Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
File: pZcz3KUuEYvmm3dYljNX3ajFFCg.mft (raw, json)
Hash identifier: EWRYjDU82MEv2wdx60/KgXx1d3TefGI14rVl+TutuP4=
Subject key identifier: 3B:AC:39:B1:C8:4F:A5:09:E3:A4:EA:E8:EE:B6:78:FE:6B:1D:E4:7D
Authority key identifier: A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
Certificate issuer: /CN=F36AC63AAF/serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
Certificate serial: 0229
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
Manifest number: 0229
Signing time: Fri 31 Jan 2025 02:37:06 +0000
Manifest this update: Fri 31 Jan 2025 02:37:06 +0000
Manifest next update: Sun 02 Feb 2025 02:37:06 +0000
Files and hashes: 1: pZcz3KUuEYvmm3dYljNX3ajFFCg.crl (hash: cn+2c0EafLvhWWA2Qham15Oh1FGFJR9ReZu48bU+g9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC63AAF/serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
Validity
Not Before: Jan 31 02:37:06 2025 GMT
Not After : Feb 2 02:37:06 2025 GMT
Subject: CN=679c3752-2540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:fb:1a:5e:0b:55:0d:7c:05:cd:28:98:6a:
3e:67:d0:02:c9:bc:bc:ff:d3:db:47:bb:ed:42:a7:
df:42:0f:ff:6d:34:e5:83:c1:a6:f0:e0:ed:37:0f:
61:7b:16:79:9a:ec:44:98:bf:0c:36:71:0e:61:bf:
06:8c:87:ce:e9:5f:10:c7:26:64:82:73:52:c0:e0:
b1:72:f1:6a:8d:a4:bb:db:87:7a:15:6f:9c:38:16:
00:93:be:a2:1d:fa:9b:cb:ad:6e:36:d3:4a:7f:85:
cd:fb:3c:f5:f3:7c:48:7d:e8:d9:4d:76:37:f0:58:
15:9a:e8:0a:5f:a1:74:b8:b7:8d:88:f3:dd:35:cf:
12:9b:c2:80:c4:32:4a:a7:87:5c:9c:b7:a1:1a:49:
fb:e2:13:9d:59:50:43:23:e9:a0:20:d7:44:e5:be:
4b:4c:5d:11:fd:1e:bf:64:73:4d:d7:9c:4d:7a:dd:
39:fe:e9:4d:0e:61:98:c0:e9:b3:81:c9:b5:0e:52:
c7:cb:fe:04:cb:d8:91:fa:d5:a5:12:e1:09:8c:8e:
6a:a0:f2:8f:69:a1:6e:57:26:6b:92:5f:10:ac:be:
6e:c0:7d:f3:d0:72:13:43:f2:cf:33:ee:10:20:0e:
c0:6e:15:bf:37:d7:54:91:d1:c3:a1:0a:1d:b1:7e:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AC:39:B1:C8:4F:A5:09:E3:A4:EA:E8:EE:B6:78:FE:6B:1D:E4:7D
X509v3 Authority Key Identifier:
keyid:A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f9:30:82:2f:3c:c0:fe:6a:11:c1:1b:d8:9b:8a:25:bd:4c:
02:e7:b4:9c:fe:a1:1a:e9:51:15:1a:72:69:f8:6f:ea:7d:2f:
99:f2:5e:02:ba:ba:0a:53:e3:96:4b:33:d2:f5:cd:05:cd:6b:
15:cd:13:33:d3:43:c7:6a:94:8d:39:f0:e1:57:54:8d:9f:dd:
58:90:31:e7:fb:fc:d9:2e:53:24:cf:4e:4d:1a:45:e0:49:f6:
d4:c8:d7:75:c4:a1:20:38:f6:b1:8d:54:57:ea:9b:1e:be:8a:
a3:b6:c9:d5:55:0b:71:d6:bd:b1:8e:fe:42:db:ca:56:53:8b:
46:7a:2d:b8:c7:f7:e8:50:b4:75:25:aa:90:0c:b2:8b:8f:e9:
78:2d:a1:9b:41:d4:af:f8:de:a5:7b:bd:84:19:d6:82:87:94:
6e:38:a1:33:b4:91:9a:fb:78:68:47:66:5c:e5:03:ba:20:10:
e7:96:dd:83:3c:a3:68:ee:e7:a2:6b:bd:ea:70:57:81:2c:50:
64:40:9e:4b:7a:33:b9:a7:f6:37:f6:48:a7:e0:45:23:99:9b:
52:5e:95:ab:c2:a0:81:ec:cd:e4:b8:c8:be:8b:f7:64:4b:c3:
a9:18:e4:df:f7:c7:78:c7:be:4f:24:b7:55:ac:95:73:f0:b8:
b4:1f:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:54:10 2025 by rpki-client