Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: Yw+8rcNFuv6fHfXcB24+nIxDyHifFlmg5BuyLRwcnjM=
Subject key identifier: AB:8B:EE:87:8A:D3:E5:43:46:AA:7B:E7:43:0E:83:2A:D4:4B:7C:58
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 024B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 024B
Signing time: Fri 31 Jan 2025 02:33:37 +0000
Manifest this update: Fri 31 Jan 2025 02:33:37 +0000
Manifest next update: Sun 02 Feb 2025 02:33:37 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: ozqPr33iWlINip9DoJBO4RdH2CCfY1zaKraO2vsPsPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Jan 31 02:33:37 2025 GMT
Not After : Feb 2 02:33:37 2025 GMT
Subject: CN=679c3681-068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:7e:a6:cd:75:2a:5b:7d:a5:1b:ed:ec:c8:
3b:48:c1:28:f1:a0:60:91:1e:d3:d0:70:4b:4c:57:
b1:c8:c5:e4:32:ff:98:56:da:4f:e0:fe:9e:f0:f7:
e1:ee:11:fe:48:e6:7c:3b:74:2c:06:2f:c9:fe:2b:
75:55:ad:45:df:d8:49:42:70:d6:67:cd:a1:72:39:
92:4e:5d:a8:03:85:c2:06:12:d0:20:a7:e8:39:1d:
0f:db:01:ae:a7:f1:94:15:d7:d2:d5:b3:ef:b1:dd:
f2:27:20:e3:52:45:95:56:db:a3:1d:79:ee:ac:b9:
3e:60:1b:9b:85:34:6b:be:ec:10:6f:d4:a0:1a:12:
14:ca:dc:87:4c:d8:84:d5:63:f2:34:9b:d3:a7:bb:
51:92:64:b1:8b:6e:7b:bc:ab:be:66:b1:23:55:4c:
b0:29:a3:e2:92:fd:5b:0c:ff:f4:01:e5:98:c9:2d:
9c:f5:b8:77:c6:65:dd:c3:06:25:f2:91:9a:74:56:
22:79:34:cc:16:f4:3a:c4:64:f2:93:b1:51:5c:a4:
ac:d6:aa:e8:b2:47:d5:6d:6d:6f:1e:d8:85:c2:f7:
3b:ff:75:a2:d8:d6:f4:d5:8a:3f:5c:57:45:2a:6d:
5b:a1:ca:26:ae:28:e1:06:31:0c:35:e7:7f:d7:f4:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8B:EE:87:8A:D3:E5:43:46:AA:7B:E7:43:0E:83:2A:D4:4B:7C:58
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:c6:3a:22:fd:0f:b3:47:72:a2:d5:e3:9a:c3:ff:00:12:
c3:3c:5c:fc:1a:7c:f2:0c:73:cb:37:ee:4c:ab:0c:ce:82:bd:
73:05:53:1f:fc:cd:0b:df:ed:1f:9a:39:80:c6:1e:d7:11:b4:
02:ac:d2:85:50:15:d6:e9:f8:25:2b:cb:72:dc:0d:24:a9:08:
98:e8:25:ff:2e:26:66:25:c2:8a:53:c8:ca:f2:1f:c3:48:ac:
de:8d:f8:17:e4:85:0a:8f:52:fe:ef:78:29:e8:58:fd:4f:8f:
c6:ee:2f:38:24:88:24:a8:e1:c9:69:20:0b:c2:60:36:aa:a9:
c1:dc:76:28:b0:51:8f:9c:02:e4:b6:18:d7:54:62:5c:d5:1a:
c5:aa:4f:1e:f9:89:7a:bb:1d:cb:65:68:b8:9a:03:a0:1c:7d:
01:ba:66:92:12:a1:42:bf:09:b3:9a:c4:15:72:fe:c1:fe:9e:
90:a6:71:ff:05:3c:66:9c:1c:4e:0c:f4:f0:09:12:b5:de:81:
a1:3d:e4:41:f2:70:0f:57:fb:63:c0:1a:82:f0:a1:f2:11:2b:
3a:eb:62:b8:f6:a4:6d:7e:c4:e5:c6:2d:a8:5c:3a:b7:5a:7f:
9d:ce:0b:1c:b1:99:2b:1f:aa:6d:2c:02:ca:06:33:e0:69:27:
1f:a0:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:23 2025 by rpki-client