Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: NVtKvkJVsWGLCW+GjMGX/eGs2tWxF7RS/hMcAxlQB/8=
Subject key identifier: 97:3A:5A:FD:23:22:7D:B9:1A:DF:E9:6B:A9:E9:54:BA:D1:D3:68:6B
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 05FA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 05F8
Signing time: Tue 01 Jul 2025 02:23:34 +0000
Manifest this update: Tue 01 Jul 2025 02:23:33 +0000
Manifest next update: Thu 03 Jul 2025 02:23:33 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: rnEsAm/a+4/b4WYhE+8wYf+AnWOcT54a4+PTF/C0myA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 02:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jul 1 02:23:33 2025 GMT
Not After : Jul 3 02:23:33 2025 GMT
Subject: CN=686346a6-410c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:c8:4b:29:6c:09:29:95:fc:0d:90:5e:d1:
7c:ac:8e:1f:a9:55:f0:1f:e2:f5:28:c5:49:fe:1d:
a5:87:48:fc:bb:9e:6c:f7:87:1c:11:4c:bb:3e:ba:
57:50:3d:d1:83:0e:5b:1b:72:c5:74:3e:f0:ef:48:
f2:64:c9:11:df:2a:c3:f5:a3:b8:2d:5f:96:8f:64:
aa:41:d0:9c:6e:89:04:0b:c7:c3:02:c2:84:7d:2d:
80:08:9e:68:23:2b:94:b3:3d:71:ee:0a:8c:f4:ab:
99:7b:a3:8b:f5:f2:20:4a:ff:d8:b4:21:00:e8:c3:
ef:54:c9:32:cd:26:4b:71:1e:6f:78:1d:31:2e:27:
e3:3b:0f:eb:43:af:ad:79:cb:60:62:c7:6d:7c:f2:
e4:7a:64:e5:c7:00:95:3d:10:5e:66:e8:e1:5b:3c:
29:21:c0:4a:86:0a:53:c6:37:5f:a1:57:4a:1b:fa:
e1:b2:6a:1b:97:d6:a1:9c:c1:06:6a:e8:c5:8c:d2:
a4:e0:4c:5f:e6:98:ed:ec:f0:54:23:0a:8d:04:5d:
00:f0:39:e5:a5:09:3b:bc:91:8c:4c:fe:72:85:83:
b7:de:a1:de:72:29:1c:44:9c:7b:d3:ae:5a:fd:81:
6d:6d:72:7d:8d:02:41:cc:25:2a:15:29:f5:0a:ec:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:5A:FD:23:22:7D:B9:1A:DF:E9:6B:A9:E9:54:BA:D1:D3:68:6B
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:19:27:a2:3b:05:3e:11:73:c6:3e:3b:cd:2b:04:e4:88:93:
ab:78:5b:a2:c7:2d:56:9a:c5:67:83:b2:9f:a2:ae:3b:9a:eb:
6e:4a:4e:8e:27:56:b3:ce:22:13:9e:ea:e1:e1:55:2b:45:a9:
cd:f3:26:22:ee:9f:3b:2f:d7:58:3f:1e:c5:b7:fa:aa:81:61:
d9:66:9f:65:54:15:04:65:98:f5:e5:59:27:c4:1c:84:b7:75:
68:82:8e:4d:3a:b4:ee:d7:43:b8:38:75:ba:61:43:98:a0:81:
67:56:1d:f9:c0:c0:ce:73:a3:c2:27:6e:37:2e:b3:dc:b3:48:
93:0c:cf:be:07:d8:3d:5c:1d:85:7c:3d:29:09:08:10:e7:f1:
11:75:0b:79:47:b9:fa:2d:e9:d5:e8:e6:d4:c0:2b:0f:fc:9d:
eb:50:da:96:92:69:1c:5a:f8:bf:ea:6d:af:2e:c2:86:2a:e9:
f2:87:0c:92:85:c9:98:80:ec:50:8f:fe:c0:5b:e5:de:8d:fd:
d8:31:6a:f8:21:84:74:f5:71:49:5e:39:75:c4:42:56:71:84:
c9:c1:82:48:21:09:87:cf:18:a8:10:e2:48:6a:00:b2:72:08:
45:07:fa:7e:44:ff:b6:06:14:38:56:85:af:da:13:c9:1e:5f:
11:73:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:36:09 2025 by rpki-client