Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier: 8lF1vsPeJPq47gmcUSkB29tqb7PDXSyTkapu5IqMjHQ=
Subject key identifier: 18:12:5A:E6:BC:F2:18:21:BE:88:B3:36:6E:7C:40:6A:33:CC:6C:40
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer: /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial: 0DE8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number: 0DE8
Signing time: Thu 01 May 2025 00:58:32 +0000
Manifest this update: Thu 01 May 2025 00:58:31 +0000
Manifest next update: Sat 03 May 2025 00:58:31 +0000
Files and hashes: 1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: DnO4p/uKavOvSWCFu2pWC0ly1glI2i1/LlOzgQi+W00=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 03 May 2025 00:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3560 (0xde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Validity
Not Before: May 1 00:58:31 2025 GMT
Not After : May 3 00:58:31 2025 GMT
Subject: CN=6812c737-a772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:40:27:04:b1:31:72:92:c6:1a:3a:85:21:
8c:26:6a:d3:9d:55:71:29:3b:00:6a:3f:0d:97:a5:
ad:97:e3:2f:7a:55:05:b4:d8:5a:22:a3:c2:87:23:
33:c6:ed:39:bf:0d:e9:52:2f:9a:94:fb:d0:ff:14:
f0:01:31:17:a5:8d:3c:7c:ac:a6:26:4f:85:3a:3b:
60:c4:1d:15:53:35:60:49:ae:6d:1e:55:99:d6:f3:
fb:f7:d5:ba:71:60:ce:00:49:ca:86:60:3f:06:f1:
27:48:a5:3f:2e:ca:4b:3c:ed:e6:74:51:d5:fe:10:
9b:54:0e:86:83:3e:2a:ba:a1:2a:61:bc:c7:db:d8:
7e:4d:6b:e4:aa:9b:69:1e:9b:bc:91:79:ee:b2:61:
09:19:62:7d:08:e0:d6:61:63:ae:02:2d:bf:97:65:
9e:94:ef:74:e7:5e:90:e2:64:2a:d1:af:a4:46:eb:
10:bc:37:50:d6:b0:2b:c8:27:f8:4b:24:d3:b2:50:
86:31:c9:cb:41:70:67:35:68:a2:d7:97:9e:f3:3e:
e1:04:ce:f5:22:e8:a8:e3:66:48:54:49:ca:43:e4:
e9:93:30:65:65:e8:81:49:03:0c:57:57:16:74:87:
52:4f:8b:0f:2d:79:74:e9:4b:28:9b:f0:ac:ee:9b:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:12:5A:E6:BC:F2:18:21:BE:88:B3:36:6E:7C:40:6A:33:CC:6C:40
X509v3 Authority Key Identifier:
keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:38:72:10:fa:e5:50:62:80:66:e2:c9:a6:b0:e5:8e:f1:d4:
f5:b2:63:54:2a:c5:77:c7:f2:e0:41:55:54:cb:7e:94:91:4e:
27:16:a1:45:61:14:77:24:c0:9e:7c:f2:e4:83:18:e5:bd:5b:
4f:8d:d4:e6:0e:e2:34:00:d2:5c:a9:22:14:2c:09:77:97:65:
27:99:f9:36:e2:5c:3a:0f:89:31:6d:bc:61:88:70:b8:0a:3d:
35:93:1a:11:49:68:6f:f1:fc:0a:9a:00:b9:2a:d9:30:23:cd:
7d:a4:5a:f8:32:7f:74:6a:44:f3:73:a4:0f:f6:8b:46:b6:74:
81:f3:e9:82:91:95:2a:30:31:b8:33:aa:bf:47:bc:e9:76:7c:
4c:af:a8:b8:09:db:31:3f:82:29:ac:7b:63:85:69:cd:b4:d1:
1d:c5:02:20:02:5c:86:3a:ba:52:e1:be:93:37:a5:76:6c:1b:
12:d4:bb:93:af:88:51:eb:36:65:e3:9b:d7:0b:34:52:ac:1c:
e5:f3:2c:80:0e:0e:a7:5d:4f:80:5b:7d:78:99:17:19:3e:33:
e7:66:5d:f1:4c:55:97:2c:cc:75:87:42:14:80:d0:f6:9e:43:
11:cd:27:bb:e4:5a:8a:37:9e:b8:dd:60:e4:9a:34:60:56:2b:
53:1e:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:04:06 2025 by rpki-client