Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File: _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier: 91l3qNW8KP6vD7T+O3526bQWzgStbpzP/qFbIh/0O6I=
Subject key identifier: AD:69:9A:03:B6:5F:FD:CE:02:A1:21:84:9D:75:31:E5:31:8B:76:E3
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer: /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial: 016D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number: 016D
Signing time: Fri 31 Jan 2025 02:51:09 +0000
Manifest this update: Fri 31 Jan 2025 02:51:09 +0000
Manifest next update: Sun 02 Feb 2025 02:51:09 +0000
Files and hashes: 1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: q2EbTKSgVw65wnX+osV0yXxD1QQrjnia670tXsTNQC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Validity
Not Before: Jan 31 02:51:09 2025 GMT
Not After : Feb 2 02:51:09 2025 GMT
Subject: CN=679c3a9d-d689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:5f:b9:a1:c4:6b:2b:03:3e:f0:72:10:f9:
07:b1:0b:32:fa:1a:6e:bf:a9:2b:2b:2f:08:e6:20:
db:d7:47:4f:1a:6b:a0:cd:a0:5b:ce:08:f4:1d:e7:
21:24:e9:db:7e:c3:eb:64:3e:ef:5f:e6:d6:66:9e:
16:d8:3c:64:36:41:16:b5:89:21:37:2a:83:e9:8e:
4d:a8:f6:e1:0e:41:63:53:62:c7:c0:a4:5c:3b:3e:
7f:ac:c4:bb:fa:11:b2:9f:85:a2:d4:a2:70:f0:17:
64:95:e7:cc:7b:20:63:47:bd:2b:c4:c2:44:82:e1:
d9:b6:27:05:5c:09:4e:f4:10:af:81:9f:7a:3a:0d:
8e:26:d4:72:f8:df:82:ec:f6:72:35:92:80:a1:3f:
fc:dd:d3:a6:65:46:ef:e3:ed:eb:8d:70:4d:9b:31:
14:34:b9:cc:f2:32:73:04:f5:54:de:5f:e6:43:ad:
38:b4:48:59:69:fb:93:37:37:c9:db:a0:5b:f7:82:
ba:5c:ba:fd:0c:80:72:68:e2:cd:a7:3c:be:9a:7d:
8f:47:04:12:05:f4:63:f8:76:9e:24:c1:67:3d:19:
24:c0:9b:9a:40:8c:4f:02:1b:e1:93:d1:45:e9:8b:
bc:21:65:7c:0c:ca:e4:1e:10:71:4a:d0:7e:23:db:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:69:9A:03:B6:5F:FD:CE:02:A1:21:84:9D:75:31:E5:31:8B:76:E3
X509v3 Authority Key Identifier:
keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:17:dc:60:4a:c4:b8:3c:c7:49:e8:f8:8c:f8:02:c4:a3:ec:
19:89:aa:e9:0c:ba:3f:0a:ad:0f:88:1d:cf:1a:ca:72:1b:24:
cf:81:53:6c:3f:2a:8c:0d:e3:b8:ac:df:c5:e5:85:46:4c:10:
ec:c8:4d:b2:80:fc:16:88:49:47:16:6d:69:d8:38:88:c7:ed:
c6:84:9c:2d:41:df:31:51:79:b5:e9:9b:cb:15:10:c6:5e:92:
09:4a:a4:c6:74:ad:81:4e:df:9d:20:73:2d:76:c0:0f:fb:df:
a7:bd:dd:63:79:5e:46:20:86:6c:de:e7:0c:97:91:b9:bf:62:
a1:ee:97:2d:42:5c:1d:9e:c4:ea:ce:fb:8b:68:bb:23:9b:82:
72:7a:73:f9:61:69:73:75:7b:5f:c5:69:ec:c9:aa:81:1e:b2:
4b:44:a2:fd:78:25:70:86:a3:a0:c0:5c:9d:93:0e:e0:34:e4:
2e:ba:72:02:08:90:83:ab:58:19:f5:dd:41:9c:1c:03:3b:44:
fb:67:5a:35:49:5a:c2:ac:96:94:e8:c7:a8:6d:57:13:03:6b:
bc:e1:7b:4b:08:e7:b9:40:c6:b6:77:2b:1d:50:b5:db:16:6d:
12:bd:60:5e:5d:70:8e:c4:04:f4:c2:4b:eb:cb:4b:e0:52:6f:
8c:00:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:42:01 2025 by rpki-client