Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: 2IJyeL2FH1Q8xGSEic9gKKuPlT+WFRb/OdxEHFD6ONY=
Subject key identifier: 1C:4E:61:3B:73:9D:A0:14:AC:B7:3C:62:AF:4B:29:12:8E:BC:EF:68
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 05BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 05B8
Signing time: Tue 29 Apr 2025 02:22:23 +0000
Manifest this update: Tue 29 Apr 2025 02:22:23 +0000
Manifest next update: Thu 01 May 2025 02:22:22 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: y4pDq1XkWz9iZhT3cwjM0dpTxWTXsyENk16AsPbSahU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 00:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1466 (0x5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Apr 29 02:22:23 2025 GMT
Not After : May 1 02:22:22 2025 GMT
Subject: CN=681037df-c79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:46:ed:68:b7:49:12:85:93:0a:55:25:7e:
5d:24:44:3c:c4:81:7b:b9:5f:14:f8:ed:69:ac:e5:
a0:86:e4:c9:98:fc:8c:da:65:e9:45:c8:82:4d:a7:
ac:60:76:66:e3:9b:94:a1:05:6b:21:bf:7c:37:0b:
48:71:d5:99:cd:2b:f9:6b:5e:97:67:84:a6:f1:ad:
eb:a9:97:ff:7f:b9:54:8c:8d:8f:38:35:3d:8a:83:
84:61:7a:58:c7:9e:23:87:ab:3c:d5:c7:82:9d:1f:
f8:df:f2:95:22:ac:55:5a:a0:6f:41:56:9a:06:e4:
51:9e:2d:04:10:bf:29:49:e6:81:be:93:e4:71:9e:
d2:d7:d4:24:51:2a:04:8d:1c:76:14:c1:c5:ff:17:
d5:5c:b5:1a:ef:ec:1b:9c:ca:95:35:8c:e5:da:31:
c9:96:e1:65:6f:d4:cc:e1:75:e0:e7:59:72:89:f1:
29:17:77:fc:f9:d1:6b:59:50:a6:81:49:55:80:d3:
b5:41:bb:d7:0d:5b:0b:86:b8:62:24:aa:8c:f2:91:
d7:b4:dd:df:74:60:3f:da:a2:2a:9f:19:4f:0e:51:
c5:2d:2e:51:b9:84:19:34:88:03:0c:16:5e:07:08:
54:7f:4a:9b:4e:33:6c:e2:fa:92:9e:73:0d:74:1e:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:61:3B:73:9D:A0:14:AC:B7:3C:62:AF:4B:29:12:8E:BC:EF:68
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d4:45:85:fc:e8:d0:69:11:e7:8e:2d:d8:4f:f6:3f:65:b3:
5c:09:bc:59:b8:69:4a:fd:7c:c9:3f:54:78:fd:86:de:d2:9b:
af:39:b5:c5:00:5c:f2:0d:ab:f7:02:bc:c0:e4:be:c9:18:f5:
0a:5f:47:36:b4:06:f7:82:75:e9:9f:18:55:7b:f4:6b:5d:79:
d3:9f:a9:4f:ba:50:3d:68:f8:55:30:ea:ac:5c:be:3a:d8:f0:
c1:4f:91:18:22:0b:7a:2f:79:54:db:69:2c:20:4b:36:4f:bf:
4c:70:1d:09:09:5c:23:b6:15:e5:04:bb:9d:2d:cd:27:cf:18:
c5:e5:47:97:32:32:34:78:99:b0:4a:2a:fe:fd:d3:b1:d7:d2:
b1:9d:69:d4:da:46:92:f4:b6:d6:23:6a:c1:52:10:6d:e6:2b:
ec:d2:58:5f:e4:05:e1:bd:00:20:96:9a:0b:41:c1:20:3c:f3:
1e:35:e6:5a:20:86:53:b5:ec:32:f3:6a:d2:60:c8:6f:be:55:
df:fa:c7:05:6a:88:d6:42:9a:f0:2f:cd:2f:51:4e:68:bb:10:
65:5a:f7:c7:95:7e:7f:6f:ca:b0:db:a5:26:a2:3a:b3:a8:0e:
c0:1d:1b:09:86:03:75:4b:b3:e2:43:e5:bc:03:b0:c9:d0:4a:
55:bd:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:48:04 2025 by rpki-client