Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File: osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier: uQaXH4nWQ6+hWEQlj2gYGJ0/o4gTx6haz4wPgG5k1pU=
Subject key identifier: 9C:4E:B0:D7:2D:CF:28:96:35:9F:DB:7B:CD:A2:80:C3:31:F3:13:4D
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer: /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial: 0D01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number: 0CF5
Signing time: Thu 03 Apr 2025 00:57:18 +0000
Manifest this update: Thu 03 Apr 2025 00:57:17 +0000
Manifest next update: Sat 05 Apr 2025 00:57:17 +0000
Files and hashes: 1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: CQAFqcY2+V2DYdZaXPKxGyHaFHYtG3G72ATSvo7QuMc=)
2: 6C39EE98619B11ED8E8FD8D6F1222468.roa (hash: OETdohCk7q65gcL6uPq06Ta3ioOvQSD9Kn6gLq8PZ80=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3329 (0xd01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627BD6AF
Validity
Not Before: Apr 3 00:57:17 2025 GMT
Not After : Apr 5 00:57:17 2025 GMT
Subject: CN=67eddcee-517f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:16:2f:62:64:c9:96:d5:6d:8c:43:3d:ce:
e1:15:b7:61:1f:54:43:ee:bd:01:22:d1:b1:68:e0:
30:94:a7:d8:ce:92:6f:62:52:ef:f2:31:8e:dc:27:
1e:f3:31:dd:51:8d:3f:c6:96:5d:cc:01:df:70:90:
b1:87:f5:4d:e8:22:1b:16:9a:93:fd:ad:79:7d:33:
42:20:bd:4c:f7:13:54:5e:0f:ff:43:9d:7c:af:5e:
89:97:7d:4c:ba:f9:c3:fe:34:df:4c:04:89:f6:36:
c6:00:42:01:d2:8b:ab:9a:ae:16:3a:50:f2:0c:4a:
51:3a:11:bb:d9:9f:5a:5c:3b:cf:c8:67:fd:e6:a7:
3e:ce:d6:e4:c5:2e:89:03:91:93:65:3f:ea:78:09:
23:98:a0:e7:65:80:63:f8:63:cd:50:5f:de:e9:6f:
0f:55:4d:36:ea:ca:ec:fa:f6:ea:96:15:46:4b:82:
dd:f4:2c:f1:9c:7c:e3:22:dd:66:c0:78:c4:a3:91:
8d:b3:4e:34:5d:5a:06:c2:d4:9a:68:60:ca:ba:4e:
a5:41:a5:a8:72:c5:da:5c:24:27:07:fa:c2:d2:c5:
ab:81:52:a1:53:89:4d:cd:ae:7f:e9:b2:8a:58:fd:
4c:c2:23:e0:bb:99:49:54:94:eb:62:d3:71:9a:c5:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4E:B0:D7:2D:CF:28:96:35:9F:DB:7B:CD:A2:80:C3:31:F3:13:4D
X509v3 Authority Key Identifier:
keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:34:0c:6c:60:93:3f:4d:c9:c9:0a:0b:35:d8:d0:36:b6:7b:
aa:a6:3c:e8:85:9c:27:d1:1c:8c:f8:ce:93:94:c7:08:12:41:
74:df:bb:93:19:ff:20:f2:7d:70:f2:db:b7:18:0e:2c:08:9d:
be:bb:d0:5f:f9:23:f5:12:cc:2a:b4:eb:89:c2:5d:6b:27:96:
6c:e5:91:f6:57:cb:cc:78:5e:2d:27:86:b4:55:15:c3:0c:3d:
01:68:aa:35:a0:34:e8:a7:ce:fd:08:c7:db:22:a5:d3:c6:64:
75:98:d0:b6:6b:8b:6d:9f:e0:f1:46:b4:8c:55:87:31:0f:f1:
ac:1b:29:a3:3c:06:51:6c:35:58:96:c6:7a:e3:11:d7:87:97:
9c:b7:c6:d1:99:2b:41:98:bb:9f:16:cd:63:1f:42:bf:ef:7a:
95:83:7f:21:78:25:6d:66:16:79:3e:9e:7c:3c:27:15:f5:4a:
db:08:2f:4d:f8:d7:0c:45:68:88:3a:76:ae:b7:91:b6:ee:a7:
bd:a9:00:da:f0:2a:5e:87:da:2c:15:c2:5b:e5:82:ce:a7:fc:
a7:3d:e2:4e:19:78:bd:b9:fe:67:86:20:fa:42:e9:04:fe:78:
42:89:02:97:06:6c:e1:5c:31:c1:6d:de:c9:c1:92:3e:bd:ff:
1c:04:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:25:21 2025 by rpki-client