Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: b7Fyj2bDtVSe3feIf//xOUSByCj4KZhGbnwsFuG3XHI=
Subject key identifier: 1C:67:5A:03:5C:81:F4:12:D9:0D:45:FC:01:1D:54:BE:D4:47:D0:4B
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 017B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 017A
Signing time: Fri 31 Jan 2025 02:50:15 +0000
Manifest this update: Fri 31 Jan 2025 02:50:15 +0000
Manifest next update: Sun 02 Feb 2025 02:50:15 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: VJuvGHYYEiD2UdQBpv+cslegxVgro4uWKY15XI19AqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Jan 31 02:50:15 2025 GMT
Not After : Feb 2 02:50:15 2025 GMT
Subject: CN=679c3a67-5c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:b3:26:14:5f:8f:e5:09:6e:93:e2:94:e1:
5c:10:3f:3e:ee:78:c2:05:a5:6e:03:f2:c3:02:17:
0f:2c:f2:4f:60:cf:27:71:1c:0a:53:5b:0f:44:b5:
2b:e8:a0:da:65:18:0f:00:2d:d9:39:ff:1c:d4:6b:
8b:07:5a:27:67:8d:0b:b7:4a:f1:34:c5:5e:d8:4d:
03:cb:56:c9:75:73:36:3e:5c:c2:7a:58:d2:e4:7d:
5c:af:83:ba:36:11:64:e5:e3:3c:8d:29:9e:87:73:
db:27:0c:5a:e6:ab:0a:bf:0c:e0:a2:a2:99:d2:56:
ac:1a:fe:03:30:c4:ca:c6:ba:42:04:9f:de:50:b6:
e9:2b:39:27:ae:8d:fd:b2:ee:18:3b:a1:43:02:d0:
8a:90:c5:64:5f:bd:49:e9:86:26:eb:a5:62:56:8c:
5c:4c:0c:ea:55:50:e8:18:5a:95:6c:f4:21:47:15:
7b:85:6b:22:24:cb:cd:74:bc:0d:7f:c6:28:83:45:
68:d2:6a:3c:b5:4b:77:6c:70:97:37:6b:0d:42:49:
ea:01:71:ca:ec:d2:15:da:03:0e:bc:39:a8:5f:13:
37:6c:9e:cc:aa:77:3e:85:88:05:53:d0:f8:37:91:
4b:ef:e8:a5:7c:f3:5b:ec:34:61:05:63:33:f3:0f:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:67:5A:03:5C:81:F4:12:D9:0D:45:FC:01:1D:54:BE:D4:47:D0:4B
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:42:4c:2f:fb:de:48:6c:ed:e4:29:df:d1:52:3c:0a:3e:9b:
46:e7:ba:c1:1f:f0:29:f0:e0:7f:a3:2e:7b:59:7b:83:fc:bb:
00:3e:90:af:c8:56:e7:e0:45:92:43:c1:6d:40:1c:da:97:c3:
93:82:66:00:53:2c:ef:39:1d:c3:48:f0:dc:02:6e:98:fe:75:
70:c2:7d:56:5d:fa:ae:46:59:a5:26:e2:96:a8:3c:4f:b9:47:
7a:68:b3:a7:80:f4:06:0b:73:1f:20:84:f7:81:e9:7e:2c:df:
11:59:55:da:e7:a3:aa:2b:f8:ad:aa:9a:bd:5a:88:41:f8:0f:
6d:88:34:f1:36:94:ca:fb:dd:da:65:66:d0:53:7b:7a:10:96:
db:0e:cf:36:31:77:28:38:3f:21:8d:ee:0f:ad:e2:4f:43:4d:
53:89:22:63:86:07:e4:63:4d:9e:8e:fb:b9:17:f2:99:07:3b:
7d:dd:98:7e:55:5b:2a:95:8c:37:b3:db:20:6d:30:62:61:fa:
a3:72:ef:87:08:05:86:b3:04:30:53:51:e1:b3:16:02:3c:41:
3f:b6:54:3d:7b:44:ba:74:14:87:22:76:69:8f:05:32:47:83:
df:e7:50:ff:28:bc:d1:c5:97:ca:83:85:bf:df:41:f8:9f:e0:
be:97:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:06 2025 by rpki-client