Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier: Cs0dohvnOGs4KsbCmj2fApCaVDyQIY997V6Sea2yQq0=
Subject key identifier: 89:98:19:4E:7B:24:71:4F:1F:DD:04:5E:52:4C:76:CB:05:5B:3D:02
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer: /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial: 07AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number: 07A9
Signing time: Fri 31 Jan 2025 01:21:30 +0000
Manifest this update: Fri 31 Jan 2025 01:21:30 +0000
Manifest next update: Sun 02 Feb 2025 01:21:30 +0000
Files and hashes: 1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: j54yyzEx/8iC5DbzbkL+bAHjFePyMXW9YoPL4YR4Tg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Validity
Not Before: Jan 31 01:21:30 2025 GMT
Not After : Feb 2 01:21:30 2025 GMT
Subject: CN=679c259a-602e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:4d:8f:61:9b:15:36:f0:3d:d2:db:5e:ce:
e4:34:d2:4b:d0:7a:2d:1a:23:05:89:e7:6b:af:b4:
47:c5:44:19:98:b5:cc:cc:e3:5a:e7:7a:73:46:18:
3b:14:ec:2a:95:8b:95:4c:46:b5:dd:72:c5:a7:e3:
75:e0:9f:c4:3c:b0:66:b2:cf:99:2c:85:98:ee:71:
c3:62:b3:bd:3f:d3:ee:3c:15:89:c6:3c:6b:a7:24:
72:5a:06:c8:7a:21:81:9a:ca:c8:eb:1d:e5:3f:7b:
74:5c:13:49:7f:00:e4:7d:ce:11:ea:ab:32:81:2d:
fb:53:84:81:43:e7:17:d9:33:41:e3:b2:a6:de:3f:
84:a5:8e:d7:00:7d:d8:c2:84:66:1a:22:2e:ee:53:
ee:77:c2:d3:30:22:e9:42:89:9b:c4:08:3b:de:29:
48:ba:44:52:d3:8a:a7:02:48:9e:00:f2:e1:55:e2:
47:91:0a:1a:42:40:7f:98:6f:eb:f1:cb:38:07:c8:
9d:ac:44:e4:e9:62:56:59:25:aa:c2:5f:2c:b1:b1:
41:a0:92:0b:16:de:cf:80:80:27:df:07:45:d8:27:
6d:c2:2c:b3:f5:f8:aa:bd:a1:13:34:0f:ae:6a:c4:
31:7d:6f:37:a5:c8:c9:79:6a:00:66:b7:bd:d7:99:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:19:4E:7B:24:71:4F:1F:DD:04:5E:52:4C:76:CB:05:5B:3D:02
X509v3 Authority Key Identifier:
keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:f7:fe:b7:47:7f:53:e4:f5:f5:5a:7d:5f:a5:e2:3a:a8:cc:
49:7e:96:65:36:71:43:38:27:5a:01:67:9d:73:96:2e:6c:47:
b2:26:36:79:8e:7d:90:b6:70:71:3b:f5:af:b0:f5:2e:e0:f4:
69:01:c0:f9:f9:1b:c0:b8:1c:3e:84:99:e2:67:58:ae:fc:9a:
36:d2:e8:3d:fb:04:4f:f7:f9:62:01:6d:74:33:77:6f:ac:df:
24:53:bb:60:7f:45:dc:61:35:b2:30:42:45:77:6f:11:98:fd:
28:ca:d4:9f:ed:de:7d:8d:fc:bd:20:83:6c:1e:76:15:6b:97:
82:14:8a:a3:5c:50:2e:1a:80:29:f8:29:20:01:0b:49:02:71:
47:40:ee:da:e8:7f:af:df:b3:bc:02:ad:52:e7:15:4b:fa:26:
a7:fc:03:63:7e:63:48:fa:e9:d4:75:e3:cd:ae:48:ad:df:6d:
4d:97:d4:f6:3e:07:be:18:fc:7a:7e:00:32:eb:d2:1d:df:db:
d6:6c:2a:76:7a:0c:b2:42:06:b9:9e:fc:e2:35:d0:03:c0:ff:
55:ae:27:8d:4b:d7:f6:91:97:41:24:26:54:82:ef:f8:b4:a9:
da:1a:fc:ec:95:bc:ee:bf:f3:3f:75:70:e8:00:cc:79:c5:cd:
f9:07:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:13 2025 by rpki-client