Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
File: saGqcslle0DmFrw3PhPPk7Ip6z8.mft (raw, json)
Hash identifier: 18HPJDjC/gG0hD0Qa7gn6wwKNlKfpTIz+WuAH9VPkrA=
Subject key identifier: C1:D6:20:7D:C4:B9:6E:18:49:B4:A2:10:08:65:38:AA:FD:58:8F:EF
Authority key identifier: B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
Certificate issuer: /CN=F366372CAF/serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
Certificate serial: 034A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
Manifest number: 0349
Signing time: Fri 31 Jan 2025 02:15:54 +0000
Manifest this update: Fri 31 Jan 2025 02:15:54 +0000
Manifest next update: Sun 02 Feb 2025 02:15:53 +0000
Files and hashes: 1: saGqcslle0DmFrw3PhPPk7Ip6z8.crl (hash: Fuo36rILUB9e1rcnV4u1P4idGKHbef+oKTGUHb263BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366372CAF/serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
Validity
Not Before: Jan 31 02:15:54 2025 GMT
Not After : Feb 2 02:15:53 2025 GMT
Subject: CN=679c325a-8221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:d8:12:66:e3:ab:95:b3:f4:f4:66:3f:81:
53:6c:b6:1b:9b:cd:82:6b:54:24:62:0f:b9:0d:b8:
11:c4:6d:22:85:2b:1d:b4:0c:02:a9:a1:9d:9d:f3:
44:42:9c:bc:1d:72:f2:0c:b2:a4:e5:35:a7:91:44:
b8:94:4b:3d:f5:c7:db:43:e9:1f:00:34:b2:88:fe:
b4:dc:ac:4d:05:bc:8a:aa:35:28:10:ae:23:38:3b:
d5:e9:d1:2c:9a:ea:59:66:ff:9a:b6:2e:28:a2:b9:
38:11:25:e3:fd:27:bd:06:67:04:60:cf:b2:d0:bb:
2b:90:71:1c:39:37:e8:8f:67:67:aa:8d:6f:6c:58:
1e:0b:64:6a:96:f3:7c:e7:c2:19:21:3b:12:6d:82:
01:aa:eb:bf:77:68:f8:a2:ce:ba:27:52:d8:9b:30:
96:49:e6:86:87:e1:f9:d5:77:fa:79:c7:ae:e5:bb:
b5:a3:71:93:11:f2:bc:86:26:f6:c5:c6:ff:df:94:
9c:40:58:43:82:2a:48:8e:61:00:a0:5a:12:f2:28:
bf:00:7c:a3:ca:f4:c8:f3:ac:43:aa:49:38:37:64:
49:f0:c6:a8:5b:ca:d6:33:97:c9:b0:10:fb:82:aa:
46:6f:5c:e1:2b:c4:58:bb:c9:d0:3e:08:85:1f:7a:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:20:7D:C4:B9:6E:18:49:B4:A2:10:08:65:38:AA:FD:58:8F:EF
X509v3 Authority Key Identifier:
keyid:B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:18:cc:12:93:0d:4d:27:52:b5:31:a7:9f:b4:28:24:16:51:
3f:e4:bd:69:3f:1e:01:a7:3b:a6:89:ac:cf:e0:75:8e:4a:5c:
60:42:8e:9c:58:fa:df:1c:b2:c4:25:60:22:58:d5:9b:cf:36:
ac:3b:9c:89:9a:29:30:21:29:ff:f9:e5:dc:90:31:a4:e8:9c:
06:2a:a7:21:ae:4a:34:b8:02:9d:79:05:13:ee:c1:bf:14:dd:
75:ef:8a:97:91:76:0f:3e:4b:6f:f8:6c:d8:dc:16:46:ab:84:
b5:57:ee:ee:86:be:ea:04:4a:6c:01:94:76:b1:52:e7:1d:23:
71:64:fd:63:f8:7a:7e:9a:34:5a:d9:61:54:03:ea:74:7e:a4:
6b:10:16:d6:68:ea:6e:22:e2:57:d7:c7:79:e3:0b:8a:42:59:
b5:c9:11:54:9d:e8:b0:7e:33:e3:64:6d:16:6e:e9:d2:aa:8a:
ad:ab:8d:94:96:5c:24:c7:6f:14:92:10:67:a3:3b:86:ac:eb:
fc:12:7d:87:95:86:95:67:ce:e6:9f:48:67:0d:94:8b:91:74:
43:3a:26:dd:72:96:8d:4a:0b:ef:23:d4:94:e7:c6:97:43:c7:
dc:21:d0:e2:0a:b3:ec:49:b8:f8:2c:80:61:5e:41:b5:69:bd:
90:6c:a4:91
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjM3MkNBRjExMC8GA1UEBRMoQjFBMUFBNzJDOTY1N0I0MEU2MTZCQzM3M0UxM0NG
OTNCMjI5RUIzRjAeFw0yNTAxMzEwMjE1NTRaFw0yNTAyMDIwMjE1NTNaMBgxFjAU
BgNVBAMTDTY3OWMzMjVhLTgyMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZjdgSZuOrlbP09GY/gVNsthubzYJrVCRiD7kNuBHEbSKFKx20DAKpoZ2d
80RCnLwdcvIMsqTlNaeRRLiUSz31x9tD6R8ANLKI/rTcrE0FvIqqNSgQriM4O9Xp
0Sya6llm/5q2LiiiuTgRJeP9J70GZwRgz7LQuyuQcRw5N+iPZ2eqjW9sWB4LZGqW
83znwhkhOxJtggGq6793aPiizronUtibMJZJ5oaH4fnVd/p5x67lu7WjcZMR8ryG
JvbFxv/flJxAWEOCKkiOYQCgWhLyKL8AfKPK9MjzrEOqSTg3ZEnwxqhbytYzl8mw
EPuCqkZvXOErxFi7ydA+CIUfeu7zAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwdYg
fcS5bhhJtKIQCGU4qv1Yj+8wHwYDVR0jBBgwFoAUsaGqcslle0DmFrw3PhPPk7Ip
6z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYzNzJDLzVGMjE3QzM0NjU3RjExRUQ5NjRBRUY4NUYxMjIyNDY4L3NhR3Fj
c2xsZTBEbUZydzNQaFBQazdJcDZ6OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NhR3Fjc2xsZTBEbUZydzNQaFBQazdJcDZ6OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjM3MkMvNUYyMTdDMzQ2NTdGMTFFRDk2NEFFRjg1RjEy
MjI0Njgvc2FHcWNzbGxlMERtRnJ3M1BoUFBrN0lwNno4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDXGMwSkw1NJ1K1MaeftCgkFlE/5L1p
Px4BpzumiazP4HWOSlxgQo6cWPrfHLLEJWAiWNWbzzasO5yJmikwISn/+eXckDGk
6JwGKqchrko0uAKdeQUT7sG/FN1174qXkXYPPktv+GzY3BZGq4S1V+7uhr7qBEps
AZR2sVLnHSNxZP1j+Hp+mjRa2WFUA+p0fqRrEBbWaOpuIuJX18d54wuKQlm1yRFU
neiwfjPjZG0WbunSqoqtq42Ullwkx28UkhBnozuGrOv8En2HlYaVZ87mn0hnDZSL
kXRDOibdcpaNSgvvI9SU58aXQ8fcIdDiCrPsSbj4LIBhXkG1ab2QbKSR
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:20:59 2025 by rpki-client