Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File: a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier: mwX9mOPRY5SPnTGnv2HVi6AiwHvqlFzP5f1bZ7Mbfrc=
Subject key identifier: DC:D0:68:A7:05:07:37:64:1C:71:08:B2:D1:56:A0:6B:4B:F7:D4:04
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer: /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial: 0690
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number: 068A
Signing time: Fri 31 Jan 2025 01:30:48 +0000
Manifest this update: Fri 31 Jan 2025 01:30:47 +0000
Manifest next update: Sun 02 Feb 2025 01:30:47 +0000
Files and hashes: 1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: HDiB03ymwWacjv0BhVzmO75U9n4lMlVwDMLEopmsIQY=)
2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1680 (0x690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Validity
Not Before: Jan 31 01:30:47 2025 GMT
Not After : Feb 2 01:30:47 2025 GMT
Subject: CN=679c27c7-dce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:c1:f9:a0:be:82:f9:d9:6d:88:1b:6e:df:
c8:47:0e:d9:90:db:17:34:b6:23:30:19:2e:87:84:
7e:85:36:6d:c0:d0:0b:aa:be:a1:91:78:e1:26:48:
7d:dd:3d:a8:71:29:34:03:99:3c:72:3e:21:c0:a8:
75:77:50:e3:4d:8e:19:37:27:c9:b5:bc:0d:40:f8:
8d:bf:98:3d:63:2e:2f:79:89:df:36:69:20:91:1a:
9f:77:35:80:70:9e:f7:62:64:26:bd:5b:19:c3:fa:
4e:6a:6d:09:b5:ac:6a:94:58:5b:10:28:0b:4c:30:
42:49:16:cc:ec:e3:b9:6d:28:33:4b:c8:98:1d:0f:
b0:35:f4:be:47:54:18:a0:ff:fb:e5:d8:58:7b:5d:
42:a8:29:dd:bd:59:28:c3:ac:bd:7e:65:d5:89:6f:
26:b9:48:eb:fd:57:79:62:d8:db:3f:ef:9e:d9:77:
df:d0:85:68:88:8a:e2:ea:f3:71:61:38:2e:9d:83:
79:10:0f:ad:9c:aa:d8:51:b7:cc:4f:44:09:b3:e4:
ba:7a:c0:85:c3:1c:9b:98:f5:14:31:ae:58:1a:ac:
58:98:1d:29:42:e5:7b:93:2c:ca:fd:f8:05:fe:5e:
77:c7:3e:f4:5e:e1:41:3b:8b:8e:6f:49:0c:15:de:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:68:A7:05:07:37:64:1C:71:08:B2:D1:56:A0:6B:4B:F7:D4:04
X509v3 Authority Key Identifier:
keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:aa:a5:18:39:47:85:9e:c2:b7:fe:19:fb:c9:25:6b:63:a8:
37:29:7f:fa:d5:97:ca:43:72:34:84:ce:bf:ae:76:4e:96:10:
d5:ba:aa:12:25:ca:74:44:11:c8:63:8a:ac:26:b4:9d:ae:ce:
27:ba:b0:c2:43:e3:8a:4d:0c:00:03:ae:c5:53:2f:cb:7a:e8:
5b:ac:27:41:7c:9f:88:89:ff:b0:ab:61:fd:8f:03:fb:6a:75:
3f:64:b0:99:37:51:a8:fc:a6:23:54:33:05:a7:b1:c4:8e:d8:
be:8f:d6:a6:dd:e3:53:da:1a:b1:5d:1b:e7:b8:69:0b:70:33:
03:a0:3c:62:c2:93:25:0c:de:6a:32:11:e6:6a:30:69:2a:ae:
e2:6c:bb:59:48:3a:bd:a9:99:85:fb:98:f8:85:78:3d:0b:dd:
e3:99:1b:67:68:53:3a:dd:40:c5:0f:07:a7:a3:fa:3f:68:a4:
84:e1:73:33:f6:71:80:de:a1:86:14:be:f9:c2:da:33:9b:a7:
fc:e2:eb:f5:3a:6d:9d:98:de:8b:1b:4e:a4:24:51:cd:3d:c7:
1d:79:5b:15:d6:1c:64:f3:df:44:17:b1:c1:ae:af:e6:82:ae:
e5:f1:73:6f:af:0b:99:13:2c:f2:f9:73:00:c1:9a:40:b3:cc:
b6:28:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:10:17 2025 by rpki-client