Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
File: mo0OmoAqT1sF0LmwiVg0TYdylpw.mft (raw, json)
Hash identifier: FqamZlFlxb61N4Vn3XrXzF8WWSTvG6jlhmVbmzak4nM=
Subject key identifier: EE:09:BA:18:6F:6F:82:76:11:94:CC:52:E4:5E:D3:9A:11:FF:8A:81
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Certificate issuer: /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial: 02A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
Manifest number: 029E
Signing time: Mon 28 Apr 2025 03:57:13 +0000
Manifest this update: Mon 28 Apr 2025 03:57:12 +0000
Manifest next update: Wed 30 Apr 2025 03:57:12 +0000
Files and hashes: 1: mo0OmoAqT1sF0LmwiVg0TYdylpw.crl (hash: QRjxa3MuwFRLGLIZSZAI4H7ei2ETbazwt7zi1IP2ZUY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664A2AAF, serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Validity
Not Before: Apr 28 03:57:12 2025 GMT
Not After : Apr 30 03:57:12 2025 GMT
Subject: CN=680efc99-9178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:9d:c7:b2:3c:1d:6a:e4:0a:d0:02:c9:28:
07:fb:15:cd:74:75:9e:da:8d:72:df:63:8e:38:21:
d6:82:bf:c3:8d:b7:19:1a:cc:8f:ce:fa:13:fc:0a:
33:79:bc:30:12:94:e3:33:3d:b9:69:b8:d6:ad:50:
15:cb:f9:22:14:70:30:73:77:f9:e4:eb:14:59:6e:
e5:99:93:df:71:29:b3:5c:d5:0a:a1:99:86:33:2a:
80:b3:22:68:f7:2f:14:a6:e2:12:6c:c4:4b:dc:93:
89:2b:60:3f:cd:2a:c2:3a:8f:63:26:82:21:f8:f1:
7f:98:28:ea:f4:46:e6:b0:29:10:92:6c:b5:b0:f3:
6a:9c:69:d4:65:99:69:e2:fd:90:a1:ab:48:f1:70:
dd:9b:fc:67:42:6d:d8:f5:3f:c5:60:1f:22:09:9b:
fd:ef:b6:cd:0e:52:7e:0e:59:ec:a8:31:18:1d:10:
4a:52:46:e0:8f:37:79:aa:a4:d5:8b:57:23:25:71:
24:de:22:39:50:83:8f:46:ff:0e:d3:5b:3f:db:41:
57:21:00:e7:0f:19:06:92:ef:f3:a4:cf:ea:f2:b8:
30:a0:9c:2a:56:58:3e:2c:93:eb:78:f9:3b:6d:bd:
f7:39:5b:99:f4:48:4f:18:30:08:35:6c:2d:38:6c:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:09:BA:18:6F:6F:82:76:11:94:CC:52:E4:5E:D3:9A:11:FF:8A:81
X509v3 Authority Key Identifier:
keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:0d:5d:e8:97:52:33:57:a9:52:12:f1:a9:85:74:eb:58:5e:
b4:06:6e:72:ba:9f:a5:58:67:82:f0:30:db:ba:e6:c5:65:31:
1d:d2:0b:88:60:49:5b:ee:ad:eb:83:4a:42:89:70:3b:b4:98:
65:b9:e2:0f:fd:5c:36:ff:08:e8:94:da:4a:c5:c7:8f:d0:67:
5c:17:a9:b5:ba:78:db:61:bc:ea:4a:3b:f1:7e:6c:a8:e5:2d:
c7:dc:b2:f3:43:ee:84:aa:04:b8:b1:5f:2b:44:66:c5:7d:4e:
89:7b:e8:8a:1c:bd:69:b6:cd:43:4a:dc:88:af:7a:38:20:8a:
da:12:95:49:e7:6c:76:9e:5a:41:b8:93:ed:d6:98:f7:8d:00:
35:f6:e1:db:4b:08:97:b3:95:bc:51:bd:8e:ea:60:dc:85:df:
46:91:72:be:98:51:64:35:db:e9:17:cd:36:7b:60:30:9d:96:
8d:32:02:db:b4:cd:7d:91:dd:40:56:fb:c3:a9:60:2c:14:8a:
27:0b:78:9a:50:1a:41:de:98:54:8d:4f:62:0c:2a:7b:85:82:
f3:95:e7:8f:40:17:32:8f:a0:d8:ef:cc:68:65:05:58:b3:dd:
37:56:c8:54:ee:37:01:bb:f3:7e:77:5e:15:e2:c7:78:71:53:
45:3c:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:45:22 2025 by rpki-client