![](/console.gif)
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
File: GS9iV_wr5XP3WbXyvfg9aar_ouc.mft (raw, json)
Hash identifier: hxcsmj/qlW5SfAEKes0BkbXaVb9XonJpcObAFJtaRuw=
Subject key identifier: 78:43:66:57:94:B0:71:7A:A2:46:6B:45:B5:D2:F5:35:A6:09:49:40
Authority key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Certificate issuer: /CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Certificate serial: 0284
Authority info access: rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
Manifest number: 0283
Signing time: Sun 16 Feb 2025 02:32:16 +0000
Manifest this update: Sun 16 Feb 2025 02:32:16 +0000
Manifest next update: Tue 18 Feb 2025 02:32:16 +0000
Files and hashes: 1: GS9iV_wr5XP3WbXyvfg9aar_ouc.crl (hash: 8NWcX3lG/nV3iES9sDQ2lf6z1GHZF78i4eQL6fqICPk=)
2: A147BE680D4211EF9356066C017001B1.roa (hash: QuPZYoQI7oZ3C2C6Xc4HwdYmjHFXWbZWWnj28DQTRz0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615A48AR
Validity
Not Before: Feb 16 02:32:16 2025 GMT
Not After : Feb 18 02:32:16 2025 GMT
Subject: CN=67b14e30-004f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:1f:12:46:7b:ba:56:0c:5a:12:46:4d:ff:
2e:cb:d6:eb:ba:86:26:60:1c:85:52:12:ae:00:cc:
f7:4f:4b:6f:c5:f2:03:fc:4e:40:b5:a8:81:02:37:
07:e3:22:45:67:c3:a7:a8:40:bc:ad:6b:72:bd:6f:
bc:f1:94:e0:c7:e9:53:ae:12:d1:aa:f7:b1:46:02:
df:75:fb:07:6d:48:ce:ba:35:44:3d:da:91:1d:d5:
2a:8a:e2:e2:37:e2:a7:43:41:cc:b0:67:ac:1f:c8:
07:94:11:44:0f:a6:4b:ba:6e:aa:b4:77:5f:e7:10:
10:99:2e:ef:44:2c:25:2e:c4:a9:c2:94:5d:67:08:
50:81:8b:cc:ee:ef:17:5c:65:6a:83:b1:e9:62:83:
52:8b:a0:98:b4:1b:50:fc:5c:b6:98:44:8b:b6:1c:
d2:a5:d9:c1:d9:cb:9d:2a:1d:bd:6e:7e:21:29:39:
85:de:34:2a:88:ec:a2:44:ec:01:39:e5:53:ee:1c:
41:c1:c2:94:d4:1e:70:3d:5b:7c:29:f1:32:91:4c:
de:6a:c3:d8:70:40:df:30:0a:51:f3:28:85:5f:da:
06:77:d2:cc:8a:12:54:55:4c:88:03:6c:18:98:f3:
47:af:d1:86:c2:1f:78:78:28:1f:a5:24:5f:23:5a:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:66:57:94:B0:71:7A:A2:46:6B:45:B5:D2:F5:35:A6:09:49:40
X509v3 Authority Key Identifier:
keyid:19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0d:6a:b4:20:04:77:0d:34:33:07:fb:36:63:37:dc:8f:be:
a3:d2:9a:61:82:d4:d1:af:a4:b9:8b:d9:2b:eb:71:82:c7:d2:
aa:69:34:64:de:51:ed:80:86:fa:57:14:d8:fb:9a:f7:e4:0c:
1d:56:96:84:f4:fd:c9:96:df:12:61:43:09:91:2b:6e:f1:54:
33:fb:6d:c6:16:ee:d0:d0:b4:94:0d:6c:b2:e5:aa:64:67:0c:
83:95:27:1a:87:59:ba:68:02:30:2d:9b:04:6a:7d:b9:ac:95:
38:96:b5:ca:54:7d:95:03:b7:c0:ac:91:7f:0f:a1:e8:9d:40:
1f:d9:78:97:42:8b:65:f7:49:0d:f0:54:31:eb:65:eb:f8:ff:
be:4f:be:9f:5f:84:9f:7c:14:1d:96:29:0b:65:08:1e:23:61:
87:46:2b:f8:de:ba:f1:3a:e7:89:3c:eb:72:db:3e:cd:c0:aa:
3d:a5:8d:71:15:ab:80:a1:76:84:c8:ef:e3:a3:46:43:96:8c:
ae:bc:66:60:7f:a3:9b:c3:3d:59:04:d4:b0:be:3a:be:7b:52:
9f:b6:01:ba:cb:21:83:be:9c:db:10:c3:5a:1c:71:2b:93:72:
07:36:ed:7f:2a:8c:3d:9f:25:47:69:9a:20:23:d4:af:64:c1:
54:ba:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:16 2025 by rpki-client