Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File: ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier: lL51NabflwggwGuFfak3bx9VDzQnmwyFfkbaKuhEyls=
Subject key identifier: 93:6A:50:1C:CE:D6:4E:02:43:4B:78:4D:6C:D7:8C:22:A7:5F:D5:EC
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer: /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial: 6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number: 6C
Signing time: Sun 27 Apr 2025 05:07:13 +0000
Manifest this update: Sun 27 Apr 2025 05:07:12 +0000
Manifest next update: Tue 29 Apr 2025 05:07:12 +0000
Files and hashes: 1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: YqnOGfw+KVHOlehZLQ0Oa1yT2jRauvsfwJVGG7dXQRA=)
2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Validity
Not Before: Apr 27 05:07:12 2025 GMT
Not After : Apr 29 05:07:12 2025 GMT
Subject: CN=680dbb81-2258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:63:ef:c6:8c:64:83:b0:df:69:10:b7:86:
1c:8f:23:20:81:94:53:42:5f:c7:98:eb:7c:0d:d0:
01:40:4d:64:2f:d0:1e:ae:26:72:9e:d0:61:02:59:
16:fe:3c:b1:49:d2:98:af:a8:d0:05:6d:85:ee:06:
ee:e7:56:32:47:0e:24:b4:f8:0b:ea:ea:5f:a7:34:
d9:48:e1:f5:81:fe:c6:c4:0a:06:c8:7f:35:8a:95:
01:8b:56:cc:97:f4:ac:ec:ea:dd:de:64:90:ed:d9:
c4:2a:a8:a5:89:24:c8:9b:e1:46:f2:56:03:eb:7d:
c1:84:e9:9a:71:3a:79:95:7b:ab:84:bd:b2:0c:e8:
a6:6d:56:19:61:18:b4:79:be:e7:d3:14:f3:bf:52:
aa:41:7f:d0:d4:f4:9d:27:a6:64:e5:9a:8e:63:31:
77:ad:5e:2d:4b:fb:64:87:7b:97:82:0f:5f:4a:39:
fc:43:00:d9:fc:12:e9:15:46:24:e7:ba:a7:e2:cb:
85:ec:5c:77:1b:67:de:c8:1e:78:a5:ba:9b:1f:e5:
c6:08:1b:16:9e:06:26:ff:fc:3b:53:5f:76:ed:9e:
9a:36:3b:85:52:74:41:5e:fb:64:60:f1:1f:a3:4d:
69:12:a2:bd:b4:10:47:04:1a:93:a5:d6:51:4a:97:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6A:50:1C:CE:D6:4E:02:43:4B:78:4D:6C:D7:8C:22:A7:5F:D5:EC
X509v3 Authority Key Identifier:
keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:0e:83:02:f4:1c:f3:d2:59:cc:30:0e:40:26:17:0b:68:74:
df:be:62:86:ed:f3:25:e0:f0:6c:17:7a:a2:e9:5e:3b:3e:38:
a5:99:9e:ff:d4:25:b2:e8:d2:85:ca:ff:76:7b:9d:2a:5f:e5:
d9:34:cb:78:98:f7:9d:7d:62:d6:ab:94:fb:ad:92:31:5b:09:
f6:d9:6c:b8:98:12:24:f6:35:8b:b3:d0:03:4b:46:ea:f3:fb:
85:40:de:e1:08:5f:73:60:40:f6:8a:c8:9c:12:8b:44:30:1c:
6e:4a:4f:a8:99:bb:fb:77:c1:bc:8d:bb:ff:46:6f:a8:1b:54:
1d:85:71:74:2c:cb:80:da:74:21:55:1a:47:e4:b5:2c:c6:2b:
50:eb:b3:b1:90:b8:89:3e:c4:93:47:ba:86:ff:68:0a:7a:ed:
da:d2:5e:07:c4:13:87:28:08:ac:a1:2c:ab:00:ca:b7:d5:bf:
ff:b0:2c:81:f3:3b:68:96:73:dc:87:fe:14:a0:21:8a:ec:91:
8b:92:17:1b:75:7c:63:39:a5:63:1c:08:20:1b:6c:84:31:91:
b8:c3:68:93:7b:5f:94:2f:99:b9:55:73:54:bb:eb:32:3e:37:
9b:90:98:53:51:d0:38:f8:a7:62:ad:6b:41:fa:e7:7c:04:6c:
19:6b:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:47:42 2025 by rpki-client