Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
File: nHonja2J7WPpPiUhm0zaALEAYZM.mft (raw, json)
Hash identifier: +RT6tILCcTS+8t/qkROlDyksMQgGt02Z7NfxeswRWmg=
Subject key identifier: 87:C5:28:9A:36:A6:BD:19:FD:51:75:F3:6B:98:B0:94:89:C8:20:1E
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Certificate issuer: /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial: 04FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
Manifest number: 04FC
Signing time: Fri 31 Jan 2025 01:50:16 +0000
Manifest this update: Fri 31 Jan 2025 01:50:16 +0000
Manifest next update: Sun 02 Feb 2025 01:50:16 +0000
Files and hashes: 1: nHonja2J7WPpPiUhm0zaALEAYZM.crl (hash: EO1sgFsI6z+7C9I4yO6uTPYNWwpuA8haYuK1gtKD638=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Validity
Not Before: Jan 31 01:50:16 2025 GMT
Not After : Feb 2 01:50:16 2025 GMT
Subject: CN=679c2c58-ecc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:47:e8:a5:0d:c7:dc:2a:76:7b:ad:21:6f:
64:af:36:39:c5:02:ad:89:0a:5a:1c:63:b7:91:da:
79:50:07:0f:0e:78:ea:38:21:72:c1:9e:75:7d:7d:
a2:da:20:68:24:6d:05:fc:4b:a0:ef:da:59:82:d3:
56:50:06:2c:d1:bd:42:8e:8e:a7:4e:b5:29:d4:4d:
76:67:d8:22:4b:28:c5:89:fc:be:02:2b:fe:ee:85:
e7:51:32:ac:6d:8b:22:8c:90:e9:9e:b6:9e:16:c5:
3f:a4:08:3a:4a:6a:f3:30:a4:bd:5c:ce:c2:58:c0:
a5:b5:40:c3:e5:33:ea:d9:d6:5a:8f:f5:55:6e:b2:
b4:9d:cd:96:dd:80:ad:7f:bb:fd:e7:29:ef:3c:ee:
3c:12:66:af:22:3c:9c:50:be:2a:53:2f:9c:c6:ea:
3f:df:1a:11:7d:89:bc:25:a6:45:12:5a:2f:5a:dd:
7b:ab:e1:ee:8f:9a:9f:63:86:79:9a:63:14:80:d4:
c9:4e:97:33:6a:7c:e9:1b:13:28:49:da:26:8d:f3:
b9:c4:e8:9a:73:fd:8c:68:e4:61:87:f8:0a:c8:12:
5a:14:36:77:2d:a7:bb:db:73:99:61:0e:9b:83:95:
7c:6f:ca:0b:93:f2:17:d8:7c:1d:7b:cd:8c:0d:6a:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:28:9A:36:A6:BD:19:FD:51:75:F3:6B:98:B0:94:89:C8:20:1E
X509v3 Authority Key Identifier:
keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:83:72:3b:4f:88:6e:4d:75:d7:b8:10:2b:57:13:91:ef:e0:
11:dd:de:8e:88:3f:03:a8:20:de:b7:26:0c:18:9e:bf:db:a0:
01:00:db:da:35:19:15:19:18:9d:87:b6:77:17:dd:8c:c8:0f:
45:36:b9:79:7e:b4:2c:62:c3:84:d8:d6:87:ae:cb:7f:dd:d4:
04:0b:bc:e4:10:e2:f0:de:7c:9d:d7:b8:bb:68:0f:5a:48:12:
fe:1e:f0:e2:8b:8e:41:31:eb:71:75:b4:57:8a:53:9a:47:7c:
74:58:97:bb:19:2e:4c:2f:9b:66:ec:ca:2c:c4:f4:2d:13:43:
f7:53:20:98:25:01:7e:aa:df:42:7a:6c:aa:08:3a:d9:50:1d:
4a:6e:24:84:b9:4e:b9:13:f1:0c:b6:f0:ee:bd:84:eb:20:0f:
b4:1f:6c:f3:e3:3a:c4:09:e5:7e:7c:cc:1a:ba:a8:27:ef:b0:
80:fb:ea:52:f8:9e:c5:aa:e6:9b:b2:12:f0:d5:81:f3:fe:55:
7e:cc:45:39:88:07:1a:55:db:b0:39:38:da:10:e0:3e:9d:22:
64:7a:b3:13:28:70:f6:2a:e9:c8:3e:5e:b8:5b:97:4b:bc:d5:
e6:e3:a7:ea:7c:e7:ed:34:f8:e4:3b:55:ce:66:2c:25:ca:b3:
50:0d:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:50:57 2025 by rpki-client