Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
File: -dz45IZ0npp0P-Rz662BTRzsX6k.mft (raw, json)
Hash identifier: c54f7wkrqHr2iS7hTekbYdKrb65Iuc2TE3FF6ptnimk=
Subject key identifier: 4E:69:6C:B8:EC:80:FF:F2:25:45:6C:8D:F5:7F:12:47:5B:19:8C:82
Authority key identifier: F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
Certificate issuer: /CN=F36FCD8DAF/serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Certificate serial: 03F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
Manifest number: 03F3
Signing time: Fri 31 Jan 2025 02:03:44 +0000
Manifest this update: Fri 31 Jan 2025 02:03:44 +0000
Manifest next update: Sun 02 Feb 2025 02:03:44 +0000
Files and hashes: 1: -dz45IZ0npp0P-Rz662BTRzsX6k.crl (hash: CkByGKzubwwlGUwI61I1h7zFEd07TT83tDkxGOp7zdw=)
2: 60D2AC14E0E211EC817382DAF1222468.roa (hash: //5aRoRjO3zpCQq4iVOAY/MrzQveZBFgcw+KQ8Nh8YM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1012 (0x3f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCD8DAF/serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Validity
Not Before: Jan 31 02:03:44 2025 GMT
Not After : Feb 2 02:03:44 2025 GMT
Subject: CN=679c2f80-c551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:47:43:26:d7:75:6d:50:8a:6c:ae:df:c6:37:
11:3f:67:57:76:33:e4:b6:89:81:15:a6:50:21:04:
0f:25:dc:42:6f:2a:1e:3c:bd:5a:30:a8:07:3e:4f:
37:15:62:dd:88:86:ad:87:41:32:cd:a3:ea:fa:f9:
f9:70:7e:32:6c:a1:19:4d:7a:23:18:24:72:fc:ea:
bc:29:d9:99:90:22:e2:2d:71:be:7a:2c:b1:af:09:
c5:f5:af:62:e0:a9:51:46:d2:e8:7a:84:64:71:61:
21:98:96:1f:36:95:b5:f6:17:ba:92:d2:9e:bd:2e:
83:e9:e5:dc:3d:a1:1d:ff:c5:a8:d9:b8:e9:b9:a7:
f6:83:41:b6:11:e2:50:ff:a9:3f:1c:da:a0:da:6a:
b4:15:7d:a6:1d:30:49:3a:f5:a2:ff:77:0d:69:b4:
1a:b4:08:aa:9c:5e:ba:13:b1:66:1d:50:64:ca:a8:
9b:af:47:a1:7c:ef:02:1f:a8:b9:e1:9b:6d:32:3a:
06:47:f9:c0:2f:b3:ea:40:25:5f:bf:eb:92:96:ce:
6f:41:9e:31:35:e1:5e:6c:68:b4:3c:87:ad:41:d9:
dc:be:40:9e:12:7c:e0:cc:29:7d:20:c6:56:37:4a:
0b:60:4c:7c:02:40:58:21:bc:12:92:26:f8:de:ad:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:69:6C:B8:EC:80:FF:F2:25:45:6C:8D:F5:7F:12:47:5B:19:8C:82
X509v3 Authority Key Identifier:
keyid:F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:4e:5e:e8:f4:9c:65:3a:6c:36:bd:69:cb:47:98:86:ee:b1:
ee:d7:df:05:6b:4d:98:b3:ed:12:c6:a2:f1:e1:3b:aa:f2:fa:
29:72:7f:b4:7c:5c:6a:d5:19:af:a3:73:b1:9c:25:c0:22:2f:
b2:95:21:49:9e:9c:7c:9a:cf:9e:c6:4b:98:25:67:c0:b3:39:
5d:f5:69:37:35:a0:ad:c9:0b:63:47:33:11:c9:85:f5:1a:05:
c5:fd:54:fb:a3:a9:2b:c3:51:1d:ef:0d:51:8a:65:93:35:0d:
f5:50:48:f4:aa:f6:63:f6:79:ea:9a:b0:4c:c1:2c:48:d9:33:
6a:01:67:ff:a8:cb:22:19:0a:a6:3d:f0:61:05:59:80:5e:30:
14:c1:4d:25:bb:e6:3d:d3:aa:79:d1:56:f8:5f:88:5d:fc:5f:
3c:6c:65:82:a6:95:49:36:92:40:84:cc:7f:77:f4:98:80:42:
a5:3e:bb:db:d3:6e:b6:60:64:c5:af:a0:39:3e:bd:10:2b:e8:
64:c7:b5:98:97:cf:12:6d:cb:86:0a:8c:d9:8f:20:44:00:21:
13:9e:a4:b1:f8:17:dc:7a:3d:0c:bf:a3:ee:d1:7f:9c:0c:cb:
76:04:f4:c6:83:fa:1e:f0:68:ce:13:c1:ff:4d:02:29:1e:76:
79:d5:01:1b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkNEOERBRjExMC8GA1UEBRMoRjlEQ0Y4RTQ4Njc0OUU5QTc0M0ZFNDczRUJBRDgx
NEQxQ0VDNUZBOTAeFw0yNTAxMzEwMjAzNDRaFw0yNTAyMDIwMjAzNDRaMBgxFjAU
BgNVBAMTDTY3OWMyZjgwLWM1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDsR0Mm13VtUIpsrt/GNxE/Z1d2M+S2iYEVplAhBA8l3EJvKh48vVowqAc+
TzcVYt2Ihq2HQTLNo+r6+flwfjJsoRlNeiMYJHL86rwp2ZmQIuItcb56LLGvCcX1
r2LgqVFG0uh6hGRxYSGYlh82lbX2F7qS0p69LoPp5dw9oR3/xajZuOm5p/aDQbYR
4lD/qT8c2qDaarQVfaYdMEk69aL/dw1ptBq0CKqcXroTsWYdUGTKqJuvR6F87wIf
qLnhm20yOgZH+cAvs+pAJV+/65KWzm9BnjE14V5saLQ8h61B2dy+QJ4SfODMKX0g
xlY3SgtgTHwCQFghvBKSJvjeraNVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTmls
uOyA//IlRWyN9X8SR1sZjIIwHwYDVR0jBBgwFoAU+dz45IZ0npp0P+Rz662BTRzs
X6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDRDhELzJFQjlGN0M0RTBFMTExRUM5MzlERURENkYxMjIyNDY4Ly1kejQ1
SVowbnBwMFAtUno2NjJCVFJ6c1g2ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1kejQ1SVowbnBwMFAtUno2NjJCVFJ6c1g2ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkNEOEQvMkVCOUY3QzRFMEUxMTFFQzkzOURFREQ2RjEy
MjI0NjgvLWR6NDVJWjBucHAwUC1SejY2MkJUUnpzWDZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5Tl7o9JxlOmw2vWnLR5iG7rHu198F
a02Ys+0SxqLx4Tuq8vopcn+0fFxq1Rmvo3OxnCXAIi+ylSFJnpx8ms+exkuYJWfA
szld9Wk3NaCtyQtjRzMRyYX1GgXF/VT7o6krw1Ed7w1RimWTNQ31UEj0qvZj9nnq
mrBMwSxI2TNqAWf/qMsiGQqmPfBhBVmAXjAUwU0lu+Y906p50Vb4X4hd/F88bGWC
ppVJNpJAhMx/d/SYgEKlPrvb0262YGTFr6A5Pr0QK+hkx7WYl88SbcuGCozZjyBE
ACETnqSx+Bfcej0Mv6Pu0X+cDMt2BPTGg/oe8GjOE8H/TQIpHnZ51QEb
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:34 2025 by rpki-client