Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File: ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier: EL7Ot/+XeblBZpvVuF0UxVOkMboWV0qN/HaHjGhcosA=
Subject key identifier: 69:1E:E6:75:1B:9B:B0:26:44:AD:60:88:6D:F4:64:A7:5A:7D:0C:E5
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 0D4D
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number: 0D43
Signing time: Fri 31 Jan 2025 00:56:08 +0000
Manifest this update: Fri 31 Jan 2025 00:56:07 +0000
Manifest next update: Sun 02 Feb 2025 00:56:07 +0000
Files and hashes: 1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: frWPO7OCasqEzw6xGOQhYigs3LkjQU3yreFmayfhGIo=)
2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3405 (0xd4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Jan 31 00:56:07 2025 GMT
Not After : Feb 2 00:56:07 2025 GMT
Subject: CN=679c1fa8-ff03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:c3:ed:6c:ef:6b:94:18:bb:a1:b3:5e:97:
e5:47:68:88:55:e6:37:fc:77:36:d5:5a:90:88:d5:
67:d5:6b:1a:a8:c6:99:6d:65:a4:d3:5c:0d:54:64:
e3:9f:84:63:2d:36:5c:80:0a:99:95:53:cf:58:93:
89:2c:8a:25:7a:fa:74:64:41:c3:c4:3f:5c:b6:78:
1b:a9:ce:3e:f7:4c:78:08:a3:a5:2d:a9:42:5a:ed:
4f:ae:1c:55:00:1b:fa:ce:3a:46:36:9a:4e:a7:b5:
81:27:24:f8:61:e2:74:d0:f7:ed:38:20:c7:0a:6e:
93:97:d7:c6:9f:91:c0:24:79:e3:17:9a:59:9f:59:
16:65:42:59:c8:f8:a9:cf:e0:aa:10:b6:65:8a:29:
5b:c0:1e:14:0f:69:28:a1:9b:66:09:ea:5b:cf:74:
1a:31:02:e2:86:8e:ab:aa:a6:64:47:eb:4d:02:5a:
08:6e:d5:45:74:7f:e0:2e:eb:0d:42:ed:4b:fe:30:
b5:21:e6:10:d7:cc:96:f8:42:04:2d:7e:da:0e:bd:
00:7e:ae:39:da:40:da:74:ba:f1:78:17:a7:ff:3e:
f2:77:4d:90:5c:98:c5:fe:16:ee:a6:e2:61:9b:c4:
0a:35:67:4a:f7:8d:d8:58:9f:be:f1:e8:1f:5d:3f:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1E:E6:75:1B:9B:B0:26:44:AD:60:88:6D:F4:64:A7:5A:7D:0C:E5
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:c6:75:ac:ea:66:a0:02:a8:b4:c4:3a:fe:da:fd:4d:59:20:
e9:56:41:55:aa:c5:07:d1:a4:92:cb:0f:e8:24:b6:5c:43:f4:
7f:65:ae:a0:0b:de:16:ed:59:fa:20:48:b0:80:85:48:56:00:
8f:8e:16:68:34:af:50:3a:28:b5:bc:92:b9:8c:72:a7:94:64:
ce:da:a6:dd:53:f9:32:70:bd:20:b7:21:9c:2b:a5:fb:a6:08:
2d:aa:b2:d7:fd:b6:55:95:8b:99:28:31:1e:d4:2e:cf:b5:7b:
ee:8a:05:55:d5:2b:03:3d:e1:8f:08:79:c2:4c:9c:4d:50:28:
6d:4f:72:04:80:7d:af:bf:98:86:b6:14:9d:66:a2:7c:03:39:
94:a9:07:9f:0e:63:d3:0b:dc:93:8c:f1:a1:e6:d0:89:bd:0d:
49:66:05:9d:be:7a:13:31:06:3e:fa:d5:0c:0c:3a:a5:44:be:
52:52:96:3a:ee:01:7a:29:41:3f:d3:0e:4b:07:18:b0:3d:73:
30:b6:60:82:a7:07:35:0a:c3:41:79:c4:db:55:b2:07:8a:03:
0a:a2:3b:d7:7d:7b:94:81:4b:58:77:03:28:28:ed:9b:3b:38:
3b:5a:6a:f9:a8:bf:ef:5e:0c:c3:27:d6:42:00:db:00:20:ad:
d9:7a:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:04:10 2025 by rpki-client