
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File: ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier: dh3Fch6KI9yy8trneF/ortqUNVzM0xMKY67wwvdhDII=
Subject key identifier: F0:E6:C3:2F:76:8A:05:C7:13:EE:79:6F:C1:1E:CF:AD:16:6F:6F:8C
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer: /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial: 03CF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number: 03CE
Signing time: Fri 31 Jan 2025 02:06:55 +0000
Manifest this update: Fri 31 Jan 2025 02:06:55 +0000
Manifest next update: Sun 02 Feb 2025 02:06:55 +0000
Files and hashes: 1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: dVhgGuCtLkeojjcyId5oONMcHrQHqcuB2N3b9LGoUA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Validity
Not Before: Jan 31 02:06:55 2025 GMT
Not After : Feb 2 02:06:55 2025 GMT
Subject: CN=679c303f-462c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:57:13:4a:00:16:5d:40:49:9f:96:02:ab:
da:e2:56:58:84:1d:3b:30:54:4c:d6:0a:07:ee:4e:
bb:7f:c0:77:b2:00:51:ee:8d:7f:e2:dd:60:5b:de:
cc:bd:5a:70:e0:16:ab:6a:95:a6:e4:79:62:0a:82:
32:1f:af:92:7b:b4:bc:41:cd:98:48:59:ed:0e:15:
af:26:f2:7b:4d:5e:3e:79:bb:5e:d4:0c:b2:d0:94:
6a:98:f6:59:ed:5b:01:4c:fb:19:d3:75:47:1f:3f:
ec:77:52:f6:bc:eb:9e:a0:e1:6e:2d:0f:49:7e:13:
87:04:d1:c8:f2:82:55:e3:d0:a3:b6:e0:30:0e:ac:
c8:42:a4:d5:e1:31:31:0c:2a:1f:53:27:98:91:0d:
31:cf:65:bc:64:7e:f5:43:82:41:f8:e6:8b:b0:ff:
c4:c1:58:76:f2:15:1f:69:72:6c:91:5c:95:d0:bc:
59:0a:b1:7b:6e:5c:7a:90:b9:59:9d:b9:28:64:1f:
9a:dd:c8:e3:7a:52:e5:4c:4f:6f:e7:03:61:c6:1d:
21:46:91:e5:f2:3b:f2:62:03:54:68:79:6e:f9:a2:
48:5d:7a:35:15:0f:a6:2c:68:f6:c0:05:bb:38:d8:
95:d3:01:14:28:5e:4e:2f:e6:b3:89:66:e4:d7:48:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:C3:2F:76:8A:05:C7:13:EE:79:6F:C1:1E:CF:AD:16:6F:6F:8C
X509v3 Authority Key Identifier:
keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:72:f4:61:bf:2d:ae:2d:4d:98:49:5e:39:59:82:3b:0a:34:
cf:9f:83:85:b1:cf:fe:11:77:a9:7a:5c:cd:46:10:fd:ac:b9:
df:96:72:64:cf:bb:b2:55:6c:f1:6a:c4:29:a9:41:d8:48:42:
7e:65:d7:8f:9a:18:61:c7:3b:d6:17:2d:75:04:16:d3:9a:ee:
d5:04:e9:ef:37:ea:b6:33:a5:df:57:a6:67:7e:9c:14:78:c2:
eb:4e:a0:17:47:7b:3d:1b:25:13:1a:ff:ac:04:04:65:8c:96:
48:5a:b0:fb:63:40:55:63:d0:e3:e3:45:94:41:e9:77:ae:88:
a3:cb:ac:3d:ee:b2:0d:1b:53:ee:7e:84:cc:28:43:02:62:ce:
cc:c3:83:e5:bc:66:9b:61:15:b0:d0:9c:7f:82:bd:cd:68:d4:
46:79:f8:e5:a6:b5:a4:41:1a:39:60:f2:4e:66:af:b9:d3:27:
32:94:e8:ac:fa:2d:5a:9d:a7:56:89:58:37:a1:01:29:0e:9c:
4c:e1:00:e0:98:6b:49:d7:07:89:30:b4:f3:c3:4a:4b:d5:a5:
5b:d7:3a:73:40:e2:aa:84:f3:a9:4e:15:55:bb:4d:c4:6f:2c:
4a:26:32:55:12:59:87:f0:92:ad:82:02:69:57:d5:b5:61:4f:
f4:a0:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:14:53 2025 by rpki-client