Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File: JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier: yjRQp9lj+Cl1unFv3DGWffzugiLd5T/HGAnpJA9RGag=
Subject key identifier: 5B:3A:1A:C6:D5:00:5B:CA:05:D2:88:AB:02:24:6A:6E:86:61:59:47
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer: /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial: 042F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number: 042D
Signing time: Fri 31 Jan 2025 02:01:01 +0000
Manifest this update: Fri 31 Jan 2025 02:01:00 +0000
Manifest next update: Sun 02 Feb 2025 02:01:00 +0000
Files and hashes: 1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: S0yqDl6FAQKA5wYUaUnVW83dlzeSXBkdLrEXnetkStw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071 (0x42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Validity
Not Before: Jan 31 02:01:00 2025 GMT
Not After : Feb 2 02:01:00 2025 GMT
Subject: CN=679c2edd-013d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:c1:a5:0d:35:53:12:90:5c:1c:e3:66:08:
c8:cb:03:7c:75:d1:71:b5:c4:4a:db:16:ba:84:9e:
8b:70:bc:b0:eb:cd:4f:9e:6c:72:14:31:30:2f:69:
d8:6a:07:20:0c:fd:8a:4b:02:e4:0a:76:8a:15:20:
5a:f3:b7:49:89:0f:80:c0:15:cb:6f:53:c4:6c:11:
3b:e1:a6:d3:79:7c:49:7c:6b:98:79:7d:bc:66:c1:
43:16:5d:6e:e7:43:ea:bc:5f:cd:da:bf:5a:d4:a5:
a8:17:56:a6:27:e1:89:3c:7f:86:6f:ae:1c:ef:40:
f0:a0:c3:30:38:ce:ea:ac:54:f5:7f:ef:1f:e1:d3:
e0:39:39:e6:01:56:73:e2:53:20:da:dd:45:31:9c:
a7:4a:e8:77:58:e1:30:71:d8:a1:5e:b0:77:92:2d:
43:52:81:9b:1f:38:50:58:e0:01:38:ab:70:0d:48:
e3:48:93:40:75:c3:10:4d:85:c7:e2:e5:33:16:f4:
0f:71:06:0e:59:9f:a1:5c:d8:ca:97:93:57:66:3b:
ea:73:b3:2c:17:53:2d:22:f7:db:f1:f7:31:be:95:
4e:3c:ef:63:ec:06:88:c7:cb:f7:5c:1a:8f:68:37:
09:5c:9b:90:22:1c:df:c7:c4:f8:16:25:ea:16:12:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:1A:C6:D5:00:5B:CA:05:D2:88:AB:02:24:6A:6E:86:61:59:47
X509v3 Authority Key Identifier:
keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:3c:2f:c0:7c:44:77:7c:c6:d1:26:d9:33:d4:a9:28:e2:cb:
64:29:84:9d:91:ce:b7:a2:df:a3:68:62:2b:74:c1:c8:72:5e:
15:ed:2e:67:bb:85:0a:76:90:f3:45:22:9e:c9:1a:21:5a:3d:
1f:d7:f9:bd:0d:b4:80:13:a4:38:9f:94:d9:84:2f:b0:05:2d:
24:36:2f:ae:4f:91:39:6c:18:d6:13:cb:b9:8c:9e:97:28:df:
70:05:9b:4e:1d:b4:a0:be:a6:cf:b5:d8:59:31:a4:46:70:c6:
52:e5:09:74:e1:24:ac:9a:52:1a:19:90:28:da:a1:ee:02:5a:
a4:13:95:19:a8:c6:81:9e:b8:00:0c:69:2d:48:2f:04:a5:d4:
55:3d:17:0d:4a:aa:5b:57:4b:fe:3f:11:d3:82:69:02:54:7f:
0d:c6:8e:e0:c1:9d:0c:79:ff:9b:d8:25:97:d3:f3:2c:cb:91:
98:34:46:58:a4:65:0e:bd:4f:0e:cf:16:5d:32:16:fb:c9:af:
1b:2e:68:32:3e:7e:50:8e:d4:43:a1:b9:95:d5:08:8e:c7:5d:
7a:1a:86:50:95:cc:61:d2:a5:5f:fe:35:3a:fa:3c:ea:2a:6e:
64:60:98:6f:d1:00:4e:2e:77:f3:78:e7:2d:3b:cb:f3:be:8b:
49:46:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:30:21 2025 by rpki-client