Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: 4yRJ9Px9zssE5o3oKq5lrNY7pbVoCcKNs3Uk/2QEdsA=
Subject key identifier: 5D:3C:27:AF:29:E7:54:E8:9B:8D:E3:38:21:A5:EE:13:93:AF:9B:B9
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 0440
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 043E
Signing time: Sat 27 Apr 2024 01:45:00 +0000
Manifest this update: Sat 27 Apr 2024 01:45:00 +0000
Manifest next update: Mon 29 Apr 2024 01:45:00 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: FrM/yEibtWb+txKEkO5dlGB5e6907+T2qz2Uuv8REzA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 11:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1088 (0x440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Apr 27 01:45:00 2024 GMT
Not After : Apr 29 01:45:00 2024 GMT
Subject: CN=662c589c-371b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:90:f4:52:a5:db:1d:4e:4d:ba:93:d7:93:
f7:da:d9:34:01:55:98:7a:70:e8:7f:8d:78:e6:cc:
1f:dd:9b:ef:59:ea:7b:95:14:24:4d:ed:12:6b:85:
d8:6c:e7:11:0d:d3:fe:92:fe:10:37:d1:a8:b6:9e:
a5:33:4f:61:91:37:e7:86:28:20:66:b3:23:af:ba:
a3:45:13:3a:50:ac:e4:99:a3:f2:f0:40:f4:77:cf:
b0:09:67:bc:c2:69:be:12:39:1a:2a:5d:24:7b:6c:
cd:85:a9:cd:74:9e:90:c8:bc:b3:9b:42:53:a7:68:
97:c5:22:31:96:67:19:84:26:83:7d:63:53:dd:fe:
8a:63:2a:eb:ad:21:80:27:15:5e:6c:1a:b4:d6:3b:
dc:a8:f7:e5:e4:2b:f1:f2:c4:4a:60:85:e2:d2:71:
e2:58:2c:d3:f2:4f:c1:6b:56:93:8b:c8:ce:7e:62:
64:71:7b:c7:8e:38:72:b3:39:8e:b2:0a:00:c7:22:
df:1b:de:f5:83:b1:c2:00:c0:7f:8a:18:82:2e:35:
e0:7a:0a:b9:16:6a:d6:0a:e9:2b:f7:f7:b8:54:01:
e4:62:de:6e:05:0c:73:58:09:1b:c2:e2:34:16:b0:
08:c0:19:e6:5d:7d:ff:60:98:b3:fe:b1:2c:86:41:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:27:AF:29:E7:54:E8:9B:8D:E3:38:21:A5:EE:13:93:AF:9B:B9
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:c0:95:cf:8e:0d:b5:6f:77:c9:63:92:91:0b:62:27:23:a9:
75:be:b4:fd:37:bd:62:03:7c:9f:83:04:8d:a4:ba:a4:7b:30:
4b:1c:e0:d4:8b:7a:86:98:be:51:06:b7:9c:d8:a2:3c:23:12:
c8:e3:aa:9c:b5:50:73:99:7d:1f:72:ba:bc:72:75:62:09:38:
34:f7:32:38:7e:ff:ff:cb:cc:66:5b:64:88:e9:25:5e:16:2f:
7a:2b:9f:08:cc:9c:9c:ff:a2:9b:f9:dc:cf:3f:68:45:e6:45:
90:a2:1f:69:17:d5:e0:bd:9e:56:72:e4:e9:a5:01:b3:ad:b5:
5b:e9:e1:cb:22:ff:de:36:48:20:86:8e:56:16:16:d1:89:fd:
e1:66:37:4b:8d:68:c3:b0:29:2b:fa:de:43:84:bd:cc:e0:5b:
51:53:5d:2e:67:8d:ef:0f:b9:77:9d:5d:53:4f:f1:c9:f6:c1:
56:13:0d:8e:7f:ca:f3:45:1e:8f:f1:61:5b:9a:6d:da:5d:26:
b9:47:98:46:5a:1c:03:81:d6:dc:12:60:be:4f:85:dc:98:c2:
30:50:77:cd:94:c0:c7:25:a5:39:dd:dd:9d:b0:39:e4:eb:e1:
fe:b0:30:44:3e:c9:33:a2:fa:82:00:26:8b:8c:92:57:17:d9:
49:83:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:30 2024 by rpki-client on console-ams.rpki-client.org