Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: Re/v39Wvn4alKiFzwacSJQiQsVvOT9mgayw2hLorqZk=
Subject key identifier: D1:89:49:D9:0C:85:8E:FF:3F:1F:D9:C5:59:31:E0:D3:94:B1:29:7C
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 0561
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 0561
Signing time: Fri 31 Jan 2025 01:43:37 +0000
Manifest this update: Fri 31 Jan 2025 01:43:37 +0000
Manifest next update: Sun 02 Feb 2025 01:43:37 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: lEizJ1qVBcChscjsRKpy+J3ajFk6156rqvJf4pbf8NM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1377 (0x561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Validity
Not Before: Jan 31 01:43:37 2025 GMT
Not After : Feb 2 01:43:37 2025 GMT
Subject: CN=679c2ac9-145e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:52:77:c8:16:cd:2e:57:72:ab:3e:ef:13:
be:da:5c:53:84:94:d5:c6:09:ac:fc:21:d9:87:e6:
34:4f:c6:2d:5f:8c:23:0c:59:fd:20:02:46:e0:ef:
c6:4a:0f:57:df:9f:03:07:e8:2d:c4:5c:8b:d3:aa:
3b:55:49:dc:5b:26:4d:da:d0:58:f7:12:d3:ee:13:
93:8a:67:ea:e7:00:3d:c5:6d:f8:4c:fe:f8:33:3d:
d7:01:ed:29:b5:bd:a2:ad:6d:d4:63:7c:95:79:da:
8b:42:ea:00:ee:a8:82:44:b9:7e:48:5d:1c:a0:4a:
9c:06:5d:dc:5b:6e:05:02:27:0d:a5:0c:79:29:56:
17:50:0d:8f:f3:22:34:be:33:07:8f:3f:a5:dd:b1:
d3:e1:4f:d7:a6:d0:60:58:c5:35:4a:e7:29:de:eb:
36:50:d9:bb:fc:e9:35:d5:26:78:e0:66:f9:16:47:
51:dd:8b:a0:73:b1:61:cf:5a:54:b9:24:8a:36:98:
76:a3:d5:b2:80:1e:49:c9:16:eb:90:e0:0a:29:b9:
7c:cd:3f:02:e1:a2:af:8e:2d:75:13:9a:85:3a:d4:
f0:c8:33:1d:01:e2:8e:a8:a7:38:56:25:75:e3:9c:
92:63:09:20:a1:e8:47:a9:a8:f0:11:63:a6:92:8b:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:49:D9:0C:85:8E:FF:3F:1F:D9:C5:59:31:E0:D3:94:B1:29:7C
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:dd:7b:d1:0c:ce:64:f5:b3:7b:c3:a5:61:59:25:cc:a8:1d:
88:8e:9b:8c:7f:e2:76:f1:c9:0a:e9:83:e1:48:4f:8c:6e:90:
d6:4d:07:b6:71:31:e3:ab:43:d0:09:f2:89:cd:fa:11:45:1a:
6d:dd:03:29:a4:bf:7e:9f:45:05:77:cc:e6:9d:ac:fc:b9:76:
68:08:eb:ca:ab:4b:46:f5:5e:8b:6d:f2:11:39:68:f8:52:f8:
d3:a3:8b:0a:2a:16:c6:90:6d:49:11:53:6f:a4:f4:a5:01:26:
16:3d:c2:2c:91:19:a9:1f:6f:ea:1b:45:d6:10:b1:4d:8f:95:
1e:36:be:9f:7d:63:25:da:c9:78:5f:6e:69:e7:17:34:82:c5:
66:89:90:bb:b7:a5:db:d2:e5:d7:cf:1b:43:63:74:8f:bf:59:
e2:60:f8:46:01:ee:3f:a3:5d:0a:8c:32:9b:0c:fd:62:3a:bb:
62:07:f2:da:8c:9b:3a:4b:44:c5:5b:ac:fb:73:10:73:d4:27:
29:55:58:3f:d9:42:9f:c8:46:23:cc:fb:f4:83:1d:06:00:a2:
9f:89:cf:18:1d:a3:23:e7:db:bc:82:0c:e3:6e:79:2e:5b:a0:
9c:92:23:ba:5f:75:64:e1:b6:3d:a6:fa:a3:a7:bd:2d:41:cf:
34:0c:1f:06
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBRjExMC8GA1UEBRMoNzFGNkUzNUUwMTBCQzc4N0Q4OUEwQjRCQTkzM0Q5
OTZGQUQ0REFEMjAeFw0yNTAxMzEwMTQzMzdaFw0yNTAyMDIwMTQzMzdaMBgxFjAU
BgNVBAMTDTY3OWMyYWM5LTE0NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDl1J3yBbNLldyqz7vE77aXFOElNXGCaz8IdmH5jRPxi1fjCMMWf0gAkbg
78ZKD1ffnwMH6C3EXIvTqjtVSdxbJk3a0Fj3EtPuE5OKZ+rnAD3FbfhM/vgzPdcB
7Sm1vaKtbdRjfJV52otC6gDuqIJEuX5IXRygSpwGXdxbbgUCJw2lDHkpVhdQDY/z
IjS+MwePP6XdsdPhT9em0GBYxTVK5yne6zZQ2bv86TXVJnjgZvkWR1Hdi6BzsWHP
WlS5JIo2mHaj1bKAHknJFuuQ4AopuXzNPwLhoq+OLXUTmoU61PDIMx0B4o6opzhW
JXXjnJJjCSCh6EepqPARY6aSi3XNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0YlJ
2QyFjv8/H9nFWTHg05SxKXwwHwYDVR0jBBgwFoAUcfbjXgELx4fYmgtLqTPZlvrU
2tIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0FBNzU1ODJDQzdDNDExRUJCNTIwQTY2OEY4QUVBMjI4L2NmYmpY
Z0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NmYmpYZ0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgyQTEvQUE3NTU4MkNDN0M0MTFFQkI1MjBBNjY4RjhB
RUEyMjgvY2ZialhnRUx4NGZZbWd0THFUUFpsdnJVMnRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBk3XvRDM5k9bN7w6VhWSXMqB2IjpuM
f+J28ckK6YPhSE+MbpDWTQe2cTHjq0PQCfKJzfoRRRpt3QMppL9+n0UFd8zmnaz8
uXZoCOvKq0tG9V6LbfIROWj4UvjTo4sKKhbGkG1JEVNvpPSlASYWPcIskRmpH2/q
G0XWELFNj5UeNr6ffWMl2sl4X25p5xc0gsVmiZC7t6Xb0uXXzxtDY3SPv1niYPhG
Ae4/o10KjDKbDP1iOrtiB/LajJs6S0TFW6z7cxBz1CcpVVg/2UKfyEYjzPv0gx0G
AKKfic8YHaMj59u8ggzjbnkuW6CckiO6X3Vk4bY9pvqjp70tQc80DB8G
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:06:57 2025 by rpki-client