Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
File: LnFCh3b4tjGvSw1suVUM0cqUVlU.mft (raw, json)
Hash identifier: GliubqptscQaqkVdA/IdFTYw11vWbRYYI+spUkujJdQ=
Subject key identifier: 90:A7:71:FE:C4:B7:EC:57:2A:E2:47:B5:95:7D:3D:EC:46:2A:CE:B8
Authority key identifier: 2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
Certificate issuer: /CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Certificate serial: 0714
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
Manifest number: 0714
Signing time: Fri 31 Jan 2025 01:25:08 +0000
Manifest this update: Fri 31 Jan 2025 01:25:08 +0000
Manifest next update: Sun 02 Feb 2025 01:25:08 +0000
Files and hashes: 1: LnFCh3b4tjGvSw1suVUM0cqUVlU.crl (hash: IZ3MvOX9wxwuaRKN7M8WYuoBjVDEG5zq+l02XiUVK5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Validity
Not Before: Jan 31 01:25:08 2025 GMT
Not After : Feb 2 01:25:08 2025 GMT
Subject: CN=679c2674-99f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:2b:e2:c3:60:f1:71:50:49:ff:be:21:b4:
55:15:0e:12:b4:e5:1a:c3:9f:38:de:19:de:a3:6e:
15:bf:ef:6f:c1:a5:23:0f:4c:b7:89:0f:1e:34:66:
b4:2a:af:1f:b3:08:d2:ee:3e:55:3e:2d:72:a9:7d:
2b:7a:3b:dd:b2:6f:43:b8:ad:a7:a5:61:14:53:06:
16:1e:7b:df:7a:fd:47:e1:b2:9d:a5:d6:c4:bb:c7:
60:1d:f5:08:e8:e5:ff:3a:f1:d7:f6:d5:de:65:8e:
ec:f7:55:32:ef:4d:09:44:31:ba:d4:e0:83:31:35:
e7:bf:97:5f:9c:b0:4b:e2:5a:70:78:68:8c:a8:b7:
fe:a6:ad:30:0d:fe:46:03:1d:00:71:cc:d3:d8:d4:
37:de:ca:41:6d:82:15:28:53:00:6b:0b:0a:26:7c:
0d:3e:cd:0d:b0:1f:1e:9f:7f:13:5c:6b:e5:57:04:
48:4d:ac:19:c8:4b:d7:8b:d6:1a:5b:62:f2:c1:07:
2b:e7:21:40:f4:19:02:f5:96:35:1d:64:8b:63:87:
58:30:5b:28:55:ec:68:22:0b:95:01:26:9d:d2:01:
82:64:86:a7:9e:40:a7:fc:b4:dd:93:14:d6:67:ec:
75:62:30:b0:c9:de:b3:c3:85:57:cf:a5:47:2f:e0:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A7:71:FE:C4:B7:EC:57:2A:E2:47:B5:95:7D:3D:EC:46:2A:CE:B8
X509v3 Authority Key Identifier:
keyid:2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:0e:7c:4d:63:4a:71:22:fc:ed:16:79:b8:95:85:93:b8:9a:
d4:cd:73:6d:91:ad:14:e2:da:d9:81:85:ef:2c:45:34:3b:f8:
e0:86:4f:51:77:75:84:75:16:99:fb:b1:6c:58:0f:c9:01:d6:
bd:fc:33:fc:65:86:f1:02:e3:03:00:03:20:e6:da:39:28:f3:
9d:82:d0:6e:55:54:14:33:b4:ce:c8:cc:3f:02:15:51:5e:5d:
98:ed:06:16:a1:f7:ce:93:92:d5:5e:48:e8:fa:63:ab:d4:c4:
7b:ee:df:99:9d:49:82:11:0a:c8:7e:d1:4e:f5:7e:bf:d3:8d:
8f:54:b1:a0:b4:20:50:6a:f0:85:97:99:5d:5e:d8:27:22:c9:
79:38:b8:d2:4b:75:90:c3:06:11:1d:b2:a6:0a:98:9b:ff:4a:
9a:08:ec:d9:e7:51:a3:40:4f:39:c4:fc:45:12:e2:bf:47:af:
fe:70:2d:4a:6e:45:f9:23:1e:59:51:4c:75:10:42:71:23:ee:
bb:f2:8b:fa:8d:e9:15:8a:45:91:b0:8d:19:3e:45:96:04:cb:
5e:1d:34:66:4b:fe:1c:53:f9:c7:ea:1a:87:5c:4d:e1:9b:23:
69:99:b3:41:b9:54:51:f9:7a:9d:cc:c3:65:77:0c:8e:9b:90:
57:ce:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:04:04 2025 by rpki-client