
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: Ucsd3PbRDwwWKHrijI7+0K4jTdnn8l3ej/ndkH1GsTY=
Subject key identifier: 6A:C9:E9:E5:1A:1A:90:30:20:BA:6B:4E:A2:8D:8C:DD:F8:1A:BB:55
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 0852
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 0851
Signing time: Fri 31 Jan 2025 01:12:58 +0000
Manifest this update: Fri 31 Jan 2025 01:12:58 +0000
Manifest next update: Sun 02 Feb 2025 01:12:58 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: nMOGpK30B2DnUbKNCfbj/H7UsN2ROF1ebdiXTvWWCr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130 (0x852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Jan 31 01:12:58 2025 GMT
Not After : Feb 2 01:12:58 2025 GMT
Subject: CN=679c239a-1346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:68:91:ef:74:27:91:50:61:86:5a:3b:69:72:
2a:60:2d:99:85:24:25:73:c7:1e:5d:11:e2:74:97:
fe:ef:1c:a5:24:4a:10:c2:c9:e9:82:aa:c3:cf:04:
41:21:1f:9c:32:5e:29:e6:ce:00:9f:8f:0a:3f:24:
b1:4b:8d:e0:46:97:7e:e3:2a:96:e8:3b:b2:49:e8:
56:25:26:dd:d9:e5:08:c5:91:78:e8:e6:48:91:23:
e1:92:94:06:01:a3:37:52:fb:02:01:d9:e0:9e:2b:
f2:62:67:a7:09:17:74:01:96:c7:35:61:12:98:53:
57:4e:43:67:7c:8f:12:ae:dc:53:d4:3f:9a:16:02:
c1:82:ec:0d:74:c9:39:51:6d:b3:2d:b8:c9:8f:1f:
fd:a9:d3:c9:8d:03:3e:e8:bf:1f:bb:64:35:89:39:
09:3e:fa:d8:4f:f2:c2:b4:10:32:4f:8b:61:51:b2:
f9:85:e8:bf:d8:04:43:be:29:a3:d2:58:d7:b2:37:
71:7f:d3:9e:d0:85:0b:b0:ea:dc:20:4d:7f:c0:75:
40:a8:db:e4:f7:aa:e3:ae:6f:0c:1e:66:73:99:44:
df:37:93:a9:7f:d2:ec:34:c4:10:cd:a0:fd:cf:52:
e3:1b:52:96:26:5f:62:cd:96:67:c0:5a:7f:82:40:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C9:E9:E5:1A:1A:90:30:20:BA:6B:4E:A2:8D:8C:DD:F8:1A:BB:55
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a2:1a:e1:96:57:6b:40:41:b0:52:a1:a5:0a:f3:93:bc:44:
38:17:32:79:6a:72:dd:5d:e9:5e:0e:11:b1:6c:f0:3a:eb:46:
66:25:01:5f:ce:0b:fd:64:5b:5b:3a:4b:9a:f0:43:88:a8:72:
0c:e9:b3:41:cd:e0:25:ae:79:4b:fd:7c:41:c5:43:c5:21:c0:
86:44:be:74:4b:c3:99:da:35:f4:48:12:bc:8d:ef:59:5c:b2:
42:8e:46:3a:30:bb:15:e9:18:6f:da:69:43:f8:8d:30:a0:24:
bf:d6:5f:f4:2c:aa:38:df:fe:8a:33:40:2d:a1:8b:27:f8:b7:
21:46:fe:ab:e6:4b:b4:f2:9a:0c:18:d3:9d:bb:4d:1f:79:cd:
5e:8e:a0:89:ab:58:f7:28:85:2e:bc:d4:3e:b9:70:ae:b5:f2:
51:71:ee:b5:49:48:27:49:75:1f:c5:68:5f:a7:a4:c5:f7:a2:
24:73:7e:72:7e:08:37:bf:95:49:1e:0a:ed:b7:8f:90:18:76:
ad:52:0f:2b:0b:ff:f8:6f:43:6a:8c:86:f3:8f:77:29:d6:97:
77:d0:4a:81:95:49:b5:2c:21:cf:88:9f:65:43:46:4e:d0:0c:
f9:65:dd:06:91:95:15:4a:03:b4:8b:20:b5:23:36:b9:60:63:
31:5b:35:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:43 2025 by rpki-client