Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File: xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier: pSg4mTPFLwZhqZ1ICmAfqXu0sHIqcZg+9xBv1TkxXdo=
Subject key identifier: E0:16:A2:D9:8C:A7:30:C8:9F:70:52:36:CD:30:6E:47:12:6D:C9:F9
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer: /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial: 086E
Authority info access: rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number: 0863
Signing time: Fri 31 Jan 2025 01:11:59 +0000
Manifest this update: Fri 31 Jan 2025 01:11:59 +0000
Manifest next update: Sun 02 Feb 2025 01:11:59 +0000
Files and hashes: 1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: bv4WMo7B7SXi9rxXNff40PNMiOLwPqtxkbzsI6AarX4=)
2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Validity
Not Before: Jan 31 01:11:59 2025 GMT
Not After : Feb 2 01:11:59 2025 GMT
Subject: CN=679c235f-73b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:49:fb:14:8b:a5:da:a2:3f:fe:1e:14:fe:
d8:86:fd:0a:5a:17:ed:26:85:33:c6:76:eb:1e:ef:
05:7e:07:a1:51:18:df:86:70:07:2b:31:cf:43:36:
71:c9:3d:cc:36:7c:56:ae:04:52:d3:89:ca:c7:65:
a4:a7:32:ce:84:37:b5:63:09:bb:05:b8:db:de:60:
41:46:d4:a2:53:2c:e0:45:51:0b:b0:97:93:c9:f6:
2a:f8:82:c2:f6:85:81:1c:90:f9:d9:58:e6:05:0d:
ed:61:e6:e3:d0:f4:51:4f:30:a8:b2:85:62:37:3a:
41:ca:fc:9d:72:f1:c3:f1:0b:d9:7a:46:4c:b2:47:
04:16:3c:b9:53:b1:a1:51:2d:48:c6:a8:64:1d:5d:
4d:a5:09:28:bb:fc:96:72:47:67:a6:96:4c:ec:e9:
f7:18:8d:92:98:c2:3f:69:9a:9f:a0:3f:18:72:89:
86:86:79:54:a2:f8:e0:37:51:03:1d:c2:ca:e8:91:
35:72:0e:80:38:2b:36:e7:46:e5:14:83:b7:17:a7:
7c:bf:59:d0:83:90:5e:dc:5e:e6:35:b7:f1:26:bf:
51:c0:e2:13:ea:44:06:a1:78:ce:e3:7e:b2:6c:f0:
1d:4d:11:46:11:21:00:1b:a4:18:2f:4f:47:e4:19:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:A2:D9:8C:A7:30:C8:9F:70:52:36:CD:30:6E:47:12:6D:C9:F9
X509v3 Authority Key Identifier:
keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:99:71:d4:c7:27:9b:a8:bb:54:b8:51:28:bd:48:da:73:f4:
c7:c5:63:64:bd:8a:a0:9b:74:51:bf:20:a7:29:f2:f0:c0:95:
52:ec:e5:5e:76:5c:15:65:1c:96:ae:69:2d:1b:9d:c8:b2:df:
d2:50:fa:6a:5a:8d:71:55:30:ef:4f:45:1c:4c:58:12:eb:33:
23:a7:50:6d:9f:82:ee:53:5c:83:3f:79:a1:e3:ad:57:39:3b:
f5:dd:fb:b6:bf:71:27:bb:a7:64:d7:c0:80:02:90:79:47:4e:
e9:01:37:d7:11:b9:d5:46:04:40:cb:09:82:13:68:4f:38:3f:
54:27:6e:1f:df:8c:bb:7c:31:b6:ec:2d:20:57:a6:ac:dc:39:
af:d8:a0:5b:89:ce:7a:ef:19:7d:aa:cb:05:29:63:76:ea:34:
8e:d4:e9:fd:14:c5:03:09:b9:a4:e5:e5:8b:98:5b:bd:b8:75:
d6:b5:ac:3a:b9:45:ba:cf:58:7b:0d:a1:fe:e5:da:4e:5c:6c:
5e:68:87:97:24:7a:89:42:5f:b4:03:79:7d:0a:77:c5:61:ce:
e3:0b:f1:a8:87:3e:bb:ae:12:c0:df:bb:81:df:97:87:4d:c8:
41:e2:a3:42:48:9b:c5:71:21:e7:49:2f:26:2b:07:56:9e:e8:
94:1d:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:13 2025 by rpki-client