Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File: MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier: +MTFFp5e6BVStKtx0ZJlp4CW5QG59b8zZKPT9iz7nmY=
Subject key identifier: AC:60:6C:2B:D4:45:48:50:AF:12:AC:8A:B4:D1:4F:A2:49:83:18:83
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer: /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial: 02FD
Authority info access: rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number: 02FD
Signing time: Fri 31 Jan 2025 02:20:30 +0000
Manifest this update: Fri 31 Jan 2025 02:20:29 +0000
Manifest next update: Sun 02 Feb 2025 02:20:29 +0000
Files and hashes: 1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: Xkk/zJSq2q2JOBYBv+iATjrbp/BwnzhcWcFg6XYh5WE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765 (0x2fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Validity
Not Before: Jan 31 02:20:29 2025 GMT
Not After : Feb 2 02:20:29 2025 GMT
Subject: CN=679c336e-2ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:fb:4d:16:f3:7c:fb:c9:36:b3:f8:7a:2c:
db:66:62:d2:f7:89:0e:58:01:1c:f8:ce:c1:d2:21:
52:4c:11:a1:19:98:41:bd:78:8e:6b:b8:a1:89:c2:
04:d2:f3:55:fb:b2:95:b5:49:1c:70:e5:d7:1e:36:
9c:ce:e2:a5:1c:95:39:41:b8:57:c3:0a:e9:99:68:
fc:e1:95:cc:96:e1:4c:44:7c:fb:c0:db:89:e8:0f:
a7:19:14:8a:f9:4d:ad:5f:fe:86:2f:7b:3f:5f:f7:
36:71:e6:c3:28:cb:c2:46:da:0f:ca:dd:bb:2e:35:
13:eb:d4:b6:e1:7a:84:7b:df:ba:91:99:a9:94:ec:
56:4e:79:3f:cc:be:88:03:c3:3a:c5:a0:18:82:63:
76:04:8e:97:7f:ef:0f:9e:08:29:56:69:9e:c2:97:
d3:5d:ff:63:f7:5e:05:a4:98:a7:dc:b3:29:e8:aa:
52:c2:7e:37:91:07:f3:49:f8:4e:ec:61:cf:05:57:
da:04:80:20:92:d8:08:8e:57:7d:2e:33:93:46:f6:
9d:7d:08:a5:4b:7d:a5:a4:b4:1f:e6:0f:0b:81:90:
e4:2c:a4:ec:ab:cf:08:b3:eb:0f:42:6c:85:d1:1e:
69:d2:bc:6b:eb:fc:54:75:b8:89:1f:40:67:b5:a5:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:6C:2B:D4:45:48:50:AF:12:AC:8A:B4:D1:4F:A2:49:83:18:83
X509v3 Authority Key Identifier:
keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:99:bb:99:6f:7a:f3:7d:70:a0:05:47:0f:4b:40:b8:73:17:
27:90:a2:f3:d2:df:f8:75:f9:53:a6:78:82:da:56:69:41:e8:
89:89:85:e5:ca:62:07:44:6e:69:7e:c5:a6:ff:9e:75:f3:67:
74:5f:15:61:3c:98:d8:7b:92:37:46:12:5f:d6:dc:a2:7b:5a:
a7:f1:9b:3f:15:43:bc:f4:7a:62:de:2e:da:0f:9b:71:93:3c:
fb:7f:81:6e:f4:0f:18:f9:e0:d4:1f:41:46:46:3b:15:0c:a7:
e5:4e:ac:0e:76:27:66:96:f1:76:1d:95:25:03:92:56:00:af:
3b:c5:1a:51:bb:e1:28:6f:89:a8:c3:9e:08:ba:d0:e3:ef:73:
25:35:73:89:97:ad:50:02:b7:11:36:17:9f:95:33:f5:b1:70:
91:f6:8c:0c:e3:98:a3:72:34:3c:fc:05:e0:61:d7:18:70:e7:
fe:e2:8e:ed:50:41:37:1c:12:01:1d:a8:20:b2:13:7e:de:c7:
8e:c5:79:7f:90:7d:0b:83:ec:59:84:a0:3f:e9:a6:53:9f:0d:
6b:c3:5c:e2:2e:72:29:7b:32:8a:b9:8e:60:d0:8b:1c:03:a8:
67:5d:bb:49:a9:67:e1:34:d3:7f:e7:86:ff:08:ed:dc:79:a1:
1c:29:c5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:25 2025 by rpki-client