Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File: xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier: yAnFNqz36kyz2fp61s9gQ4Dyhz4zL5a1+wlut67RUPc=
Subject key identifier: BF:05:2E:2C:92:AD:53:D5:63:EC:FF:E6:AA:3E:6C:11:3B:92:86:79
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer: /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial: 0405
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number: 0405
Signing time: Fri 31 Jan 2025 02:02:29 +0000
Manifest this update: Fri 31 Jan 2025 02:02:29 +0000
Manifest next update: Sun 02 Feb 2025 02:02:29 +0000
Files and hashes: 1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: VuHNc0yWwrIGwPVM4alFX3+vqhb6Y0F1tclDl1kaAI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Validity
Not Before: Jan 31 02:02:29 2025 GMT
Not After : Feb 2 02:02:29 2025 GMT
Subject: CN=679c2f35-276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:10:51:cb:b7:c4:18:b9:31:6d:74:44:93:66:
40:68:ea:2b:0b:be:a1:8e:5d:83:50:ac:e9:e0:a5:
0d:e0:df:d5:2b:0c:cb:77:98:9a:15:3c:96:3a:13:
0f:6b:78:64:57:f3:fe:e3:7e:70:1c:b3:03:3c:ba:
c2:18:fd:d1:85:04:c1:f1:76:e2:97:52:c4:c9:c0:
43:ee:0b:85:60:bd:23:86:39:db:ab:2d:7b:a1:6b:
b9:01:55:92:56:25:2c:71:19:ef:8e:dd:08:30:08:
01:ba:94:68:88:f3:37:53:e4:ea:3f:ab:7f:50:92:
13:31:c2:21:6b:fb:1d:24:8f:f1:fe:2e:c8:67:79:
41:04:14:45:1a:1c:6d:64:27:a3:4f:74:fc:dd:69:
05:47:e4:27:d8:d4:16:6f:e8:d8:54:52:76:c1:fc:
f6:e6:1d:45:98:b9:2d:19:fa:b6:09:3f:c7:f6:de:
85:08:a2:ef:cd:88:c1:80:09:19:12:34:27:8e:45:
ec:c9:da:e5:8c:1b:13:0f:9a:e2:be:8a:ad:b6:4c:
3b:e7:7c:74:70:0f:ca:fd:87:0d:8d:ee:63:7f:cd:
bc:43:e7:8e:69:66:cb:cd:84:f5:30:ae:05:b0:10:
93:24:64:7b:bc:df:28:52:6f:91:9b:f3:34:ca:b5:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:05:2E:2C:92:AD:53:D5:63:EC:FF:E6:AA:3E:6C:11:3B:92:86:79
X509v3 Authority Key Identifier:
keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:e9:a6:56:1d:a9:0b:3e:7f:1b:a4:04:86:01:12:2b:f6:36:
3a:e3:dc:7d:48:87:50:ad:a2:d6:b2:2d:e4:4e:14:dd:e1:0f:
dc:cf:41:52:16:79:a2:b6:2d:5e:47:a2:d5:e7:f9:52:fb:fd:
07:4d:8b:26:24:3f:14:ec:35:19:51:b6:61:de:89:0d:af:49:
14:25:97:0d:78:92:23:a5:3d:4f:25:b7:c7:94:56:55:1b:a3:
c7:f0:4c:21:2a:ff:64:0f:df:50:fd:62:42:17:57:3c:65:fe:
52:63:5a:00:a5:b5:db:40:c6:d6:07:ee:9d:ac:71:f2:9f:1b:
cd:e1:1e:a0:4d:f6:79:fb:88:a8:58:98:56:df:5a:88:a6:ff:
36:86:c8:cd:4d:af:64:2e:b2:ef:13:6d:c3:25:ca:79:55:42:
cc:42:60:f8:be:a2:1a:51:d4:33:e7:3c:0e:b6:a3:93:85:bf:
59:01:58:41:08:3d:53:29:87:7d:8d:1d:20:ab:0f:14:53:c3:
96:74:6c:f7:da:e1:e6:f5:b5:b1:b6:e1:3e:48:80:94:6d:c3:
52:fa:77:1f:c7:c4:63:eb:09:3c:c9:8f:aa:83:ed:68:a7:91:
67:f6:6f:1e:46:32:dd:55:b0:f3:b7:8a:0a:dd:46:90:a4:23:
c8:39:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:59:03 2025 by rpki-client