Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File: Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier: Ee2I3GN7TluInoOVL+R/3HZBTDjywo/GEwM0vtQkRZM=
Subject key identifier: 7B:77:8F:06:04:53:9C:BD:18:0C:9A:A4:BE:5D:2D:05:FF:E5:76:4F
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer: /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial: 0118
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number: 0117
Signing time: Fri 31 Jan 2025 06:33:34 +0000
Manifest this update: Fri 31 Jan 2025 06:33:33 +0000
Manifest next update: Sun 02 Feb 2025 06:33:33 +0000
Files and hashes: 1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: 9iDAgyAaKtvqmWQiMr7ohT81BJ23yiB8XSih6bC5iw8=)
2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Validity
Not Before: Jan 31 06:33:33 2025 GMT
Not After : Feb 2 06:33:33 2025 GMT
Subject: CN=679c6ebe-634a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:ed:60:6e:bf:a3:19:a4:1b:e9:05:2c:c2:
e7:81:78:aa:ff:8f:67:39:39:82:aa:67:5f:b6:bc:
5d:b4:86:98:26:b5:3c:8d:9a:0b:71:42:a5:9e:3b:
ef:26:17:9b:9e:7b:66:f2:96:d2:b2:0f:b5:6f:37:
b1:18:36:f1:00:6e:6b:06:5c:76:3b:b5:1a:92:fe:
c0:fd:fe:14:c6:f8:d9:ec:6a:d9:a1:c2:cf:3b:54:
49:5b:f7:cc:48:45:1b:64:06:f3:80:fd:d2:f1:49:
cb:3b:f6:53:64:e4:2b:b8:01:9f:5e:1d:25:c8:1a:
20:1c:8a:7f:e0:88:f4:46:b2:e2:33:07:20:60:f3:
02:a2:cb:a7:67:24:ba:51:c4:61:42:68:3e:16:7d:
4f:a5:43:24:23:ce:fe:a0:b5:64:9b:55:d8:f8:a1:
17:24:d5:e1:fd:79:78:5f:a4:c8:dd:8e:da:2a:b1:
45:63:8d:cb:c1:aa:20:6d:c6:66:f7:ac:68:89:d8:
43:eb:8f:f8:05:81:9a:c4:52:6a:38:5a:38:19:42:
c5:f0:2f:76:a9:e0:cf:65:8a:a9:c8:4a:9d:34:34:
d0:24:bc:93:e8:3b:e2:36:54:3c:5b:b3:35:9a:f1:
af:88:e5:27:74:c2:04:19:83:d1:50:57:a8:1a:d1:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:77:8F:06:04:53:9C:BD:18:0C:9A:A4:BE:5D:2D:05:FF:E5:76:4F
X509v3 Authority Key Identifier:
keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:fb:12:8c:c3:ad:cd:ca:a5:92:55:b0:c4:a6:2d:ad:c0:59:
92:81:a8:a7:86:b5:88:d7:22:16:e6:9e:f7:1d:92:71:39:03:
71:47:1b:f2:a4:7c:bf:9c:52:d3:39:0c:79:14:4d:86:ca:47:
f9:d4:1f:d4:16:1a:be:10:ed:e4:d0:c3:b5:df:f9:01:e4:d5:
4c:24:9e:d7:a8:b5:cb:41:b8:8e:c5:ec:35:c6:f6:53:cf:62:
69:af:ee:fd:ef:f1:83:a7:c4:e1:3a:de:91:cd:82:65:48:8f:
4f:8d:55:c7:4b:38:7f:9f:d7:13:2b:42:4d:e7:8b:55:92:f2:
2b:8c:e9:db:97:65:21:fe:ee:8d:b5:6f:55:81:3b:8a:a4:0b:
86:40:54:8e:b4:38:bd:2a:85:17:e3:44:20:9c:48:16:ab:02:
39:4e:ad:5c:37:0e:3b:e6:1c:e4:55:3e:20:78:4e:19:1f:34:
67:53:44:29:d3:f8:50:df:be:da:f4:3e:a5:f4:d2:fc:fb:8f:
20:12:96:02:af:47:2c:c0:11:14:34:0d:85:37:86:fa:1c:f7:
1e:53:fd:59:39:0e:07:b0:62:54:43:39:42:b8:b4:b8:2f:3a:
39:95:0e:82:ee:f8:ac:59:59:36:54:3b:41:31:b8:1b:49:81:
1b:b5:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:26:55 2025 by rpki-client