Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File: CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier: f3dHmqxOQZ7iixr+JXk2en0N6B6PgywBOugxtmbCGLM=
Subject key identifier: 63:65:E1:2A:9D:35:C3:98:C5:CC:6B:AB:5B:8F:C5:17:C8:36:CB:F9
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer: /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial: 034B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number: 034A
Signing time: Fri 31 Jan 2025 02:16:01 +0000
Manifest this update: Fri 31 Jan 2025 02:16:01 +0000
Manifest next update: Sun 02 Feb 2025 02:16:01 +0000
Files and hashes: 1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: nZq8/0GXhyWE1pqR7/ck9K/9tPos7s0mkQzBNq4BeFA=)
2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Validity
Not Before: Jan 31 02:16:01 2025 GMT
Not After : Feb 2 02:16:01 2025 GMT
Subject: CN=679c3261-8345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:6f:99:14:15:55:68:3e:e6:64:05:e3:9c:
2b:a4:85:11:e6:e3:a8:6b:aa:fb:b3:da:8f:38:7f:
eb:15:f5:ba:af:fc:be:45:cc:64:60:a4:e0:66:3f:
8b:b6:e1:c2:d3:d9:5d:bb:96:88:bf:7e:36:61:91:
8b:ec:eb:53:29:ef:ee:63:5a:6a:e2:b9:d1:d4:9f:
b1:bb:05:3d:fe:13:f5:39:a8:4c:ae:24:2f:c1:f5:
54:2f:92:08:81:05:a5:f0:d7:6e:8a:35:60:16:4d:
c3:13:45:1e:e3:a8:7a:4e:a5:5c:2f:1e:69:26:1d:
93:2e:b4:d1:b6:29:51:40:3e:b0:f2:be:e9:de:f5:
30:21:c0:3d:e0:78:2e:57:f4:7d:75:e5:fe:06:4e:
fd:cc:38:5f:6a:b4:b3:4c:60:19:38:28:bf:d3:1b:
c6:4e:cc:81:0f:6e:7b:74:2e:6c:df:4e:f3:8d:fb:
57:f6:22:60:52:33:24:00:31:b1:79:14:12:1b:b1:
1b:e4:3a:ee:93:bf:d6:9e:ee:3e:ee:39:20:28:f5:
4d:7e:48:3e:c5:ab:59:dc:69:6f:84:b5:f6:91:66:
93:10:6f:b4:46:b8:9c:fb:d3:41:84:f1:f0:a2:cd:
10:f3:ef:78:1e:8d:a0:9f:90:76:47:1f:13:2f:ac:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:65:E1:2A:9D:35:C3:98:C5:CC:6B:AB:5B:8F:C5:17:C8:36:CB:F9
X509v3 Authority Key Identifier:
keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a3:f9:23:c5:18:1a:c3:fd:d3:86:da:ca:64:55:8a:0f:70:
a8:79:56:91:9b:1b:9a:ef:e9:57:0f:e1:8f:99:78:46:e2:57:
0a:9b:1b:e2:b8:56:26:a7:b7:83:17:3b:09:80:66:a5:04:e8:
6f:8c:72:cf:56:55:8b:3d:5f:48:6b:b5:0e:ac:f4:e0:80:9f:
5d:ce:f6:eb:c3:aa:c6:fb:63:5f:53:d7:01:fe:10:47:25:13:
80:a1:bc:e7:e4:56:f0:f6:7e:d6:92:76:fd:09:dc:d6:5c:5b:
ad:81:cd:f9:8f:1e:4a:27:6c:97:9a:f4:2b:e1:9b:c4:9c:12:
85:cf:47:63:53:75:32:33:5c:d5:b9:a0:49:85:80:42:2a:99:
a1:c5:eb:f4:63:3c:70:6d:f3:10:1a:cd:74:a9:90:05:05:b8:
cb:cf:78:28:1a:89:b7:6d:fb:09:ee:47:29:55:13:fb:24:06:
e1:3f:c9:78:1b:53:8b:a5:e5:e6:cc:dc:5b:bd:5f:ad:f4:db:
7c:c9:16:96:1f:29:d4:7f:d4:a8:8c:67:c7:f0:90:c5:fc:0e:
dc:35:24:ee:2f:76:fe:d9:fa:61:64:4a:e4:1a:64:68:d0:ca:
63:c7:d5:41:da:82:a4:73:d3:76:a4:ed:e1:ac:1a:41:fe:b2:
be:98:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:19 2025 by rpki-client