
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File: rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier: lXCSvM0rFQVvN04zOtoFZ/QUku5nrmVjcubzzIuD5wo=
Subject key identifier: B7:2A:35:03:90:BE:0F:43:42:D1:B5:8A:51:E8:57:7C:FF:4C:B3:6C
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer: /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial: 0830
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number: 0830
Signing time: Fri 31 Jan 2025 01:17:03 +0000
Manifest this update: Fri 31 Jan 2025 01:17:03 +0000
Manifest next update: Sun 02 Feb 2025 01:17:03 +0000
Files and hashes: 1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: JZsViO/4hN/bHlRx6h6hxLNzX02VjrSqcpmIHhOY3Nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096 (0x830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Validity
Not Before: Jan 31 01:17:03 2025 GMT
Not After : Feb 2 01:17:03 2025 GMT
Subject: CN=679c248f-0fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:e6:4b:64:0a:1a:3b:80:45:d0:14:88:cb:
32:c2:a0:3f:ac:7e:ef:47:49:71:be:63:03:30:85:
27:b4:32:44:f5:e1:9e:1f:d8:7c:2d:4d:fd:2c:ba:
4f:97:49:57:e7:36:0c:5c:30:0c:6b:9e:b4:a9:ae:
e9:4c:db:be:6d:c7:d7:94:6c:63:fd:78:5c:40:c5:
da:cb:69:d9:82:29:d5:0a:a3:c1:7e:2d:27:6d:11:
4e:b8:42:6f:de:3d:ec:2b:c5:fc:76:22:3e:6b:b1:
79:5f:db:a6:2b:63:c4:08:7f:28:e1:a9:82:ee:52:
ec:51:84:7c:c0:ed:52:4b:64:29:a9:07:74:66:9c:
e0:3b:de:27:ae:d1:43:2c:85:ee:1f:39:ec:1b:12:
76:c5:33:5b:72:aa:50:d1:00:fa:55:e9:7c:f0:28:
81:2d:76:12:6d:00:9a:10:69:e0:49:a9:49:22:48:
ed:a4:ed:3c:d4:a2:8e:8d:a7:4d:9d:79:f6:a2:bd:
92:58:5a:76:74:91:7a:27:8a:85:3c:31:30:ce:62:
c1:fb:09:0a:38:f5:a5:21:7e:35:a5:ce:74:4a:3c:
a6:1a:9d:7f:91:85:00:15:1d:6d:65:2e:3e:7c:e5:
3d:03:ff:fc:5f:4e:a5:4b:8c:e7:85:cf:6a:61:d1:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:35:03:90:BE:0F:43:42:D1:B5:8A:51:E8:57:7C:FF:4C:B3:6C
X509v3 Authority Key Identifier:
keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:44:04:c6:c7:8b:2b:cc:8e:c0:8b:a1:61:ee:08:99:7b:17:
af:99:bc:71:70:8f:e5:0c:b1:5e:65:41:15:39:a3:ed:9f:fa:
42:fc:ca:02:a5:5d:0e:e8:74:65:c8:1f:1d:bc:9b:28:f8:99:
4f:8c:1d:41:fa:5c:f3:ed:f5:0e:88:73:47:c0:58:47:3f:fd:
7f:14:8b:98:1a:3f:93:50:f8:ac:2e:39:5a:08:ed:e1:0f:32:
11:53:e8:37:d4:a5:2c:c5:81:89:ec:93:73:76:88:0a:e6:5c:
8e:9a:b0:d4:89:30:a6:ee:98:22:78:41:cb:69:ac:47:c0:53:
06:be:0f:c5:0c:36:03:a7:76:eb:a7:59:4c:70:9c:db:d9:7d:
4e:03:16:96:7b:b0:6a:a9:85:c4:2d:26:76:a5:17:b2:8d:41:
84:4e:a9:58:ec:eb:15:72:bc:d9:93:16:8e:88:5b:d5:0a:b8:
f6:2b:c3:64:68:68:40:90:50:06:4e:4d:67:98:4d:88:70:07:
76:48:1e:e0:b0:77:ef:13:08:ff:03:f4:63:07:d1:fc:fc:3f:
30:d7:76:20:14:18:c4:76:bd:dc:df:0d:b7:3f:c4:38:1f:32:
26:6e:6a:0d:53:e4:f6:42:45:19:07:3a:bc:bd:cd:c8:66:92:
55:bf:d2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:26:19 2025 by rpki-client