Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File: 3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier: DWGJ0/jJAeLj5klH3VW5Up2NEFzY66grYXC9/0QewLc=
Subject key identifier: 84:A3:9B:58:7F:D7:64:35:CC:9F:8F:E7:17:F7:F3:D0:EA:CC:0D:AF
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer: /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial: 01F5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number: 01F5
Signing time: Fri 22 Nov 2024 02:22:03 +0000
Manifest this update: Fri 22 Nov 2024 02:22:02 +0000
Manifest next update: Sun 24 Nov 2024 02:22:02 +0000
Files and hashes: 1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: gorQpvFO5CFAWxdFsMwC7vPC8gQuRcqFxh7DyFUu9qM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Validity
Not Before: Nov 22 02:22:02 2024 GMT
Not After : Nov 24 02:22:02 2024 GMT
Subject: CN=673feacb-36d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:31:fd:bc:18:cd:6a:36:4b:83:3c:bd:9b:
0b:9c:72:78:84:3d:55:99:c2:ad:9c:0d:c2:16:2c:
73:5f:41:e1:d2:05:66:c3:4e:7b:6c:2e:af:e7:e6:
fc:c2:f8:0c:44:86:99:d9:34:82:54:da:db:71:ae:
7d:e5:86:71:31:8c:0e:92:e1:91:19:9f:6a:65:1c:
09:68:5a:a8:a8:32:0f:e5:ff:f3:8f:69:ed:1a:66:
ca:b6:84:f4:7b:50:54:d3:4e:ee:82:6d:86:2d:ea:
b8:3d:df:08:15:34:f8:10:2d:90:02:ab:80:66:8a:
78:b2:23:87:10:98:41:5c:aa:42:96:90:dd:87:a8:
63:1c:45:86:de:f0:7f:a6:ac:e1:0f:92:8d:8f:cd:
dc:5f:d7:ee:a1:85:e0:03:b2:55:80:93:85:7b:eb:
b1:66:c9:55:44:65:f3:94:91:ae:a8:ff:5f:0a:30:
a0:b4:80:65:27:d6:0e:06:78:f4:87:6a:31:18:40:
35:c8:13:16:db:43:ce:e3:09:46:82:59:d4:cd:d0:
0a:93:4c:2b:4e:b4:6b:12:a8:9f:81:71:07:b9:46:
8b:5f:c2:24:72:dc:d4:93:8a:66:3c:75:8a:86:59:
8f:f9:d4:29:93:90:fe:85:76:b8:f6:c5:78:8a:5b:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:9B:58:7F:D7:64:35:CC:9F:8F:E7:17:F7:F3:D0:EA:CC:0D:AF
X509v3 Authority Key Identifier:
keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:63:3c:4e:10:6d:68:22:24:23:4c:0e:7b:04:48:e4:51:23:
f8:5b:4e:43:c7:0c:68:1c:66:8f:41:88:5a:9b:c6:c1:90:4d:
08:bf:53:c6:29:26:78:fc:33:25:70:40:5c:96:f4:60:b7:76:
69:09:65:b5:eb:3e:df:25:68:b2:f3:41:76:34:3a:a3:e6:e9:
41:6c:3e:87:3a:ac:97:8b:0d:91:34:35:19:27:cd:06:42:5f:
2d:a0:b7:4c:78:a8:26:c2:33:ae:f6:15:cf:86:ea:79:dd:3b:
ab:5e:2b:81:12:c1:65:2d:4d:0c:75:d9:a2:0c:6a:6e:6f:0d:
62:1f:08:b5:fb:a2:8a:bd:11:49:68:fb:2a:59:8f:19:cb:e2:
97:bd:f8:22:71:bd:90:cf:04:a0:84:b6:16:e8:72:63:fe:db:
37:e4:89:50:ec:ad:be:f7:e2:ae:65:f8:7d:f9:27:b3:0e:28:
f2:fa:de:2d:eb:5d:ca:09:23:f2:0f:f9:c2:54:6c:3c:96:59:
1a:b9:91:df:af:3e:f8:ec:19:3e:17:eb:8f:b1:2a:61:fa:66:
bf:45:02:09:02:f5:be:79:db:96:3b:a3:c6:79:ca:b4:a3:d3:
de:ea:25:c5:b8:90:69:89:d7:aa:75:b1:49:94:06:c8:c7:28:
eb:6d:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org