Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File: ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier: MG1jC3TbbdKFFCyWOJW1gyFBbh88A5BsnpFDu/KDYlo=
Subject key identifier: 86:C3:94:2D:34:DB:8E:24:78:90:5F:3A:AD:A4:5E:9F:D6:21:D2:48
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer: /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial: 79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number: 78
Signing time: Fri 09 May 2025 05:09:35 +0000
Manifest this update: Fri 09 May 2025 05:09:34 +0000
Manifest next update: Sun 11 May 2025 05:09:34 +0000
Files and hashes: 1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: 37X2K7XxxP+Twnq5SIa2I0rgeaZ0K/c3p3nZ3o8zHb8=)
2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 05:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Validity
Not Before: May 9 05:09:34 2025 GMT
Not After : May 11 05:09:34 2025 GMT
Subject: CN=681d8e0e-d014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:28:6e:a5:d2:07:67:29:3d:26:bf:43:c1:
c8:2e:5c:42:46:a3:57:de:53:4f:7d:77:2b:c9:76:
46:aa:ac:45:1a:42:03:2d:b5:7e:4e:3e:73:7c:f1:
81:a1:2b:a1:17:0a:02:5a:77:d8:94:c7:2d:d0:38:
d5:95:f4:fb:f2:3e:e1:65:24:c0:ec:41:01:54:28:
50:db:de:d2:c3:25:d3:a9:ee:26:d4:5c:3a:8f:ce:
05:fb:01:40:2e:e3:31:82:32:45:3c:90:0b:cb:6f:
9b:fc:68:bd:54:13:78:5f:38:fe:6d:8e:a9:92:10:
18:3c:e4:34:aa:46:08:eb:e7:d1:bc:6d:01:f7:a1:
01:31:3f:46:27:af:a0:90:95:14:f5:78:ab:48:f1:
f3:6e:08:1f:51:10:72:22:69:33:2e:59:d4:d2:2b:
ab:13:3f:55:8b:2f:b2:60:ad:ca:99:41:d6:78:dc:
c7:d7:3f:cb:1c:09:b9:9c:cc:40:43:6d:23:44:d2:
32:6d:06:58:ac:38:91:37:9e:04:cf:ac:2d:53:06:
b7:9c:38:3e:c8:7b:34:83:14:a3:62:5b:ee:f2:5e:
db:e9:58:d7:46:cb:f3:3c:47:88:1d:46:49:52:60:
d8:83:fb:2a:c4:da:15:a3:c6:8c:a5:b7:51:0b:9f:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C3:94:2D:34:DB:8E:24:78:90:5F:3A:AD:A4:5E:9F:D6:21:D2:48
X509v3 Authority Key Identifier:
keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:76:f2:db:d8:ce:00:91:31:4f:e4:b7:a6:98:ce:4d:ec:20:
67:ca:4d:55:dd:08:22:cd:2d:d2:d7:2b:6d:60:25:98:6a:f7:
bd:f2:f2:ba:ac:eb:18:79:47:32:78:1d:98:bb:25:b9:14:ec:
5e:33:9b:b4:39:18:46:5f:7a:97:68:ae:bf:61:49:43:2b:93:
5a:19:a7:e1:43:56:79:01:60:d7:7a:09:e3:7f:37:14:3f:b4:
81:a7:da:e2:36:8c:6c:24:71:ba:33:9b:6b:33:3d:0a:bc:e8:
3f:07:1b:f8:03:db:2b:f9:26:70:0a:03:71:1f:cc:af:a3:38:
00:2b:5f:6f:1a:6a:56:71:52:ff:0a:9c:00:8d:8a:53:80:4c:
e8:47:2b:de:58:a1:db:04:9f:9d:74:3f:87:54:42:b5:cd:aa:
8c:f3:d6:6e:cd:d9:13:0a:96:7b:0a:a4:78:c6:76:79:4f:67:
17:88:45:58:a8:09:b0:49:c0:f4:5e:aa:b5:ed:4a:bb:68:7f:
44:81:f7:72:0f:5c:6e:b3:66:83:30:b7:14:d4:5d:61:2c:f4:
0c:62:fe:47:d4:fc:c3:04:06:48:30:e2:80:71:e0:a8:8c:65:
f2:ba:15:14:ba:e0:29:e8:0b:30:2c:35:25:2b:63:53:55:ac:
79:8b:e8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:20:39 2025 by rpki-client