Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File: KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier: /K86q+8mf9piTtK8tHsaU7krj6Lvv8X5KRdF+7xBNJY=
Subject key identifier: DF:A6:4D:5F:73:18:D6:07:EF:D8:28:92:0D:E3:5A:C9:67:69:BF:79
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer: /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial: 023C
Authority info access: rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number: 023B
Signing time: Fri 31 Jan 2025 02:34:44 +0000
Manifest this update: Fri 31 Jan 2025 02:34:43 +0000
Manifest next update: Sun 02 Feb 2025 02:34:43 +0000
Files and hashes: 1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: VlXL3KIOQMCBSos4CRzlK8YSx+l0Z6dStzZMrp6J2yM=)
2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Validity
Not Before: Jan 31 02:34:43 2025 GMT
Not After : Feb 2 02:34:43 2025 GMT
Subject: CN=679c36c3-8e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:ed:5f:14:a9:1a:71:34:64:49:78:f6:12:
b7:4c:78:59:6a:40:a5:24:6b:21:c8:18:82:15:0c:
35:d1:5b:aa:46:2c:1f:58:25:82:a6:8b:0f:40:2a:
bb:02:8a:ff:28:24:84:34:bb:a0:a7:d2:4b:d2:06:
a4:23:0f:b7:9c:22:e3:cc:60:c0:19:2a:59:94:0a:
4b:2f:82:22:c3:46:fc:a7:1f:62:20:40:d1:15:28:
1c:05:c6:aa:a4:0c:8a:b8:7f:9a:15:27:df:93:0d:
8e:d2:9b:44:f5:35:9f:b2:bd:96:0e:48:1b:d2:bd:
c1:67:84:8e:ef:34:f7:17:c0:f4:6c:d9:11:42:1c:
2b:bc:30:5b:6f:a0:88:a9:70:3e:9a:6f:a5:bf:46:
ea:14:f2:89:03:fd:5f:8c:c9:83:6d:1d:a0:96:12:
3e:13:a4:bf:21:1f:cb:d4:8d:ce:50:aa:0e:9a:6b:
60:d7:75:1a:98:36:dd:d1:2c:2c:d8:80:31:d1:ee:
88:c3:91:e4:53:2f:13:70:6a:60:b6:22:67:27:70:
d3:57:76:39:3d:fc:7f:6f:88:b7:13:84:a2:87:40:
f3:eb:f1:af:73:8b:6f:6d:5b:de:29:4f:a8:13:c7:
06:dc:58:a2:5e:25:8b:8e:fe:dd:fc:5b:06:3a:42:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:4D:5F:73:18:D6:07:EF:D8:28:92:0D:E3:5A:C9:67:69:BF:79
X509v3 Authority Key Identifier:
keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ff:58:08:f0:2e:a9:96:20:a6:da:73:44:99:18:5e:ed:62:
3e:91:51:4d:20:88:db:c2:11:6a:9d:00:66:c2:4e:2f:2d:01:
cc:6b:00:f5:a4:fa:11:13:0b:e6:05:b2:73:94:c1:e1:62:31:
ec:22:a5:6c:1f:da:2d:8a:9b:86:db:35:92:4c:ef:d3:a4:d8:
cb:25:0f:c5:d3:24:bc:94:65:52:08:76:4f:26:a2:92:d5:ff:
c1:07:b7:49:ad:a9:0d:13:d6:47:da:72:b0:93:23:ce:b6:d2:
8a:18:51:ca:7e:f5:f1:d7:15:5b:bf:07:43:72:57:a5:67:e2:
51:c4:d6:67:5c:61:4a:c2:fa:4b:04:7a:26:34:4f:0b:bb:07:
53:5b:ad:79:ef:4f:07:fa:d2:7b:bc:c4:d1:de:5c:09:7f:19:
af:a6:44:2f:dd:b9:ad:6e:12:fd:8c:91:dc:b3:e7:37:2d:03:
0b:78:d5:f1:91:7c:69:fa:d8:19:3f:70:29:4f:60:65:06:25:
ed:fe:2a:34:c1:c1:3d:d5:84:41:06:84:81:d9:18:87:3b:16:
04:64:fd:10:be:0c:51:e6:c1:dd:d7:24:d0:77:f7:2a:4e:58:
bf:a3:cb:28:a8:4f:26:de:92:57:b2:3a:51:31:7f:51:82:9e:
8b:53:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:49:59 2025 by rpki-client