Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File: oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier: Rb9DAw/ImZPGgO3Dm/OKwZrw6FdIRNnLVguzvEs2lzg=
Subject key identifier: 34:A9:A4:DD:CF:D2:A6:7A:A2:20:F6:5E:4E:DE:EE:65:F5:7B:D8:70
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer: /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial: 0D98
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number: 0D93
Signing time: Sat 26 Apr 2025 01:01:09 +0000
Manifest this update: Sat 26 Apr 2025 01:01:08 +0000
Manifest next update: Mon 28 Apr 2025 01:01:08 +0000
Files and hashes: 1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: aFPFABOAxZ9ZQLMr+PhL81aOU84TgR3VM1UkaaLvIR4=)
2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3480 (0xd98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Validity
Not Before: Apr 26 01:01:08 2025 GMT
Not After : Apr 28 01:01:08 2025 GMT
Subject: CN=680c3055-f7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:7b:b5:52:99:22:85:a7:56:e0:69:fc:18:
1d:ad:e0:2f:2f:00:0e:95:5c:9c:15:4e:dc:c8:3f:
be:2b:3d:8c:0d:e6:9f:fc:f5:f3:42:51:6b:79:a4:
df:67:18:cd:ae:e4:18:66:cc:fb:6c:04:dd:e5:45:
de:d5:a1:f6:89:6a:f7:a5:dc:9c:5e:f7:30:43:c3:
86:42:74:ab:27:ac:29:75:ce:d7:3c:eb:1d:32:44:
60:58:49:77:0b:b1:d8:3e:72:3f:3b:18:a2:ac:e7:
58:ad:a4:51:1a:2a:e0:97:86:82:d3:bc:ce:4d:c7:
08:e8:89:ca:81:46:ee:ae:84:0e:48:16:98:fb:06:
25:31:3d:f0:47:03:5c:79:80:9c:6b:62:f5:69:7d:
f6:1f:57:1f:6f:ee:df:4d:f3:a1:9b:ab:b7:58:02:
43:82:cf:17:2d:21:b4:0b:23:c4:4b:b8:ff:65:0a:
ec:50:ce:93:4e:4e:fb:a9:5c:34:e9:9c:35:fa:11:
d7:ee:6d:78:4e:0a:e6:a4:dc:f0:18:bc:b4:27:04:
4c:1b:b0:e9:9d:67:3b:a2:0e:ea:13:6e:85:0b:90:
a9:6d:fc:6c:97:f1:04:d5:2f:6f:f5:60:7c:4e:3b:
22:f6:f1:e3:11:29:80:a8:bc:c8:11:25:ca:ba:ab:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A9:A4:DD:CF:D2:A6:7A:A2:20:F6:5E:4E:DE:EE:65:F5:7B:D8:70
X509v3 Authority Key Identifier:
keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:62:af:a6:93:c5:dd:0f:e9:18:04:49:64:8c:88:5e:f4:c7:
b2:4d:62:eb:ab:4e:20:e0:2e:2a:42:d4:4c:da:62:4c:19:d8:
e9:e6:da:6a:e4:e0:bc:3e:f9:ab:ee:73:d5:61:17:00:11:ec:
84:71:ca:8a:3e:24:c2:bc:c9:d9:72:6b:89:dd:75:49:35:31:
2f:f5:2f:5b:b7:17:d2:22:2f:28:e1:f6:ea:e0:1a:f7:92:fa:
7a:c7:1b:ad:b5:ce:f9:0b:5d:1e:fb:01:0b:10:a1:3d:b0:5a:
14:40:df:1a:2a:f0:a6:07:4f:25:c0:6d:a4:41:39:99:b3:2e:
34:d5:4d:00:6d:cf:d4:88:ba:f1:8a:46:ce:38:f7:27:5f:88:
2f:b1:63:4e:63:6d:44:17:a0:52:2e:1d:2d:33:d2:91:78:73:
6f:72:ba:ba:07:b2:9b:41:d5:34:e0:ef:f2:b8:f2:66:50:c5:
da:d1:49:ce:1f:84:3f:a9:54:27:83:80:f7:69:fa:71:da:79:
66:09:a2:5b:ee:da:a8:e1:bc:d1:de:d2:b2:11:e1:af:bd:0c:
46:c7:4a:a3:54:4b:e1:0f:21:c6:d8:c1:44:71:b9:c8:2e:c9:
be:90:69:2f:58:97:b0:e0:c1:46:3b:5a:f4:d5:8b:e0:e8:f8:
7f:c5:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:58 2025 by rpki-client