Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier: Cdi98JsanvfTXQz2z6z6xEEWPl3CPhE/4vwV+xiJrhA=
Subject key identifier: 54:9D:72:02:D5:7F:48:96:AD:12:73:DD:4D:DD:54:0E:E5:DB:7B:03
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer: /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial: 0698
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number: 0698
Signing time: Fri 31 Jan 2025 01:30:39 +0000
Manifest this update: Fri 31 Jan 2025 01:30:38 +0000
Manifest next update: Sun 02 Feb 2025 01:30:38 +0000
Files and hashes: 1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: etSj457mmgbRU/DgBRDkRXW0uqodv5nD/xB8MWn+VSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Validity
Not Before: Jan 31 01:30:38 2025 GMT
Not After : Feb 2 01:30:38 2025 GMT
Subject: CN=679c27bf-97a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:9d:9a:dc:64:b1:e2:6e:63:73:55:7b:ae:
a3:9e:24:34:3a:77:45:d0:51:36:42:04:b0:49:19:
40:af:f1:93:3b:0c:31:fa:a5:73:aa:13:c4:14:28:
ca:31:bc:b0:26:23:91:bc:d9:ed:50:44:9c:0c:18:
3a:9d:7a:97:20:50:be:07:eb:82:16:96:a2:9b:63:
e6:06:3b:16:c0:c4:85:4d:ba:7b:4b:99:67:3e:c2:
b5:f0:3e:95:6c:0d:43:09:ff:7b:7c:c0:a4:8f:24:
ab:0e:7a:cd:94:9e:4a:4e:25:cc:c6:0d:95:17:ec:
5c:76:a7:87:c0:d7:3e:67:23:30:6d:e7:03:2e:cd:
2f:81:e3:c7:2f:7e:2e:bd:c0:37:f5:ed:46:3f:4a:
18:1c:69:39:25:78:3a:65:fe:22:02:dd:9b:11:0b:
07:53:cd:50:dc:c2:9b:e8:27:3b:ec:ea:11:a0:1d:
2d:c4:05:c7:dd:90:78:33:9d:a5:69:c3:29:b0:f8:
36:e5:a1:90:4f:80:d5:3f:42:38:8c:26:5c:b8:53:
30:62:23:7f:f4:25:41:db:1a:f9:7f:6a:38:22:da:
6e:c8:03:a1:23:69:c9:60:60:a2:5d:63:a5:2d:89:
d3:7a:6b:7e:73:8e:32:4f:8e:db:bf:a4:21:e3:a1:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9D:72:02:D5:7F:48:96:AD:12:73:DD:4D:DD:54:0E:E5:DB:7B:03
X509v3 Authority Key Identifier:
keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:de:ff:02:10:0b:3f:a0:f3:78:5d:0b:e4:9a:e6:8e:f5:1f:
67:dd:ee:79:f7:9c:e2:5b:d7:4a:08:35:fa:dd:55:df:73:b5:
99:05:58:f5:d4:2a:b1:bb:71:6c:73:81:42:a4:62:80:09:35:
d7:2d:85:73:60:89:24:2f:65:f2:ab:b4:fc:67:ed:a4:a4:85:
30:c8:e9:7f:b7:18:df:db:e5:c1:e5:1a:35:69:d0:ff:86:b7:
4e:12:f1:f5:4f:c3:2e:39:f8:66:88:cf:1f:fb:66:ea:dc:14:
06:a6:27:3b:14:49:36:cb:14:3b:7a:2a:9e:03:33:22:12:22:
04:28:b6:41:ab:02:09:80:1f:e9:cb:18:b7:cc:13:35:be:b9:
61:6f:d5:a2:ac:4f:1b:f5:d0:4d:3c:60:f9:72:1e:e3:6b:8b:
d6:4a:2a:fb:b3:bf:96:6d:f1:81:d9:09:45:a4:5c:cc:16:f7:
ba:94:6e:49:85:ff:fb:76:33:e6:9d:f4:b8:2b:5c:46:b8:3f:
1b:c7:c8:4e:6c:de:65:39:ae:de:83:fe:38:4b:5f:fc:3c:89:
43:a9:ba:5e:27:5a:44:64:17:12:b9:f4:d7:8e:7a:f7:7d:b6:
a7:b0:69:ad:81:b8:f1:5a:1d:36:45:be:50:42:5d:15:a4:3f:
ea:1d:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:25 2025 by rpki-client