Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File: ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier: PLodHzGsoDUo51b9pp4uVQdVDk1byECElXJTkTwuciI=
Subject key identifier: 3E:9E:00:6D:1A:33:C6:D2:1A:B0:D7:1A:2B:0B:D2:27:A6:E6:B0:2A
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer: /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial: 0640
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number: 0640
Signing time: Fri 31 Jan 2025 01:32:31 +0000
Manifest this update: Fri 31 Jan 2025 01:32:31 +0000
Manifest next update: Sun 02 Feb 2025 01:32:31 +0000
Files and hashes: 1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: FELp69Vsy5CTKEJ4aWttqN4QFd3tt7ESdUNCjoJJ3+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Validity
Not Before: Jan 31 01:32:31 2025 GMT
Not After : Feb 2 01:32:31 2025 GMT
Subject: CN=679c282f-a742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4b:f0:33:9e:05:cb:f0:96:48:b0:d1:3f:6e:
d3:83:f3:74:25:d7:a1:9f:3c:02:b2:78:12:d3:06:
98:01:6e:d9:e7:52:f0:1f:87:a3:1f:13:44:a3:1a:
82:62:68:1a:a9:2f:c2:7b:1f:9f:8d:f1:56:29:4a:
76:21:2c:e9:a6:bc:16:6f:46:e7:92:f4:1a:e1:e5:
20:9c:7f:c2:13:23:13:97:55:55:6b:8e:e6:f6:1a:
01:c2:04:ee:a2:28:16:81:c7:c4:93:18:7a:65:b0:
d5:8f:84:7c:36:b9:c4:39:e8:89:c0:87:a6:d6:e7:
ef:b8:2a:42:3c:a9:aa:4d:3d:92:af:80:47:4a:d6:
5b:57:02:99:d5:5f:f5:39:f5:70:e2:f7:77:7b:1c:
de:ef:60:28:19:2a:6c:2a:f5:e0:1e:d4:3b:87:72:
c9:ec:7d:a8:f1:c3:57:14:e0:07:9a:cb:d4:7c:be:
d7:51:01:d3:22:aa:4d:d0:1b:18:dc:36:7f:cf:ec:
c4:a8:33:01:0d:b0:6a:cf:10:62:72:f8:ba:72:c3:
e5:b6:93:cf:4f:b1:51:93:7b:cc:21:b2:76:18:9c:
74:1e:1e:46:3d:7a:2d:8f:59:0f:8f:15:5d:96:a2:
6d:06:5e:50:9e:ec:af:6a:9a:55:b1:f2:18:58:c6:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9E:00:6D:1A:33:C6:D2:1A:B0:D7:1A:2B:0B:D2:27:A6:E6:B0:2A
X509v3 Authority Key Identifier:
keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4d:6d:af:29:56:95:7a:27:1c:77:9c:60:ae:9a:e9:c8:8b:
af:34:f9:17:bc:69:59:e7:5e:28:47:44:c4:a6:7b:d2:d9:8d:
76:31:cb:56:1b:dc:03:29:84:17:36:9f:83:77:17:ba:0c:3c:
f8:68:21:9c:73:87:36:34:c1:4d:c3:c7:17:45:1b:62:48:94:
a2:ca:c8:0d:eb:32:fd:7c:d6:e9:03:59:08:1d:13:38:59:9d:
c9:6a:f8:aa:d8:95:7f:9d:48:82:91:31:6b:c9:21:ce:5c:4e:
04:45:cc:e5:99:ff:78:9e:01:1c:2c:8a:d9:b9:03:d2:99:87:
6c:32:25:d3:1b:36:7d:a0:42:17:64:41:0f:26:af:3c:fd:1d:
c0:90:d4:84:27:f0:aa:fb:d3:f5:91:12:26:48:1e:3c:27:ef:
e3:0b:df:d8:da:3e:f6:5f:1a:94:4c:d1:3b:6c:19:fa:a7:ac:
01:cf:34:8a:2a:be:8c:6d:d5:08:fd:84:f0:39:2b:d7:a4:61:
0c:ad:b2:02:4b:3e:40:32:8b:b0:92:23:d5:d1:91:e2:25:62:
72:a3:56:e5:0a:73:97:18:38:96:c7:e3:3a:bb:8b:28:be:f4:
29:97:d9:dc:3a:c6:d9:f5:e6:ac:72:ab:ef:67:ac:06:ac:3d:
4e:51:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:50 2025 by rpki-client