Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: IUJmH3qq4qLDnZp0QDXnq79hYjJMD13Qlobp5/tqIOI=
Subject key identifier: 20:0C:A8:60:E2:3B:CF:7F:E6:B3:83:26:49:BC:DE:15:4F:C4:46:95
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 05C5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 05C3
Signing time: Sat 10 May 2025 02:21:11 +0000
Manifest this update: Sat 10 May 2025 02:21:10 +0000
Manifest next update: Mon 12 May 2025 02:21:10 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: zHGfFMuoyhSW1q6imwYhKM81lW5WQ6MiSGrH58ARwns=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1477 (0x5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: May 10 02:21:10 2025 GMT
Not After : May 12 02:21:10 2025 GMT
Subject: CN=681eb816-9f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:26:14:b2:66:c8:d7:57:ea:f3:7a:2c:32:f3:
d2:03:83:7c:f5:5d:4b:7d:d2:12:96:7d:7b:47:4e:
2d:42:f3:ea:0d:c9:00:d5:38:59:66:ce:cb:41:48:
40:b8:4f:6f:66:e6:8c:21:75:26:fe:28:99:7e:fd:
c8:22:da:8e:4d:b7:6f:7f:87:90:6c:8e:f9:cb:10:
5d:52:20:32:7f:e0:83:dd:c4:8a:b4:5c:e7:de:76:
dc:7d:78:a9:b4:70:c5:84:08:09:24:cf:db:ec:1b:
81:32:7f:5c:58:43:96:63:5e:20:03:fa:c6:02:63:
8a:1d:94:49:bd:c9:85:b8:4b:ec:90:46:a1:87:57:
d0:14:d8:3a:c6:c9:2b:22:b2:bc:ad:41:ec:f5:97:
d1:86:a7:31:8d:65:df:63:8c:6d:11:76:3c:73:a2:
84:6f:90:27:5c:41:2c:cb:50:1c:51:56:48:31:42:
12:1f:1e:6a:fa:f8:1a:a2:38:f9:8f:4e:7b:5c:07:
66:d0:c0:a2:81:1a:01:ed:9d:58:fb:f9:c3:f7:e2:
9a:f1:ca:60:4c:c5:ee:37:0b:0f:2c:8a:0e:bb:2a:
f5:53:3c:2d:b5:8e:44:7e:cf:20:8a:fd:69:0a:1d:
73:24:f1:3c:1b:f8:de:6b:1c:ee:68:b2:d1:04:5f:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:A8:60:E2:3B:CF:7F:E6:B3:83:26:49:BC:DE:15:4F:C4:46:95
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9c:c4:f9:67:b8:91:d7:19:bb:8d:26:86:34:aa:ca:67:26:
a1:52:79:14:b6:7e:6f:43:80:4f:9f:46:36:f7:be:ca:83:d8:
3c:af:4f:8a:e0:53:62:f0:5f:b5:15:dd:76:4a:5b:15:40:35:
9e:f2:98:52:e1:e2:7b:65:b5:22:1d:5d:70:6d:ac:89:1d:a9:
d7:79:71:c5:44:1b:6d:89:2c:02:ce:26:1e:7c:6a:66:76:ac:
fc:41:0e:f6:83:d4:75:81:85:eb:ad:a3:35:0d:b6:14:6b:14:
04:8a:b0:86:08:79:c2:5d:68:c7:eb:36:16:71:47:59:69:fd:
55:e1:ef:7e:57:d0:58:e4:a8:98:bc:d4:9a:30:6f:b1:d0:ff:
00:a8:1d:a5:72:bc:1e:1e:1c:f1:f2:50:a8:c9:89:9d:0c:60:
15:b6:50:44:ee:9f:a2:db:89:91:f1:67:1b:b5:eb:f1:28:58:
3c:74:c6:59:ad:e4:05:d8:dd:c1:96:28:e0:89:44:83:8c:32:
2a:5e:15:f3:61:08:98:ba:f5:1e:46:f4:74:df:85:de:77:43:
6a:87:af:e3:7c:76:ce:94:b2:42:4b:d6:8f:84:cc:4c:fe:c9:
19:96:51:d1:17:81:1e:7e:3e:6d:4b:59:c7:2a:6c:14:ef:a6:
99:49:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:17:44 2025 by rpki-client