
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: xwtlksrrddf/pvcmys+TiroB947KjxX/VhPv0WOC9MY=
Subject key identifier: 57:66:6F:40:9D:C2:CC:7E:E3:09:46:1F:E4:AA:24:00:59:08:4D:DF
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 05DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 05DC
Signing time: Wed 04 Jun 2025 02:21:09 +0000
Manifest this update: Wed 04 Jun 2025 02:21:09 +0000
Manifest next update: Fri 06 Jun 2025 02:21:09 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: z8zFMTL7ztjOR2awjVq3FmyxRMsiHPlNluxWzWhIDNI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jun 4 02:21:09 2025 GMT
Not After : Jun 6 02:21:09 2025 GMT
Subject: CN=683fad95-a407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:60:18:30:bf:02:da:93:46:02:c6:87:49:
7a:01:67:6d:2e:f0:37:bd:26:b8:b9:49:88:00:29:
85:e0:b5:80:43:22:f8:1d:06:c7:25:9e:86:ba:09:
26:81:bd:30:04:17:87:bd:18:75:a7:20:26:ba:67:
22:77:33:9e:c8:4c:ad:65:28:e2:43:4e:6c:fd:8e:
8a:c2:7e:00:0d:ce:a1:76:58:e8:8a:0e:6b:a6:22:
01:07:29:35:28:db:40:81:11:85:cc:53:66:37:a4:
90:8c:11:78:48:8f:b1:eb:62:c7:57:5a:92:62:0b:
21:da:86:0a:ed:4b:9d:95:ed:25:64:78:a0:fb:e8:
6a:57:89:7a:b4:5b:f6:d5:85:a2:c2:5d:00:26:ef:
16:cd:ad:57:11:9b:b2:30:e3:3f:86:68:2c:60:16:
f7:8e:ff:b0:d0:3e:1b:8c:b2:01:ae:42:54:52:f2:
05:1d:c6:1f:c0:9c:c9:e2:3e:12:db:56:24:36:60:
1b:5c:a2:74:c4:69:87:0e:09:69:36:31:22:f8:4f:
7e:8d:3d:ac:bc:94:b4:ce:84:a8:a0:ed:7a:44:6c:
ca:31:31:f9:ff:b6:f5:aa:e0:c2:e4:aa:b8:cf:35:
4f:62:08:24:83:e0:f6:e9:2f:1a:d9:22:34:77:cf:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:6F:40:9D:C2:CC:7E:E3:09:46:1F:E4:AA:24:00:59:08:4D:DF
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:66:3a:ed:d3:00:20:03:90:e2:b5:3a:de:d7:95:a2:9d:1a:
20:75:c9:7f:f0:8c:2e:aa:45:20:eb:2f:f0:b4:83:c7:3f:fc:
88:2a:65:9d:99:87:f0:0e:b9:d5:a7:4a:35:a9:3f:99:13:98:
13:23:7e:1e:9b:83:f3:66:2c:c6:4f:55:c4:e9:ba:17:33:ae:
bf:85:de:4c:f0:78:7b:ca:87:51:6c:64:76:e6:f8:2f:7d:ad:
12:7f:89:d2:91:80:b3:68:90:ff:4b:75:d4:d3:ec:b8:b0:95:
7c:99:cd:d5:06:a7:c9:9c:a3:85:ad:c2:e5:04:5a:19:77:7e:
4a:0e:ac:6c:a9:c6:4b:4f:39:f3:9d:6b:b6:1f:54:cf:5c:c3:
9a:a9:b2:83:c2:33:64:b9:b9:65:28:af:ec:41:85:65:b9:f9:
33:b9:d0:e5:34:41:54:59:aa:32:b7:32:2a:a9:de:02:b1:a3:
1a:ad:19:80:07:8d:7f:a2:e1:91:98:ba:19:ff:e7:6c:6f:47:
6d:28:6e:bf:11:37:30:09:32:75:5f:79:80:0d:40:a3:2d:9c:
14:d1:c0:74:ae:5d:29:87:6c:b9:8e:73:4c:18:e9:26:93:a7:
18:0a:34:cc:94:a0:ea:12:d9:fe:83:1e:15:93:84:3d:9f:a5:
29:3f:7d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:52:47 2025 by rpki-client