Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File: kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier: /I6H14S0Y/tinTzNrzWk9B86ZnJyTupLX2tQ7filIIk=
Subject key identifier: F8:58:EF:37:D0:AB:C3:48:DA:F9:52:89:38:99:8F:27:54:99:81:7E
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer: /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial: 02F4
Authority info access: rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number: 02F3
Signing time: Fri 31 Jan 2025 02:20:53 +0000
Manifest this update: Fri 31 Jan 2025 02:20:52 +0000
Manifest next update: Sun 02 Feb 2025 02:20:52 +0000
Files and hashes: 1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: I/UJgRmbSsOYAbJUoxANds51J8HfJQgW2t5tYleLsAw=)
2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Validity
Not Before: Jan 31 02:20:52 2025 GMT
Not After : Feb 2 02:20:52 2025 GMT
Subject: CN=679c3384-acce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:f9:6a:e5:2a:6b:67:7c:44:47:2b:d8:96:
ab:b5:21:b0:1a:6f:34:cf:ca:3f:2f:cf:ac:30:61:
0c:72:31:e7:17:13:21:53:7e:ba:76:11:5d:c9:61:
aa:42:76:0e:f7:01:cd:a2:6a:c7:1d:fa:2c:c8:af:
b6:89:98:a1:20:9f:4d:3b:4b:0c:1d:b4:94:f6:ff:
d1:ca:a0:ed:d1:aa:af:ca:16:81:9d:7e:bb:62:51:
f3:eb:bb:43:50:dc:3f:32:e1:72:8b:98:df:0a:f8:
3e:34:a4:b7:8d:68:58:f2:63:df:dc:f4:66:a1:bb:
71:b6:8f:cc:22:2a:67:6f:ae:11:32:9e:1c:50:b9:
73:0d:5c:5d:bc:fb:0f:c7:3b:4a:8b:d4:07:0c:03:
41:56:c7:42:7c:fb:bb:01:58:5b:b4:6e:94:c5:a3:
60:99:c7:93:98:d4:b7:50:86:f9:48:99:b0:ad:69:
82:ae:c5:96:ff:81:a8:b1:3f:52:37:a2:a0:ba:98:
09:79:37:f2:d3:68:37:4f:65:23:b0:07:91:51:80:
8f:b7:27:28:c2:b1:2d:a8:34:fa:b2:ef:20:65:d2:
16:4e:b6:33:44:ef:97:54:56:3b:64:51:2a:53:f6:
49:b1:c5:ae:be:50:9d:54:b8:3f:e2:be:f2:68:56:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:58:EF:37:D0:AB:C3:48:DA:F9:52:89:38:99:8F:27:54:99:81:7E
X509v3 Authority Key Identifier:
keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:28:07:72:73:36:9b:1d:0b:18:8a:c2:4a:97:86:a4:e6:e7:
16:49:5a:d6:7a:d3:72:92:7f:07:95:76:3d:a4:52:42:ed:b6:
5b:38:9a:ab:3f:b5:aa:d1:ff:b9:c1:49:02:3d:d6:cf:ac:b6:
9c:cb:a7:8f:dd:ef:9b:66:8d:39:89:56:67:a0:f1:c5:f2:50:
1c:f2:fe:b7:52:22:fa:c1:92:fe:48:c4:a6:ca:d3:60:db:e1:
a2:52:b3:a6:8f:e8:0c:23:2f:6a:e1:83:8d:c9:cd:93:77:d1:
a4:1b:4c:1e:b8:cd:25:18:6c:4c:21:71:36:e6:c1:d2:97:74:
43:5d:95:12:db:6c:be:b2:86:eb:5e:b7:20:c2:c8:bc:24:13:
d1:bd:6e:46:eb:0f:db:f7:19:b0:78:88:96:ee:7b:40:9c:2f:
18:0d:6b:cf:59:e5:90:b2:4c:5e:ca:8a:2f:f2:33:a5:ae:b5:
65:15:b3:f9:38:ae:3f:65:f2:2e:b3:2a:26:28:e6:87:4c:d9:
50:50:6a:41:3b:35:9d:a5:ba:bb:c7:d5:38:79:17:fe:43:43:
60:19:02:63:de:cf:bd:d0:c2:2d:a8:41:34:b0:36:12:08:bb:
83:3c:a1:c4:5d:23:18:33:ff:6d:0c:74:e5:e8:0e:52:87:c4:
80:9b:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:29 2025 by rpki-client