Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
File: nZEfOSNannHK5JlXppouUkKg3TU.mft (raw, json)
Hash identifier: AvEJoqESkNbBUNpMpwE3qZc6nunoDlE/SF/SZHnQYnM=
Subject key identifier: 97:D7:E6:49:B0:83:DB:DC:21:A8:05:7D:4C:AF:25:A6:E6:0E:AA:B1
Authority key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
Certificate issuer: /CN=F36B4CC8AF/serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Certificate serial: 01AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
Manifest number: 01AC
Signing time: Fri 31 Jan 2025 02:46:32 +0000
Manifest this update: Fri 31 Jan 2025 02:46:32 +0000
Manifest next update: Sun 02 Feb 2025 02:46:32 +0000
Files and hashes: 1: nZEfOSNannHK5JlXppouUkKg3TU.crl (hash: EfpbVCQo5sq25aesWNqtxvtICCIbqugE+KEqZyFXdYU=)
2: 6B19BD749DA711EE8B40AC5ED25BE465.roa (hash: NgzSPsDLZHTS8GcIuQL4M+RUtb2W4HialOJ/KKr08S4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B4CC8AF/serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Validity
Not Before: Jan 31 02:46:32 2025 GMT
Not After : Feb 2 02:46:32 2025 GMT
Subject: CN=679c3988-96ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:2a:0e:9d:49:86:59:8d:85:99:f2:ee:cc:
2c:a7:f8:37:e4:05:84:a8:6a:8c:24:11:ac:81:6a:
cb:3f:b7:55:cf:18:a6:05:24:13:e4:cb:5d:2c:7c:
09:f2:66:f3:da:b4:35:a2:60:35:d9:0c:d8:48:e9:
e0:41:f6:85:50:c2:bf:8e:6c:e9:c3:d2:1a:3c:15:
83:85:89:c5:98:8e:45:c7:61:45:84:2b:66:7f:bc:
2f:1b:94:68:82:bb:21:80:fd:e1:ad:fa:63:f4:c0:
5f:3c:99:d0:dc:cc:bc:27:20:0d:8d:27:01:0a:59:
0d:69:bb:0a:21:ea:2a:b7:26:3b:79:e1:82:eb:7e:
fc:08:b5:91:21:2f:32:9c:e6:b5:f5:7a:8a:51:01:
49:ea:a9:f9:8c:4e:4f:0f:1b:da:22:58:2b:62:d1:
5e:a1:ce:d0:3e:e2:e7:83:a4:b2:88:52:dc:17:cd:
d6:37:c9:3e:1b:16:38:81:53:42:1a:9a:db:15:ba:
5e:14:5a:c5:3c:33:ff:f5:9b:2d:70:60:97:9c:ef:
6f:bb:42:eb:72:5b:da:1a:5d:d6:8a:2c:ba:d1:21:
ba:67:09:db:0d:44:66:12:65:25:3a:c6:10:76:e3:
16:69:b5:b2:c8:04:23:25:44:f9:8a:68:fe:12:81:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D7:E6:49:B0:83:DB:DC:21:A8:05:7D:4C:AF:25:A6:E6:0E:AA:B1
X509v3 Authority Key Identifier:
keyid:9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cf:b9:e8:28:48:1d:4b:e5:0b:7e:3e:bd:21:ec:b0:4b:cc:
7a:ff:b2:ed:61:ae:6c:86:f2:b9:29:13:ab:40:8b:c0:ff:4e:
a4:7d:64:e7:b3:08:22:24:f9:54:1b:7b:69:6b:ac:e3:72:53:
4e:bd:0d:40:ec:d6:17:29:e1:7b:61:f6:e0:30:11:f7:b4:34:
d9:85:5f:7d:56:0d:f5:f3:31:e4:96:2b:da:ad:83:3e:db:35:
87:18:5c:5a:7c:93:12:cc:30:87:25:18:af:14:b7:1e:00:99:
bb:6e:82:a3:8b:b2:28:b2:01:89:7c:c7:f0:e1:e3:91:c8:ab:
57:00:f1:74:97:84:c7:48:54:a7:b2:87:ab:40:96:51:38:81:
03:1d:4c:7f:8c:76:d0:45:73:b5:a9:12:ee:4a:bc:67:df:54:
ad:c7:78:a6:b5:15:2a:78:bb:ae:64:37:f9:41:ca:63:44:5f:
d5:c7:af:fb:b9:c2:ab:ee:54:a8:54:cb:74:18:c9:4d:0a:50:
96:9b:f0:17:1d:c4:ac:ae:c4:ed:e1:96:6f:f8:34:91:dd:8c:
ab:24:03:e4:12:b5:02:79:ab:92:be:c0:11:c7:72:7a:d4:4c:
18:63:cb:c7:7e:cb:49:38:b2:8a:3c:8b:5b:5e:7e:97:8d:6d:
5f:cb:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:46 2025 by rpki-client