Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
File: tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft (raw, json)
Hash identifier: Od8AhbsLQcUz+VYwh7Q5dAF9qRbQKpRXKR8qUgOlF/s=
Subject key identifier: 81:E0:A9:A8:D7:A3:0E:51:BA:76:C0:BB:BF:8C:A9:0A:71:98:87:8B
Authority key identifier: B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
Certificate issuer: /CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Certificate serial: D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
Manifest number: D6
Signing time: Fri 31 Jan 2025 03:00:45 +0000
Manifest this update: Fri 31 Jan 2025 03:00:45 +0000
Manifest next update: Sun 02 Feb 2025 03:00:45 +0000
Files and hashes: 1: tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl (hash: NjQoAap+stmbB7d51t0cALv/r4cItW4Q7yqypII76Yk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Validity
Not Before: Jan 31 03:00:45 2025 GMT
Not After : Feb 2 03:00:45 2025 GMT
Subject: CN=679c3cdd-0ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:51:ce:cd:fb:d2:7c:ca:6e:1f:f1:68:73:
9f:d2:b6:33:5b:2b:c0:2b:9b:ff:d6:1d:0e:00:2b:
db:21:2b:5c:d1:f4:ad:89:dd:cf:eb:ce:af:4d:e4:
cb:2f:97:3f:4f:fe:89:c7:62:9b:fc:2f:43:c9:f5:
05:c6:63:bf:11:ef:5a:1a:03:a1:72:cf:b0:17:d4:
96:57:12:23:79:4b:b0:00:24:18:8f:cb:d1:04:7e:
62:df:eb:07:67:1c:85:a9:35:81:25:c1:43:cb:9a:
ee:4b:76:74:e4:7f:8a:08:f2:2e:58:e7:de:69:63:
d3:03:e2:b8:9c:44:ec:0c:66:96:e5:de:65:fc:57:
0b:28:c6:a4:8a:2f:1d:7c:24:06:1b:39:01:b6:13:
6d:69:19:27:f3:a8:7d:e5:79:1d:22:99:31:bc:60:
23:77:13:89:e4:9e:45:2e:50:22:fb:3b:48:04:6b:
21:73:33:80:26:c2:c2:e9:09:9b:d5:94:24:ee:03:
1c:42:b6:ed:0d:70:ee:b6:aa:ef:8c:49:0b:bd:d0:
66:6f:38:f3:3a:47:f4:da:83:29:71:cb:7c:85:d9:
43:a4:51:68:c1:71:68:71:c0:04:b6:09:09:bf:0c:
a3:c5:0c:a5:4b:05:a8:25:3e:75:01:df:db:64:cf:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E0:A9:A8:D7:A3:0E:51:BA:76:C0:BB:BF:8C:A9:0A:71:98:87:8B
X509v3 Authority Key Identifier:
keyid:B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:91:b7:96:84:58:16:54:19:a4:70:cc:8f:7e:5d:54:73:8f:
3f:3b:01:f3:a6:b1:43:fa:18:17:14:b4:f2:58:cd:8c:64:3c:
9b:7e:92:e8:f9:72:ab:e4:6a:32:46:3a:37:3c:f1:d8:76:38:
1d:5a:04:f7:82:f0:f5:0d:e4:4d:8e:1b:9b:33:b0:e3:fc:80:
e1:cd:dd:53:fa:5e:99:73:73:b2:06:bf:dd:30:11:22:47:89:
6b:a4:5b:2b:8c:f8:cd:a4:82:58:cf:88:8f:8c:17:85:e6:7a:
d6:da:29:a1:c4:e5:c4:1f:54:a6:d8:91:75:c7:29:3e:92:b4:
92:68:9c:80:f6:3f:07:7c:84:92:fe:d5:02:43:ec:61:6a:c4:
cf:9d:79:98:aa:d0:22:40:3e:56:3c:e9:b6:44:44:73:d8:64:
20:fa:f9:60:dd:a7:00:ab:06:cc:26:69:e4:6c:3f:68:64:28:
3f:e2:54:fe:b6:10:97:27:63:c3:89:71:77:16:15:4c:5f:18:
3a:1d:ea:82:7a:5a:33:1b:f4:35:0d:72:0f:f5:8e:f0:e2:b7:
79:87:8c:d6:64:40:e5:15:ab:45:2e:c2:4f:96:62:6f:fe:54:
31:3a:f5:3e:ae:b9:7b:5d:ec:f2:ae:e4:b1:33:89:b1:1e:f9:
45:75:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:11 2025 by rpki-client