Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File: vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier: lVmsE3H3+EcEFTc4GQAGFHyzFSpRLAUJfi53VtNxSw0=
Subject key identifier: CE:7E:EB:28:90:28:69:FA:B8:EE:51:2C:18:37:35:80:AD:B1:96:9A
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer: /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial: 01F2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number: 01EB
Signing time: Fri 31 Jan 2025 02:41:13 +0000
Manifest this update: Fri 31 Jan 2025 02:41:12 +0000
Manifest next update: Sun 02 Feb 2025 02:41:12 +0000
Files and hashes: 1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: VReLVWnUKtbgwY0N4WbUYvHdfwo56Q5/qT4b8FitO6c=)
2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Validity
Not Before: Jan 31 02:41:12 2025 GMT
Not After : Feb 2 02:41:12 2025 GMT
Subject: CN=679c3849-d0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:8d:6a:34:da:5f:a1:d0:dc:52:9e:82:3d:
a9:10:63:bb:43:fd:2e:29:2f:9f:8f:36:2e:d5:61:
99:a7:e0:24:ae:75:36:d6:1f:8e:aa:b1:cd:b6:6e:
83:59:1b:57:65:12:45:b1:cc:d3:ab:00:34:8e:aa:
e6:dc:5c:be:4f:09:d7:70:23:49:46:45:2e:8e:b9:
c5:2e:77:9b:ff:da:02:d3:9e:54:2a:09:69:ed:de:
d8:b0:df:a5:1f:de:b1:09:df:aa:23:a8:36:d5:23:
bc:d8:12:b1:0b:66:42:07:ee:f7:bb:92:8c:9e:20:
d6:44:f3:8f:24:95:2c:e7:fb:b8:78:b5:74:c8:37:
60:a0:44:bb:bc:2c:9f:ec:09:4e:0f:46:34:ef:e9:
f4:6d:16:5d:24:50:8f:a9:d6:01:61:61:2b:dd:e6:
27:36:3f:f6:87:90:b7:0d:58:dc:0f:2f:01:74:ce:
96:58:92:9f:fa:80:26:57:21:e6:68:9d:ae:db:c0:
be:55:65:cb:fd:87:74:4a:8a:78:c7:6a:cd:01:5b:
e2:af:ea:d1:bb:ce:4f:ca:80:19:ba:6c:a9:f6:18:
84:03:b9:85:54:7a:1d:64:59:84:33:dc:b2:e0:6a:
2a:2d:13:58:3f:a0:d9:b5:66:85:20:5f:66:80:89:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7E:EB:28:90:28:69:FA:B8:EE:51:2C:18:37:35:80:AD:B1:96:9A
X509v3 Authority Key Identifier:
keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:0d:0f:f3:8d:90:2d:4b:3c:f0:b7:5b:bc:c4:b1:15:a1:e4:
a5:61:eb:32:21:93:8f:71:8f:08:6c:62:0c:88:08:c3:50:a8:
40:35:f8:4d:dc:ea:ed:1c:f5:42:13:94:de:d0:f7:9f:27:f2:
e3:4c:a5:1f:d4:55:e5:88:c4:1b:43:87:b8:75:b5:aa:97:17:
fd:59:57:cd:28:ea:0b:7e:46:03:77:ab:03:6f:95:28:2b:78:
1d:4b:0b:1c:ea:1b:c8:56:02:ec:84:9a:75:2c:04:fd:d6:74:
0d:49:c4:42:e1:8c:7c:b0:f2:e3:af:b4:c5:48:5e:88:25:36:
db:4e:c4:f4:8e:19:47:8b:2c:5c:b8:e6:a6:9c:5e:5f:a3:96:
1e:cc:cd:88:4d:c1:49:16:e9:fd:fa:b9:d1:ab:75:4e:fd:b1:
5e:d9:3f:c1:c3:9f:f6:27:ca:0c:3c:52:0d:c9:ce:2a:fa:4f:
52:e5:9b:58:c6:94:8a:87:b4:c0:23:2e:85:5a:97:d1:64:95:
f1:a9:3e:b7:81:71:85:31:ff:39:48:e8:cd:e8:96:b8:bd:c3:
ea:ad:26:45:8a:a8:0a:c9:ba:17:56:49:8f:ee:d6:a5:22:65:
bb:94:bb:de:85:0b:2c:e4:9c:1b:2e:76:ec:68:fb:c3:6d:9c:
4a:da:ab:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:53 2025 by rpki-client