Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File: HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier: JE9lXeBktVrQTQNewlbs9mFUSeDaevdHOOkGZ4ZopBc=
Subject key identifier: 61:95:D3:2B:82:E2:FF:8E:F9:02:C7:51:EF:8F:45:F6:65:20:71:2F
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer: /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial: 0287
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number: 0286
Signing time: Fri 31 Jan 2025 02:28:51 +0000
Manifest this update: Fri 31 Jan 2025 02:28:51 +0000
Manifest next update: Sun 02 Feb 2025 02:28:51 +0000
Files and hashes: 1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: dDZlYaCX896IF1YFZ/brsu/51a6AahhptkWtk7z2dYs=)
2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Validity
Not Before: Jan 31 02:28:51 2025 GMT
Not After : Feb 2 02:28:51 2025 GMT
Subject: CN=679c3563-f5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:9d:66:27:6a:ce:03:89:6d:c9:b5:31:71:
89:22:9d:c1:d4:02:66:50:df:e4:08:b0:ee:27:fa:
ef:0d:80:5e:ec:1c:52:10:70:90:a3:8b:c9:a8:8e:
a9:94:d0:e5:aa:8d:59:93:44:e2:f7:91:33:ef:4c:
07:48:c9:d8:b2:31:f5:0b:01:e9:40:8d:c7:92:fc:
5f:41:ff:2e:b5:d9:30:8c:d2:4d:29:0f:1a:96:af:
1b:af:b3:e3:5a:f9:5e:61:4d:f6:39:44:ac:e7:37:
2c:14:7c:65:24:76:50:44:09:f4:9e:db:ce:9c:41:
4b:23:9b:5c:56:07:1c:e9:ab:ea:12:38:03:60:dc:
12:68:81:09:61:b2:6d:16:20:bc:2f:dd:83:b4:0d:
45:6e:f9:29:94:df:d6:08:71:b2:a9:6e:11:db:94:
59:fd:8e:01:d3:5a:95:5e:e5:7a:45:4c:52:89:8e:
09:cb:a9:be:e5:92:2f:f2:a0:50:ff:ee:f8:0e:75:
2d:7f:d0:08:cf:f3:7b:de:0f:54:08:9e:4d:59:0d:
44:53:3c:2a:fe:65:40:4c:ff:02:66:29:ed:2d:19:
2c:bd:c4:fc:c1:b7:7f:ac:79:1a:b1:72:3f:c4:39:
5e:a3:85:ab:60:92:18:d3:58:43:5f:48:bc:5e:97:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:D3:2B:82:E2:FF:8E:F9:02:C7:51:EF:8F:45:F6:65:20:71:2F
X509v3 Authority Key Identifier:
keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c8:7e:06:39:e8:f4:54:ff:fc:03:56:5b:09:5a:5c:df:89:
19:4e:57:a3:fd:59:b2:67:a2:2a:51:49:59:7e:44:1c:ae:9d:
27:53:c4:6b:a3:a3:49:d0:35:e8:ff:1d:83:4d:e4:e2:67:c8:
f0:16:00:fa:fb:f5:ac:ec:69:07:22:32:c5:c9:74:c5:59:ed:
2d:6c:c1:f0:e2:a3:80:7d:ba:4c:2c:bb:08:34:26:28:3e:2e:
5c:b5:09:75:50:5a:c4:e7:6b:5c:77:8b:8b:24:77:44:4b:d8:
83:ee:f0:56:03:c0:17:f2:74:26:8f:f7:78:34:08:99:17:49:
c5:72:68:59:a2:c7:c8:62:bb:ee:40:0f:e1:2a:e5:f6:a5:40:
59:fc:3e:ef:fe:8a:0c:0f:00:dd:62:b8:70:0a:d9:b4:8e:4e:
27:26:53:d6:1b:c1:f1:b6:d2:70:ed:16:f0:19:ef:4b:b2:20:
2d:1e:6b:13:1b:4a:d2:20:96:82:85:d0:ba:9a:f2:d4:f8:c1:
8f:eb:8b:a3:43:55:17:9e:90:f3:63:be:fc:11:3c:ff:d1:b4:
af:08:46:39:b4:f2:d0:cc:a7:5c:ee:99:ba:7d:d1:50:c8:10:
9d:14:81:df:ef:e2:fc:7b:b7:5a:9a:6a:f0:cf:73:23:99:18:
a3:ac:37:66
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAocwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTJCNjlBRjExMC8GA1UEBRMoMUNEOTY2Mjc3NTExOTMyRDNBRDFGRDJEMzAxNEY2
RTE2OENDNDhFNTAeFw0yNTAxMzEwMjI4NTFaFw0yNTAyMDIwMjI4NTFaMBgxFjAU
BgNVBAMTDTY3OWMzNTYzLWY1YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuV51mJ2rOA4ltybUxcYkincHUAmZQ3+QIsO4n+u8NgF7sHFIQcJCji8mo
jqmU0OWqjVmTROL3kTPvTAdIydiyMfULAelAjceS/F9B/y612TCM0k0pDxqWrxuv
s+Na+V5hTfY5RKznNywUfGUkdlBECfSe286cQUsjm1xWBxzpq+oSOANg3BJogQlh
sm0WILwv3YO0DUVu+SmU39YIcbKpbhHblFn9jgHTWpVe5XpFTFKJjgnLqb7lki/y
oFD/7vgOdS1/0AjP83veD1QInk1ZDURTPCr+ZUBM/wJmKe0tGSy9xPzBt3+seRqx
cj/EOV6jhatgkhjTWENfSLxel2ZNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYZXT
K4Li/475AsdR749F9mUgcS8wHwYDVR0jBBgwFoAUHNlmJ3URky060f0tMBT24WjM
SOUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyQjY5LzFCNkFDNTM4RjY3ODExRURBMzM2NzIxOTRBRDlFNkZDL0hObG1K
M1VSa3kwNjBmMHRNQlQyNFdqTVNPVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hObG1KM1VSa3kwNjBmMHRNQlQyNFdqTVNPVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTJCNjkvMUI2QUM1MzhGNjc4MTFFREEzMzY3MjE5NEFE
OUU2RkMvSE5sbUozVVJreTA2MGYwdE1CVDI0V2pNU09VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtyH4GOej0VP/8A1ZbCVpc34kZTlej
/VmyZ6IqUUlZfkQcrp0nU8Rro6NJ0DXo/x2DTeTiZ8jwFgD6+/Ws7GkHIjLFyXTF
We0tbMHw4qOAfbpMLLsINCYoPi5ctQl1UFrE52tcd4uLJHdES9iD7vBWA8AX8nQm
j/d4NAiZF0nFcmhZosfIYrvuQA/hKuX2pUBZ/D7v/ooMDwDdYrhwCtm0jk4nJlPW
G8HxttJw7RbwGe9LsiAtHmsTG0rSIJaChdC6mvLU+MGP64ujQ1UXnpDzY778ETz/
0bSvCEY5tPLQzKdc7pm6fdFQyBCdFIHf7+L8e7dammrwz3MjmRijrDdm
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:24 2025 by rpki-client