Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File: Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier: 2YAYFgNCqSbe5dJzNttS7+cL3ufCncONViPiT/xaAnw=
Subject key identifier: E7:67:33:7B:B6:57:A7:B0:A9:CB:B9:5F:DB:BC:2A:0C:7A:AA:E5:20
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer: /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial: 0882
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number: 0877
Signing time: Fri 31 Jan 2025 01:09:24 +0000
Manifest this update: Fri 31 Jan 2025 01:09:23 +0000
Manifest next update: Sun 02 Feb 2025 01:09:23 +0000
Files and hashes: 1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: IAwzmJ6v+psP5AbwXPXAuU4q+BRMknWeqQ4SuZDxiyk=)
2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Validity
Not Before: Jan 31 01:09:23 2025 GMT
Not After : Feb 2 01:09:23 2025 GMT
Subject: CN=679c22c4-cd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:dc:d4:9e:b8:09:27:bc:11:cd:9a:4a:2e:
41:79:ed:40:33:d3:4b:5a:5a:a1:be:8b:70:b1:7e:
1e:eb:e6:01:2b:f9:7f:ac:11:c5:f8:c4:78:d4:fc:
6f:f8:29:d0:52:a7:5b:1a:2d:e7:7f:8b:c1:67:21:
2b:98:ce:ea:1f:71:e5:0d:b4:19:db:1d:b0:78:39:
07:82:7a:91:13:fe:09:78:45:ed:b3:b2:93:ed:b7:
fb:ae:1c:e4:fc:fa:37:97:53:cd:ab:57:3d:eb:92:
74:ad:53:a6:a2:53:15:32:29:85:9a:44:c8:ef:11:
1b:0f:26:f7:00:f0:db:03:fc:44:6b:83:9d:0a:17:
37:1d:a9:9f:0c:80:1a:73:df:a3:e9:cb:73:dc:39:
0b:e8:a1:f1:25:96:89:a5:17:3d:11:8e:d7:05:01:
83:0d:59:7c:23:2b:de:5f:7e:94:cf:7a:52:16:33:
b1:a5:24:7d:2e:86:e6:85:cb:19:70:83:7a:29:1e:
ca:81:5b:20:1a:a4:f3:59:88:c8:b4:fc:3d:a2:f2:
e9:a8:73:8f:12:d9:23:bc:c3:bc:08:70:bd:1b:bc:
5d:68:8a:3f:65:f5:70:10:83:94:eb:4b:f3:ec:89:
4b:69:6b:fc:ac:d5:d6:0f:c8:cc:82:cb:c4:5d:93:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:33:7B:B6:57:A7:B0:A9:CB:B9:5F:DB:BC:2A:0C:7A:AA:E5:20
X509v3 Authority Key Identifier:
keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:f4:69:01:76:a5:25:b8:d8:70:cc:c4:6a:4d:db:a7:0d:65:
5a:c0:9b:8f:5b:59:85:3c:3d:3c:10:1f:cc:f5:f9:be:7c:08:
21:5a:73:c1:96:a2:68:3f:0b:26:1f:f7:46:d2:7c:8e:cb:0c:
d0:7d:55:e0:f8:f4:aa:73:97:c4:84:4e:68:23:f9:11:90:ac:
c3:b1:4b:df:02:ae:2b:61:c9:7f:63:8c:27:8a:64:fc:c7:a2:
94:cd:56:8d:13:34:cd:28:77:bf:56:da:cc:68:33:d5:72:ec:
1c:5b:d7:f7:d7:34:05:fd:9e:7f:67:ea:39:64:7b:1e:d7:d8:
a1:5b:59:9d:6f:d4:49:16:a8:97:fa:8d:e4:a9:52:ee:0f:65:
a3:f2:46:87:83:da:8b:90:63:36:8d:f4:c4:26:60:aa:7f:de:
db:b4:e4:97:d4:ee:06:81:33:08:e2:5e:1e:a4:43:be:3c:96:
98:92:1d:91:80:a0:84:87:54:c2:4a:88:b0:5d:05:44:3c:f3:
ec:cf:ef:bb:4e:18:70:c5:db:6f:ca:0c:ee:f5:ba:b3:c8:d6:
17:a1:e8:3c:02:d9:6a:1d:00:21:a0:0f:65:e5:b5:e1:2c:d8:
eb:b1:99:dc:1e:35:21:7b:2a:67:f9:9a:07:f7:42:88:c0:da:
84:63:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:57 2025 by rpki-client