Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File: UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier: oogjaiKweofLdwKswYdEhNtIZAFn5xWo+OZxJP8TX/Y=
Subject key identifier: 85:FE:2B:89:C6:09:75:5F:0B:04:0F:D8:C0:8B:87:EC:17:70:E1:19
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer: /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial: 02C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number: 02C1
Signing time: Fri 31 Jan 2025 02:24:49 +0000
Manifest this update: Fri 31 Jan 2025 02:24:49 +0000
Manifest next update: Sun 02 Feb 2025 02:24:49 +0000
Files and hashes: 1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: V9HP2pgk0O4u3WFSf++cnw7Fr6V/dQnToCcqDjzhdNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Validity
Not Before: Jan 31 02:24:49 2025 GMT
Not After : Feb 2 02:24:49 2025 GMT
Subject: CN=679c3471-d7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:83:f7:18:38:89:76:89:e7:2a:30:7a:48:
4c:d6:83:c7:88:99:32:03:d0:ab:37:6e:b6:36:19:
88:a3:3f:52:5c:06:ee:78:24:87:af:19:78:68:0e:
96:50:d6:b7:f5:e6:59:ad:2f:d7:ab:cd:c0:93:52:
eb:d4:c2:62:77:51:ff:6c:dc:d2:de:c4:e0:55:ad:
07:2c:c6:8a:dd:66:32:77:da:64:be:b6:92:70:ae:
33:98:e0:e9:6e:41:5f:14:9f:aa:9f:ad:ab:c1:df:
c9:01:65:50:74:3f:11:ca:a2:a2:07:65:38:b5:81:
db:cf:85:b2:33:f8:c0:85:0e:dc:08:49:7b:6b:7e:
ee:39:9b:31:16:f8:7d:8f:5d:ff:9a:7b:69:d5:f3:
dd:d7:16:49:fc:0f:74:ab:50:c2:a3:39:68:bd:22:
13:d0:31:70:24:df:1f:ab:45:ac:7e:e3:e8:a4:26:
fe:87:fa:52:18:29:3a:ef:1b:a5:c2:34:a2:80:64:
c8:57:69:f2:3e:19:69:ea:b5:01:98:0a:ec:18:7f:
d1:d1:94:f9:98:32:6b:5a:d7:e9:f3:83:a6:b3:aa:
40:b5:38:ae:ee:f7:25:25:2d:f9:7e:8f:fc:bb:0e:
9c:c2:78:67:eb:3b:90:f5:ec:5e:ad:eb:fa:ed:ef:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FE:2B:89:C6:09:75:5F:0B:04:0F:D8:C0:8B:87:EC:17:70:E1:19
X509v3 Authority Key Identifier:
keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:39:41:53:af:56:1d:08:fd:b9:5b:ce:b1:83:c2:0e:69:91:
e8:7a:4c:86:5e:29:dc:a5:16:77:60:99:06:4e:cc:f5:0c:81:
bf:39:fb:82:d5:6d:6b:00:96:73:8e:67:f5:e6:9d:e0:e9:0d:
90:ca:4c:7e:ca:e7:5e:5c:fa:bc:f9:59:a9:78:9b:5d:85:ff:
7b:c6:84:c2:b4:c1:df:f2:5b:25:81:50:05:31:bf:da:65:d9:
26:9e:40:84:fa:35:37:52:93:83:ed:13:34:c2:a2:7b:9e:d5:
62:3e:d4:aa:8f:53:7c:39:4c:0c:e6:6e:6c:ac:15:b9:b1:ed:
20:fe:a1:7a:36:81:de:d2:f8:c1:4d:3c:be:b6:7b:e3:88:17:
69:7f:e4:24:35:6e:33:d3:41:3b:91:4e:a5:39:ea:2b:76:84:
9e:45:1f:08:81:21:68:d1:14:81:d2:01:9d:3d:24:37:58:2f:
08:72:db:3e:3b:0b:7b:f3:d3:82:00:a1:5a:8a:ed:6a:ce:97:
b3:52:b9:21:d5:70:33:b5:61:6c:84:37:9e:eb:a8:ef:54:d6:
61:3a:dd:47:09:71:6b:02:df:41:db:5e:08:ef:4b:e3:e9:dd:
9c:51:19:35:cd:63:d7:53:6f:59:54:78:7c:55:5f:42:2b:06:
4a:74:10:a6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJGOUVBRjExMC8GA1UEBRMoNTJDOEQ1NkRGNEFFRTI2M0U4QTY1MTEyOThBNjE5
Q0U5OEM4QUMwRTAeFw0yNTAxMzEwMjI0NDlaFw0yNTAyMDIwMjI0NDlaMBgxFjAU
BgNVBAMTDTY3OWMzNDcxLWQ3ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClLIP3GDiJdonnKjB6SEzWg8eImTID0Ks3brY2GYijP1JcBu54JIevGXho
DpZQ1rf15lmtL9erzcCTUuvUwmJ3Uf9s3NLexOBVrQcsxordZjJ32mS+tpJwrjOY
4OluQV8Un6qfravB38kBZVB0PxHKoqIHZTi1gdvPhbIz+MCFDtwISXtrfu45mzEW
+H2PXf+ae2nV893XFkn8D3SrUMKjOWi9IhPQMXAk3x+rRax+4+ikJv6H+lIYKTrv
G6XCNKKAZMhXafI+GWnqtQGYCuwYf9HRlPmYMmta1+nzg6azqkC1OK7u9yUlLfl+
j/y7DpzCeGfrO5D17F6t6/rt74c5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhf4r
icYJdV8LBA/YwIuH7Bdw4RkwHwYDVR0jBBgwFoAUUsjVbfSu4mPoplESmKYZzpjI
rA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCRjlFL0UxOEZCM0RFQ0EyNDExRURBMjRDNTk4QkYxMjIyNDY4L1VzalZi
ZlN1NG1Qb3BsRVNtS1laenBqSXJBNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VzalZiZlN1NG1Qb3BsRVNtS1laenBqSXJBNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJGOUUvRTE4RkIzREVDQTI0MTFFREEyNEM1OThCRjEy
MjI0NjgvVXNqVmJmU3U0bVBvcGxFU21LWVp6cGpJckE0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/OUFTr1YdCP25W86xg8IOaZHoekyG
XincpRZ3YJkGTsz1DIG/OfuC1W1rAJZzjmf15p3g6Q2Qykx+yudeXPq8+VmpeJtd
hf97xoTCtMHf8lslgVAFMb/aZdkmnkCE+jU3UpOD7RM0wqJ7ntViPtSqj1N8OUwM
5m5srBW5se0g/qF6NoHe0vjBTTy+tnvjiBdpf+QkNW4z00E7kU6lOeordoSeRR8I
gSFo0RSB0gGdPSQ3WC8Icts+Owt789OCAKFaiu1qzpezUrkh1XAztWFshDee66jv
VNZhOt1HCXFrAt9B214I70vj6d2cURk1zWPXU29ZVHh8VV9CKwZKdBCm
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:50 2025 by rpki-client