Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
File: QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft (raw, json)
Hash identifier: l/F3PvkcNQV3UZyRvimiA4yMyGUVco/uu+eCm64vJDM=
Subject key identifier: 09:5B:0F:BB:8C:1A:94:09:3B:30:A0:ED:26:C7:74:C9:55:05:04:6A
Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
Certificate issuer: /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
Certificate serial: 086F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
Manifest number: 086C
Signing time: Fri 31 Jan 2025 01:10:30 +0000
Manifest this update: Fri 31 Jan 2025 01:10:29 +0000
Manifest next update: Sun 02 Feb 2025 01:10:29 +0000
Files and hashes: 1: QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl (hash: CoAwqDzrF+K5ISxGEq51W5bHDURTPv3zMghdBeyzoEQ=)
2: 9441D5EEDAC711E9BF722B0BF8AEA228.roa (hash: axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=)
3: A99AE7C0DAC511E985EBCE09F8AEA228.roa (hash: OIGU7l2JXL8/haZu4eER9KuF5vp4/ZseEXDNYZByKwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
Validity
Not Before: Jan 31 01:10:29 2025 GMT
Not After : Feb 2 01:10:29 2025 GMT
Subject: CN=679c2306-ca5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:da:98:a1:69:58:a6:7a:4d:70:22:c6:4c:27:
b8:79:68:85:0e:da:61:a2:e1:7f:a8:22:c1:c2:d9:
b6:e2:1e:e7:85:22:9e:cb:09:c0:86:8a:7f:01:46:
17:76:ef:7d:a8:ab:40:19:94:54:6e:3d:88:73:cc:
24:83:a5:cc:0f:83:9c:49:2f:e2:f8:76:45:30:da:
98:72:b5:2d:bc:e4:2d:cd:48:ef:c5:53:96:a9:4a:
89:a4:a5:0f:44:1a:0e:45:fb:4e:ce:f8:fa:45:d1:
0d:7c:bb:69:ac:1f:a6:98:52:1a:eb:ef:7e:4e:68:
41:f1:63:25:10:22:cf:f7:a8:df:11:c2:90:27:8c:
37:a5:97:79:4c:72:2d:9f:ae:39:3b:a7:22:2e:1b:
32:57:f9:fb:c7:71:8d:b5:34:64:93:26:ba:aa:cb:
30:0e:bf:06:cd:32:18:f3:a4:41:a7:20:b4:9f:37:
38:0f:23:b6:c8:fa:af:97:3c:c1:49:05:ad:44:0b:
18:26:ad:d0:b0:99:ed:55:e2:08:56:9f:9d:bb:cf:
9f:c6:54:92:39:ae:a6:d5:0b:77:f8:d4:f4:83:9c:
20:ad:19:e3:90:ae:7e:45:19:37:ba:64:da:d3:3a:
d5:6d:c0:9e:48:17:b5:d3:5f:44:b3:a6:38:a1:87:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:0F:BB:8C:1A:94:09:3B:30:A0:ED:26:C7:74:C9:55:05:04:6A
X509v3 Authority Key Identifier:
keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ed:92:8a:9e:cc:8e:78:c7:55:e2:5d:e9:96:e7:06:62:02:
44:fd:3f:10:a3:5b:65:9d:a8:c3:00:eb:66:2f:f3:9d:a5:31:
d0:62:1a:ec:e7:97:8e:71:d0:95:eb:97:a3:ba:fe:df:4c:9b:
ae:57:a8:ba:8f:ca:6e:1c:3e:c4:c0:e0:51:40:b7:5e:c6:e9:
c5:f3:f6:9b:d9:ea:07:c3:db:d5:53:75:d5:9d:34:4c:a5:18:
c8:03:fc:44:d5:30:fb:7c:06:da:40:9d:d3:6f:f4:0d:ac:0a:
ae:c6:0f:17:cb:aa:d2:ff:36:5a:6b:d7:1b:19:3f:42:6c:38:
96:4d:b3:1f:f5:84:78:17:ad:f5:da:09:06:7b:44:36:26:00:
45:e2:c5:d2:47:26:4f:46:51:6b:d2:80:5c:d8:0a:07:24:ac:
c1:48:1d:8e:cb:5e:90:77:59:2d:bb:b9:59:15:76:c5:90:fe:
00:2b:c1:ab:3c:bd:d0:1d:c1:1b:21:6d:d2:6a:f2:62:59:7c:
b9:56:84:3b:b6:b6:c0:32:76:47:62:32:2c:f8:65:d2:d2:80:
77:1e:cc:df:87:a0:10:57:f3:d5:44:06:04:cd:b0:e3:f5:49:
20:82:31:0b:13:b9:3b:c1:be:83:6b:f0:38:cf:a7:f2:a8:c2:
b9:af:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:34:51 2025 by rpki-client