5a:af:cc:c6:97:34:cb:f3:aa:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:C1:9F:D5:CA:A6:6F:62:E1:68:E5:A8:92:1E:4B:AF:41:4F:0B
X509v3 Authority Key Identifier:
keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:8a:1d:19:4c:d7:27:12:ce:0f:f5:7a:56:c3:5c:cf:a9:a4:
b9:89:e7:76:d3:3b:45:77:71:42:ca:ad:78:7a:4a:45:9c:e2:
11:b3:42:1c:ca:7c:a1:dd:22:1d:b3:f3:1e:e2:bd:1f:da:0d:
a9:ff:4e:0e:4c:2f:31:f5:b8:e2:1b:05:65:ee:96:62:0f:d1:
42:43:c5:32:90:96:19:3b:55:f8:53:53:f8:89:4e:63:cd:e5:
70:d3:9c:91:f2:2c:82:40:b4:d4:d2:a8:28:46:dc:3b:04:d6:
b6:4c:28:cf:b1:83:fa:64:95:1f:45:b6:6b:d9:8a:9a:d4:74:
ab:8d:20:17:47:e6:14:f7:ea:e7:63:dc:56:71:42:d4:e5:b0:
b1:e8:80:9c:58:e9:2e:88:6b:e8:6b:e2:77:69:b5:db:57:9e:
cd:06:4f:83:90:70:30:9b:5d:46:b6:17:7d:b5:dd:bf:26:49:
0f:1b:7d:9a:04:7d:c4:f1:b5:21:39:a8:59:7d:90:e3:e8:06:
8d:6b:12:11:e3:cc:37:3a:c6:2f:f9:9e:e2:41:93:5d:ac:b8:
ca:ad:fe:1f:de:4c:c3:80:3a:a5:70:71:70:b4:71:fc:d2:73:
a4:2c:41:7f:b5:0d:b2:ea:dd:2f:d5:9c:9e:5d:a8:d8:07:18:
45:13:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:04:08 2025 by rpki-client