Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
File: bJsrNyrAnSupJEghWppeH0zsS-g.mft (raw, json)
Hash identifier: ojLgRHcx8mfA/CGCyCuAbJpj4+Qpp3MFmzJ/JrI7TCo=
Subject key identifier: 2F:84:E2:E2:6A:03:EA:99:2A:14:D4:1B:4D:78:1A:22:E4:76:2B:EF
Authority key identifier: 6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8
Certificate issuer: /CN=F3676F2FAF/serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
Certificate serial: 03C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
Manifest number: 03C3
Signing time: Tue 29 Apr 2025 03:18:09 +0000
Manifest this update: Tue 29 Apr 2025 03:18:08 +0000
Manifest next update: Thu 01 May 2025 03:18:08 +0000
Files and hashes: 1: bJsrNyrAnSupJEghWppeH0zsS-g.crl (hash: DwOJOaJDYdNZDcdVpumQBfeHtwErD3L4r1DCJOS+Huw=)
2: 3BBFB47A4BC311ED9F58BEACF1222468.roa (hash: Bo9mawZxkmKbqi5DFrR6q3VVhH05Go5EaTiUlVdrV5Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 03:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964 (0x3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676F2FAF, serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
Validity
Not Before: Apr 29 03:18:08 2025 GMT
Not After : May 1 03:18:08 2025 GMT
Subject: CN=681044f1-862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:42:89:ab:4a:d7:11:f9:2a:9c:5d:c0:07:
3f:3a:51:d8:a8:a4:7e:7d:53:73:14:aa:a6:c8:df:
25:e5:e6:0a:5b:16:88:0f:85:04:75:70:f6:45:45:
67:64:6a:89:9b:11:e1:cd:20:13:76:32:e2:85:5b:
67:6f:1a:82:df:09:59:71:f4:fc:f7:a0:8e:66:e1:
ae:b5:ce:69:fe:b5:b1:ef:4f:6f:3d:88:d9:6c:50:
70:60:47:90:d1:53:22:8c:fe:1e:09:63:ae:9a:72:
08:9e:3b:24:a1:b9:b6:f4:9d:5c:cd:64:32:7e:4f:
fc:e9:34:b2:21:fc:77:e4:90:63:77:a4:ff:eb:6d:
25:9b:14:a7:8d:9d:10:a6:e8:1a:6a:25:68:3b:a0:
66:4c:b6:aa:9a:85:d7:e6:95:0a:10:c6:30:53:a6:
c7:be:bb:dd:1d:65:72:9c:ed:dd:13:87:35:e1:25:
09:19:c1:e5:9e:f0:b1:9f:a7:27:c8:b3:f1:a6:ed:
c1:8e:11:d3:90:99:f2:94:70:89:fe:ea:21:6d:8c:
13:96:2f:73:3d:20:3f:57:8a:e2:93:4b:53:f1:11:
a2:14:76:19:1d:87:b5:e0:39:7c:9e:4d:9c:fb:37:
e8:2e:a6:52:31:4a:63:d4:4c:79:bb:9e:fb:05:a4:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:E2:E2:6A:03:EA:99:2A:14:D4:1B:4D:78:1A:22:E4:76:2B:EF
X509v3 Authority Key Identifier:
keyid:6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:8b:11:ac:e0:85:1d:b3:54:71:b2:27:f6:9d:7b:56:4d:d0:
9f:09:89:2b:32:1a:66:99:6b:ff:16:f8:67:8b:91:89:69:05:
06:f9:29:00:2c:da:b2:51:5b:d7:01:ab:7a:55:c9:01:ce:6e:
76:58:7c:5d:3b:73:f9:09:f4:d2:dd:51:cd:d3:d7:20:41:42:
0f:0d:ff:83:14:88:f0:16:4d:3c:9f:51:33:22:07:ac:92:a8:
b6:f4:5a:7e:53:33:94:8f:5a:46:11:d1:ea:9f:b7:64:32:4f:
24:15:cd:99:cb:ff:21:02:d8:8d:74:eb:b0:fc:a2:47:a2:64:
dc:cb:01:bf:dc:a3:7b:d8:94:20:52:f7:03:fe:26:23:a9:aa:
3f:2a:40:94:87:99:ee:bc:f1:bc:78:5a:34:de:20:68:aa:c8:
b0:21:a4:a1:fe:90:0f:93:d0:89:ee:9f:7d:60:27:90:08:88:
11:46:88:62:06:47:9b:ab:2e:88:6b:f0:b0:e8:90:b5:e1:d9:
0a:5e:4c:b1:01:2d:dc:70:e8:c3:5e:56:71:88:d0:fe:1c:de:
39:c1:a8:df:96:32:41:9c:1c:c9:36:00:1a:3e:64:6e:5b:f7:
9a:53:5e:f9:58:34:1f:d0:15:34:e1:47:70:5e:03:f8:b9:17:
94:42:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:57:06 2025 by rpki-client