Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File: opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier: Jlm5q2N7CaN6IE4rzgm8nonlyxEwMTyxknT0kALmg+o=
Subject key identifier: 68:FC:4D:77:0B:69:E9:2F:8C:C7:F3:C6:74:0C:D3:22:A5:E0:2A:A1
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 0277
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number: 0268
Signing time: Fri 03 May 2024 02:02:27 +0000
Manifest this update: Fri 03 May 2024 02:02:27 +0000
Manifest next update: Sun 05 May 2024 02:02:27 +0000
Files and hashes: 1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: 6x5kbbBIgcqagXy3zDJfOtQW/eqDamt7JoyNni5QhUk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: May 3 02:02:27 2024 GMT
Not After : May 5 02:02:27 2024 GMT
Subject: CN=663445b3-1988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:4c:ce:c4:44:f8:7d:ca:66:7c:8d:31:fb:
cc:3c:ed:69:33:8f:25:ce:57:4e:ee:83:c3:57:3c:
2c:36:70:a3:93:b7:6c:5b:31:ad:b3:23:39:d6:84:
b2:33:4f:a9:b6:d2:13:de:c8:39:47:58:4d:5c:b1:
e3:37:a8:59:50:4f:27:3a:00:63:74:ca:84:8e:db:
dc:26:55:b7:0e:a6:89:ef:71:af:60:2b:fd:57:a8:
23:ec:8b:41:6e:91:0f:62:c3:d1:ee:ad:38:83:e8:
3c:4e:2e:01:92:4b:79:09:91:ff:6e:ac:b6:99:de:
f4:bf:96:7e:5f:82:bc:b2:71:8b:c4:c6:12:fe:ef:
40:d5:af:cf:53:9a:a9:f6:95:22:50:78:aa:9e:e2:
c0:90:4a:f9:a0:13:eb:c9:2d:07:aa:76:11:88:6c:
02:18:92:34:c3:b9:b2:e8:f4:77:ec:aa:49:d1:84:
74:b7:8f:80:cf:8e:aa:dc:3c:8f:98:bc:ad:6c:cc:
8a:a3:1b:43:57:77:d0:60:21:0b:42:c1:8f:98:93:
00:ff:ec:95:0a:7d:29:08:9d:2b:a9:48:3c:b4:d1:
87:dd:97:8d:c5:3a:78:01:ab:7e:3f:fc:df:4f:d7:
55:78:72:78:73:ad:fb:e1:f0:ff:9b:d7:ae:4f:29:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FC:4D:77:0B:69:E9:2F:8C:C7:F3:C6:74:0C:D3:22:A5:E0:2A:A1
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:ea:a5:f1:7a:ba:37:b8:5e:28:62:64:7f:47:cc:7a:61:
9a:41:ee:c1:8b:86:bc:f1:b8:05:1d:b3:5e:e7:4b:92:a0:2a:
dd:55:66:34:54:85:97:87:a6:94:d6:fd:e6:14:c9:12:41:de:
8f:50:1d:9e:6b:fd:23:34:31:bc:e8:28:1d:2f:f6:8e:c4:e4:
e3:f7:68:71:97:57:71:01:19:3a:5a:7a:ec:71:d3:4d:02:64:
41:82:17:00:93:e2:62:dc:f6:37:1a:9a:d9:40:9e:cd:bb:c3:
b7:2c:06:d2:79:ed:cb:3b:5b:e7:60:fd:02:0e:80:c5:2b:4d:
31:69:db:fb:ba:35:3a:36:44:71:ba:8a:62:f2:2b:d0:af:b4:
d4:7c:aa:89:15:65:1b:4b:4d:39:4b:1c:06:d1:09:9e:31:7a:
fb:cb:5d:a3:87:e3:0b:c5:bf:fb:e2:f7:a6:9d:4e:fe:e8:3d:
cc:8b:81:d9:71:42:85:52:1e:e1:ea:b6:d1:3f:17:31:01:8f:
77:db:89:79:22:0f:ba:ed:f9:cb:44:7b:8f:63:fe:e7:16:66:
2c:c6:8e:9f:69:4d:9f:e6:45:d0:25:59:01:60:7c:24:23:9a:
f7:c7:c3:6c:4d:ba:63:b2:a4:e2:00:78:87:77:c1:bd:90:12:
3c:af:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:09 2024 by rpki-client on console-fra.rpki-client.org