
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
File: hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json)
Hash identifier: DMT4b4Iq8Bc/VZrNIyGlEbYX1RCc3GjbEUvVCGA1UUY=
Subject key identifier: 5A:69:50:2E:F9:50:DE:03:A6:7C:D8:4D:32:BA:F0:08:1C:C3:16:0C
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Certificate issuer: /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial: D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
Manifest number: D7
Signing time: Fri 31 Jan 2025 03:01:15 +0000
Manifest this update: Fri 31 Jan 2025 03:01:14 +0000
Manifest next update: Sun 02 Feb 2025 03:01:14 +0000
Files and hashes: 1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: Sc9+WvBE4B8TwvhhdgIwzN04YeF8QCYqCd4bvYNVrv8=)
2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=)
3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Validity
Not Before: Jan 31 03:01:14 2025 GMT
Not After : Feb 2 03:01:14 2025 GMT
Subject: CN=679c3cfb-ffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:a3:e4:2e:d3:b5:88:5d:46:74:47:1b:a5:
7f:17:b5:d1:4e:6b:d5:b9:39:14:2d:cd:f1:81:51:
e5:49:e2:cf:08:8e:e0:ad:19:a7:b4:fc:75:7b:7f:
29:1d:cb:4d:2a:9f:d2:f2:c1:ad:68:f3:db:73:48:
38:cf:2a:dc:da:10:3b:9f:13:4b:f2:86:19:14:ad:
25:99:fb:b8:6a:27:a8:53:da:c9:86:bd:e2:1a:a3:
9a:0f:7f:c0:89:d3:8f:c7:ad:86:af:f4:07:24:22:
41:d2:d6:c0:0b:5e:26:0b:30:2b:a6:b8:73:e1:32:
e4:3d:10:97:1d:ce:4b:c7:99:96:4b:5a:48:70:0d:
d0:44:7b:2d:14:ba:39:37:18:bf:ad:c0:04:41:50:
b5:98:15:7a:f3:3c:0a:fe:f6:9b:d4:e8:32:e0:75:
38:aa:40:60:1e:7c:f6:0f:a0:0e:d0:c2:79:85:92:
d1:0b:ee:e2:51:95:f0:b4:c8:a3:dd:03:cb:47:7f:
cb:40:d6:2c:63:bf:ed:31:f3:48:98:81:d6:e3:81:
45:b6:ae:57:27:c0:eb:cf:6e:e1:27:79:41:5e:c7:
eb:3d:ba:d5:7e:d3:d7:94:8a:37:5e:0f:90:77:13:
23:11:f4:44:bb:d1:19:97:54:e0:c5:62:d3:a0:4b:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:50:2E:F9:50:DE:03:A6:7C:D8:4D:32:BA:F0:08:1C:C3:16:0C
X509v3 Authority Key Identifier:
keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:cf:2b:ed:01:94:03:50:65:02:c7:c9:ab:3e:e2:6d:39:34:
93:fe:db:9f:73:79:05:5a:e7:55:e3:12:51:4c:78:02:55:1d:
a8:61:f6:d8:cc:6f:30:99:8b:75:d0:11:1a:c5:cc:a7:06:54:
63:29:00:34:43:c0:60:3b:19:3e:5c:09:25:6a:b6:a5:0c:1a:
44:fb:34:d0:a5:00:c8:7f:be:82:07:aa:cd:e6:f3:59:92:6d:
93:a0:83:b3:ee:98:f2:4f:34:b5:64:c7:6e:2b:52:4e:d1:86:
d6:23:16:d0:f3:40:1b:ac:39:8b:d5:57:15:2c:24:8d:7c:9b:
f5:34:69:c6:69:ff:41:91:2b:5f:b7:da:d6:ce:61:9b:52:59:
28:cc:14:56:2b:5a:5a:e0:f8:46:6a:3f:60:c6:97:29:58:2d:
f9:73:5f:76:14:d7:65:33:b6:7f:6b:70:c6:18:8b:4b:e6:5f:
f0:a3:22:bc:10:d0:9c:60:b0:90:f9:96:8e:81:f9:cf:57:c5:
44:a2:fd:94:cd:98:c0:a7:cd:48:1f:43:d8:a1:2f:27:d0:17:
c1:8f:fc:64:a6:3f:2a:16:45:e4:7f:38:7b:8c:e4:64:4c:4b:
3e:7b:b1:ee:af:54:e0:2b:e7:0f:ff:eb:80:77:64:5c:a1:00:
ac:95:b2:17
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEY0QTFBRjExMC8GA1UEBRMoODRGMDFGQzMzOEREMkMxNDFFQTQ1RDMxN0IyMTFG
NzZDRjVEMDAxNTAeFw0yNTAxMzEwMzAxMTRaFw0yNTAyMDIwMzAxMTRaMBgxFjAU
BgNVBAMTDTY3OWMzY2ZiLWZmZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVmaPkLtO1iF1GdEcbpX8XtdFOa9W5ORQtzfGBUeVJ4s8IjuCtGae0/HV7
fykdy00qn9Lywa1o89tzSDjPKtzaEDufE0vyhhkUrSWZ+7hqJ6hT2smGveIao5oP
f8CJ04/HrYav9AckIkHS1sALXiYLMCumuHPhMuQ9EJcdzkvHmZZLWkhwDdBEey0U
ujk3GL+twARBULWYFXrzPAr+9pvU6DLgdTiqQGAefPYPoA7QwnmFktEL7uJRlfC0
yKPdA8tHf8tA1ixjv+0x80iYgdbjgUW2rlcnwOvPbuEneUFex+s9utV+09eUijde
D5B3EyMR9ES70RmXVODFYtOgS0qXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWmlQ
LvlQ3gOmfNhNMrrwCBzDFgwwHwYDVR0jBBgwFoAUhPAfwzjdLBQepF0xeyEfds9d
ABUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGNEExLzc5ODAyNkQwM0Y1QzExRUZCODNDNzk3RTc2MkU5NTFBL2hQQWZ3
empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hQQWZ3empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OEY0QTEvNzk4MDI2RDAzRjVDMTFFRkI4M0M3OTdFNzYy
RTk1MUEvaFBBZnd6amRMQlFlcEYweGV5RWZkczlkQUJVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQzyvtAZQDUGUCx8mrPuJtOTST/tuf
c3kFWudV4xJRTHgCVR2oYfbYzG8wmYt10BEaxcynBlRjKQA0Q8BgOxk+XAklaral
DBpE+zTQpQDIf76CB6rN5vNZkm2ToIOz7pjyTzS1ZMduK1JO0YbWIxbQ80AbrDmL
1VcVLCSNfJv1NGnGaf9BkStft9rWzmGbUlkozBRWK1pa4PhGaj9gxpcpWC35c192
FNdlM7Z/a3DGGItL5l/woyK8ENCcYLCQ+ZaOgfnPV8VEov2UzZjAp81IH0PYoS8n
0BfBj/xkpj8qFkXkfzh7jORkTEs+e7Hur1TgK+cP/+uAd2RcoQCslbIX
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:26:17 2025 by rpki-client