Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File: ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier: d4jc4SqQqQOqVqtuvZ/bby9HsyjfNmF6HIOyX/XgRXY=
Subject key identifier: B1:04:DC:A0:F1:33:A6:9B:07:20:D8:74:D7:EF:AD:B6:88:02:43:79
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer: /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial: 045E
Authority info access: rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number: 045D
Signing time: Mon 07 Apr 2025 04:27:38 +0000
Manifest this update: Mon 07 Apr 2025 04:27:38 +0000
Manifest next update: Wed 09 Apr 2025 04:27:38 +0000
Files and hashes: 1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: VafN8AsAJEp/s3n4GOUtrvpGuvxybRRUcDUzSlw8yfo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642C0FAR
Validity
Not Before: Apr 7 04:27:38 2025 GMT
Not After : Apr 9 04:27:38 2025 GMT
Subject: CN=67f3543a-9971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:8b:6e:d7:0b:d8:c7:2e:20:cf:0d:fd:b2:
6c:5a:27:5a:e2:f4:29:e4:28:89:13:c9:ba:a2:72:
fc:56:3f:c7:5a:dc:80:7d:70:18:01:27:a1:eb:5f:
95:09:d5:95:ce:b0:68:a5:be:6c:bd:bd:1e:10:d6:
e1:a4:42:14:93:be:a3:14:92:24:6e:a2:18:ba:d1:
3b:59:3e:1f:0f:82:8c:4b:a6:99:16:71:5d:11:f0:
25:1a:20:ec:07:f0:db:50:ad:13:c0:92:a0:20:70:
9d:35:e6:2d:cd:a4:44:77:e7:22:8c:6d:b7:3e:c1:
29:7a:a6:12:f8:07:e8:e7:e7:00:58:b6:0a:46:f2:
33:32:79:31:b9:b6:f5:e4:76:7f:a2:6f:a0:3c:91:
d6:5d:34:ed:ff:21:55:da:32:f4:66:4b:fd:b0:11:
04:95:e4:91:1d:45:a3:5e:27:66:cf:f3:cc:3e:00:
65:6e:38:ea:3b:e6:21:7f:76:f8:ec:23:f3:5d:9a:
75:d2:1f:22:ef:ad:6a:bc:ea:dc:90:65:7a:90:d8:
d8:bc:6f:da:18:48:f1:ef:f2:1f:7f:09:e5:6d:ce:
98:66:7e:24:5a:1d:71:75:74:b2:4e:2a:d9:2e:3a:
ec:a0:e4:5c:66:a9:54:b5:7e:23:14:38:a6:8c:7a:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:DC:A0:F1:33:A6:9B:07:20:D8:74:D7:EF:AD:B6:88:02:43:79
X509v3 Authority Key Identifier:
keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:09:0a:76:57:db:21:ff:b9:9e:df:4e:c5:f2:d0:5f:4b:bc:
bd:6d:63:5f:d2:fb:db:ae:d2:17:f2:3a:a0:cc:ca:a3:85:b2:
d7:c4:12:e8:2f:d8:86:5d:52:bb:f1:a2:70:b1:26:df:31:54:
35:12:e8:20:c8:f9:d0:f1:2a:07:2b:c2:34:d4:b5:5d:a8:83:
86:d4:60:59:a6:04:03:17:79:35:f5:e2:ee:f3:60:50:34:15:
b2:31:57:cf:4a:5a:75:ae:09:5d:23:f0:1c:1f:1f:e2:53:80:
96:5d:b6:19:a4:3e:34:c2:53:10:81:f8:38:dc:fa:22:04:44:
ba:4b:b8:32:d1:ff:66:97:c5:a2:fa:e3:e1:62:e1:4e:90:ab:
95:20:0b:d5:1f:d4:53:c3:04:98:53:06:9e:be:2d:10:c3:04:
4f:83:83:d4:6d:69:77:e7:3f:03:c5:16:2d:e4:3b:83:c4:23:
7a:77:3c:9d:d6:ef:1b:b6:82:4e:87:af:1a:b4:79:77:99:fc:
29:cd:89:63:a2:d0:1f:1d:17:5d:4b:bf:40:e1:dd:ab:b9:26:
b6:75:a4:b4:6f:f4:31:0c:14:b6:6c:6f:fc:2a:97:64:6f:af:
e2:ad:0a:53:c4:62:fc:97:f9:50:c1:1d:96:85:58:a2:6e:56:
bf:b0:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:34:33 2025 by rpki-client