Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
File: zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft (raw, json)
Hash identifier: ZfijZYxfjPh8I9G73KCltE4XueblOxgVsH+8RYX9DSs=
Subject key identifier: 38:CC:86:63:71:42:3E:65:60:3E:A1:59:96:1B:65:37:D6:F7:3A:28
Authority key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Certificate issuer: /CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Certificate serial: 061E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
Manifest number: 061D
Signing time: Fri 31 Jan 2025 01:33:14 +0000
Manifest this update: Fri 31 Jan 2025 01:33:13 +0000
Manifest next update: Sun 02 Feb 2025 01:33:13 +0000
Files and hashes: 1: zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl (hash: 69GxtYosv3H4vrgKvJVExAZ/b0EBZiwStsD2nSM2qRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1566 (0x61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Validity
Not Before: Jan 31 01:33:13 2025 GMT
Not After : Feb 2 01:33:13 2025 GMT
Subject: CN=679c285a-382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7c:b6:8e:65:bc:37:bf:f2:b5:18:46:d1:6e:
d0:f1:8d:46:bb:1b:95:29:38:29:22:13:cb:08:20:
64:55:23:ac:ac:2b:4d:94:77:91:04:df:e0:6b:70:
d6:32:bf:10:0a:c9:00:72:ce:d6:83:72:9a:72:3a:
10:bd:fe:bc:9d:b9:db:93:4e:1e:49:c2:b4:6b:d2:
f7:e8:08:1f:f4:d8:af:47:f3:38:8a:13:66:a2:e5:
ae:e6:b0:ee:6e:dd:0d:6a:35:f4:62:0a:82:10:3a:
3b:ac:b5:ff:d0:f3:f5:61:0b:d0:fa:ef:f8:98:f5:
1f:7e:62:f5:41:84:1e:4c:cf:64:e1:e6:f1:ae:aa:
27:6f:9e:19:9a:55:db:ca:e2:96:5d:f8:33:25:84:
b3:7b:59:e5:8f:c6:7b:08:1b:3d:69:60:05:92:5d:
a7:6f:6c:32:b4:83:e3:45:47:f6:9e:6a:73:98:d6:
08:24:6c:e9:e5:a7:61:c8:fd:c6:63:99:77:83:be:
c3:9c:c8:a1:21:ee:a4:1c:b9:68:3e:7e:48:08:f4:
e6:31:00:95:2e:06:db:be:87:82:61:86:79:c1:59:
88:c7:86:46:05:79:a2:77:61:18:36:43:9e:54:82:
39:ce:38:79:1d:d2:a0:3f:f4:2c:ee:cf:f9:a5:ab:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:86:63:71:42:3E:65:60:3E:A1:59:96:1B:65:37:D6:F7:3A:28
X509v3 Authority Key Identifier:
keyid:CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:42:44:e7:10:06:d3:81:d6:3a:b8:fb:ef:63:31:bd:ef:5e:
fd:14:15:ab:c9:6d:e7:f5:b2:f3:71:f4:29:b0:2d:b6:99:c1:
ea:14:44:b2:9d:f3:3e:be:48:c5:49:f5:4c:b7:4e:3c:e3:a4:
67:63:ab:ee:ee:e7:5e:23:06:f6:c9:2f:de:dc:bb:67:fa:e3:
ce:e5:d7:de:e2:36:36:08:a6:bd:f2:81:f2:b5:a2:e1:d4:8c:
5a:b5:17:fa:5f:8f:13:3b:d1:11:0d:a0:02:88:77:49:0d:e1:
9c:da:c5:c7:51:a5:bd:9f:f5:d1:eb:41:d8:90:d3:ef:ec:50:
8c:69:61:c8:07:e0:b2:8c:15:72:d3:05:51:cc:bb:38:58:9c:
8e:3a:64:15:74:f3:19:dc:7f:78:25:2b:d1:6b:6d:1d:1c:f5:
e6:cd:2c:a8:28:67:ba:a0:a2:5b:57:a8:21:44:46:38:5f:a3:
60:ac:5d:b5:82:d2:03:01:15:15:37:fc:fb:02:07:42:63:49:
70:00:59:e1:3e:6e:9a:40:27:4d:2d:18:a5:22:24:40:22:ae:
2e:d0:d3:87:a7:ad:71:30:0b:0d:21:cc:7f:e6:85:95:f0:a7:
a2:97:83:81:0e:b4:cf:77:51:7f:f5:6f:1c:42:e5:d2:b5:51:
c9:ad:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:26:12 2025 by rpki-client