
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier: J+w9PQbdR664p/Rf9vuE4ZYl7mLsytP90HLTxZ1Al98=
Subject key identifier: D0:C9:1C:3E:DA:A0:6E:50:5D:03:E7:3D:01:9D:49:63:FA:9A:36:22
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer: /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial: 04E9
Authority info access: rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number: 04E3
Signing time: Fri 31 Jan 2025 01:54:19 +0000
Manifest this update: Fri 31 Jan 2025 01:54:18 +0000
Manifest next update: Sun 02 Feb 2025 01:54:18 +0000
Files and hashes: 1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: HmiNLnU+3Id4BBqKPQVr+SAMk+nptgXkUbz2Ze10IeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Validity
Not Before: Jan 31 01:54:18 2025 GMT
Not After : Feb 2 01:54:18 2025 GMT
Subject: CN=679c2d4b-04ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:13:07:1f:61:91:43:c7:95:61:12:a0:ea:
45:5d:fd:23:f7:fa:7a:74:c8:ea:f0:51:d4:ee:ba:
1a:97:91:86:2e:44:ec:1e:1c:4c:e3:29:24:43:ec:
ee:3e:93:37:2b:31:76:d0:c5:43:07:a2:53:40:71:
c8:48:31:ee:0c:61:a5:97:98:9f:30:f8:b3:6b:5c:
db:3d:0c:f5:76:53:ef:63:75:3b:ca:7c:57:66:81:
df:01:df:a1:e0:bc:99:1d:dd:bd:73:58:51:4b:1f:
5e:3b:8f:39:14:7a:ba:c1:81:c9:34:d1:af:b2:6a:
5a:a8:c2:f6:f8:0a:e3:ef:cd:02:0e:43:5b:58:e9:
7e:9f:fe:f1:6f:c9:66:02:13:07:2a:9a:68:2f:65:
7b:3c:93:9a:e0:38:8c:b9:76:54:76:82:ab:1e:3f:
e7:70:6c:84:20:86:17:8e:f8:70:be:01:dd:0b:c0:
f4:92:8d:7e:4d:ab:db:6b:27:02:cd:f4:45:29:50:
c7:bb:4a:91:e1:24:57:77:a8:11:12:9d:20:94:b2:
d7:c0:89:bd:e1:4e:e4:57:7f:bd:b8:65:56:d3:9c:
ad:76:5b:2c:b6:de:b6:a9:67:93:8d:d0:e1:67:7b:
78:f2:3e:47:68:e7:4d:23:31:b0:db:5d:af:81:5b:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:1C:3E:DA:A0:6E:50:5D:03:E7:3D:01:9D:49:63:FA:9A:36:22
X509v3 Authority Key Identifier:
keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:5c:07:c7:65:c4:8e:39:db:8f:1f:75:66:8d:05:d5:ee:7e:
21:4a:f4:c7:bc:3e:b0:ac:ba:a0:75:09:c6:c8:fb:68:00:1f:
0e:e0:c6:de:3a:20:42:59:2d:13:52:0e:d2:0a:49:85:a8:a8:
05:df:2a:50:ba:ca:99:d0:d7:b1:a4:a0:27:ab:ab:83:db:99:
97:66:36:35:7b:c4:d9:f5:54:1c:57:bc:94:5b:47:4f:50:cb:
99:12:63:fc:a8:c6:d8:33:65:aa:f2:f0:1f:95:a3:43:4e:67:
0c:3c:e9:88:fa:76:cc:6a:ca:a2:0d:1b:b9:75:29:0a:da:50:
40:fa:b9:f4:9d:ae:96:fe:da:55:8b:47:5d:31:ee:21:f6:81:
bb:a1:9e:7b:57:8d:d0:24:d9:f6:db:45:d1:44:26:04:7a:93:
db:93:ca:4e:b7:d3:23:1f:b9:80:84:db:0b:f0:2c:72:b8:cf:
e5:2b:f3:bc:cd:da:82:96:23:90:bf:5d:ce:f8:27:e5:68:23:
2e:f9:7a:66:37:d7:69:46:be:79:7a:a2:bd:a7:95:47:87:6b:
4c:34:e5:01:2e:50:35:de:e5:84:6c:43:fb:0f:20:02:97:67:
77:d2:47:7f:79:75:8f:55:0f:69:2a:64:0e:4e:8a:33:e1:19:
3d:f3:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:24 2025 by rpki-client