Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File: qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier: aT17zWgibCl4bLojfkzTjawRbxiP7dquEurUMARyPnc=
Subject key identifier: 9D:E2:04:7D:58:D3:28:EB:58:55:6A:2C:92:4F:8D:13:24:33:52:27
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer: /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial: 0494
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number: 0493
Signing time: Thu 13 Mar 2025 01:59:34 +0000
Manifest this update: Thu 13 Mar 2025 01:59:34 +0000
Manifest next update: Sat 15 Mar 2025 01:59:34 +0000
Files and hashes: 1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: fqdsM04msUqDrqYnmzvA1ikyw8600d37483P169f/9M=)
2: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628E9AF
Validity
Not Before: Mar 13 01:59:34 2025 GMT
Not After : Mar 15 01:59:34 2025 GMT
Subject: CN=67d23c06-ce95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:17:74:ce:6a:36:16:da:74:8e:e0:47:db:
e8:9f:4c:f6:a6:be:c0:d1:2c:f6:a5:e3:08:6f:fe:
e8:ef:a1:10:3b:71:9d:af:e7:a2:fe:dd:75:35:15:
9d:f7:72:5a:26:63:52:3e:2f:a7:ca:79:9b:0e:93:
d9:75:5b:2a:21:ec:65:6e:e1:25:98:57:e0:65:e3:
de:40:72:5f:90:4b:87:ed:3d:d4:8b:03:52:07:48:
66:3f:29:0f:c1:1a:83:20:a6:9e:4e:88:6f:91:f0:
96:9e:a9:eb:26:7f:ce:d6:69:e9:ac:ae:21:32:82:
35:d8:a8:a8:da:76:59:10:7d:d0:a4:f4:4f:6a:c0:
49:0a:01:f6:83:13:c5:c0:3c:73:d3:1c:5c:c3:ac:
c9:83:16:a3:08:bf:9a:72:17:2f:53:12:96:d3:b5:
1c:a6:bf:3f:b0:c5:3e:e2:39:49:c3:dd:a9:07:c0:
e7:3e:8d:13:19:d4:ce:69:c2:cd:3f:c5:fd:91:62:
16:e1:ee:fc:f9:03:1a:d6:83:b0:9e:75:06:6c:58:
9b:18:f1:3f:96:52:17:2a:0e:ec:7c:f4:2d:80:17:
05:ad:c2:47:93:e7:ec:96:2a:eb:fc:c5:4c:fb:e7:
86:e5:a4:17:81:f9:24:82:27:4b:b3:53:17:49:01:
d1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E2:04:7D:58:D3:28:EB:58:55:6A:2C:92:4F:8D:13:24:33:52:27
X509v3 Authority Key Identifier:
keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1c:9c:f2:65:20:03:e7:c8:cd:e7:e2:e6:a7:2f:9d:d4:69:
b6:48:60:9f:7b:84:36:0e:f6:e6:ce:8b:06:cd:4d:3b:23:17:
8a:1a:e5:0b:90:c2:6d:c7:e6:cf:e9:aa:ae:34:3e:3c:ba:6c:
c9:df:02:37:cb:0c:ab:b7:dc:52:e2:e5:e0:10:5e:d2:1b:23:
54:d1:6d:4d:a1:2d:6e:a9:95:c3:f8:83:86:cd:ca:18:0a:d9:
bb:fb:43:0d:6f:18:ab:a4:b5:92:c9:79:3a:41:50:bf:f2:47:
65:bd:59:c1:f1:9d:4d:16:52:1b:3e:fc:95:0f:ed:5d:88:9f:
f5:d5:5a:06:1f:52:ca:10:f5:fa:dd:31:78:c3:71:0f:36:3d:
88:d2:c5:a6:c5:1e:66:07:c2:5f:77:ca:5a:c4:68:f5:a0:67:
f6:b7:d1:68:f6:8f:e4:72:00:08:89:ac:72:8b:8b:d6:f3:85:
fc:22:d8:c1:e2:f3:65:7a:a0:ed:47:87:d5:7b:ed:13:65:69:
92:3a:7e:a3:e4:8f:fb:74:7f:60:c8:56:83:23:01:5d:f3:b9:
88:c6:87:57:1b:b5:47:31:ef:6e:e1:14:2e:1c:6b:c7:a1:aa:
5e:12:c5:76:c1:55:df:87:f9:bf:2f:c7:0c:23:e8:b7:8c:f6:
66:1b:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:27:52 2025 by rpki-client