Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File: Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier: c2oY84Pay1Y7p58jdA/U5tHjK+DCiyrESlm0amSMtK4=
Subject key identifier: AA:87:99:74:E4:FF:E6:28:79:76:C7:BA:13:A7:BB:6E:97:53:6A:AF
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer: /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial: 0141
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number: 0140
Signing time: Thu 13 Mar 2025 03:03:59 +0000
Manifest this update: Thu 13 Mar 2025 03:03:59 +0000
Manifest next update: Sat 15 Mar 2025 03:03:59 +0000
Files and hashes: 1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: jCodhi3K+xPRBTSrrZ391i92NSpJ28uIKcvjIJDJK1w=)
2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688321AF
Validity
Not Before: Mar 13 03:03:59 2025 GMT
Not After : Mar 15 03:03:59 2025 GMT
Subject: CN=67d24b1f-579c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:55:a4:ad:45:9f:5c:8a:eb:b6:99:0b:46:
ce:52:c7:3f:b5:b1:45:21:88:b7:34:10:b7:ba:14:
09:ea:d5:8b:82:23:a7:a5:8e:b7:36:d6:33:25:52:
60:bf:b8:05:2c:25:de:8d:be:13:9e:58:60:48:4a:
ce:f8:fe:a6:8b:d9:5c:58:8f:75:94:da:74:68:e2:
19:88:19:21:a1:b9:87:71:83:a3:20:c5:6a:9d:08:
d8:bb:02:df:37:f0:11:ef:ac:b4:af:63:d7:ef:9e:
d7:6d:77:97:e7:b9:50:a4:42:f3:34:7c:51:40:23:
bd:7f:3b:ce:ff:12:39:19:49:0a:9b:11:6a:47:66:
a0:b0:07:bf:d9:a8:09:d7:46:5f:31:d2:a1:3e:a2:
42:7f:89:f4:37:2f:e2:93:63:fe:61:4f:18:da:88:
ce:77:dc:4b:82:2d:76:16:d3:d4:bd:3d:8e:fb:50:
5b:75:c2:50:13:15:92:84:66:63:d0:73:29:67:01:
96:b8:50:2c:95:2b:ad:64:3c:94:76:97:bd:f0:3f:
70:d0:60:ed:97:2c:f1:ae:96:9d:68:41:79:b0:a1:
24:e2:3b:66:40:1e:d5:ae:c9:b4:23:9d:d0:48:54:
ea:8f:c3:4b:00:d1:89:bb:3b:ff:9f:d2:04:4f:20:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:99:74:E4:FF:E6:28:79:76:C7:BA:13:A7:BB:6E:97:53:6A:AF
X509v3 Authority Key Identifier:
keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:1a:4d:a6:dc:0c:b7:d1:9f:5d:46:d8:2e:1d:2f:5d:e1:
6d:94:d6:18:dc:d9:74:92:45:82:b5:d8:b7:bd:9f:10:cf:d9:
54:a9:eb:65:72:19:d3:30:ba:19:6e:19:c2:0d:db:9c:a8:89:
4f:1b:4c:84:b2:cc:ca:37:cc:d7:f2:d9:1d:91:47:f1:ed:ca:
ca:c2:a4:79:10:bf:a4:4c:4e:d0:30:e3:6b:4a:bf:ab:cc:c9:
f0:de:e6:ec:8b:20:ca:f5:0f:e2:e5:c2:dd:d6:af:06:27:7b:
06:82:32:05:e4:b5:fa:a3:97:c1:5e:e0:59:b1:6e:dc:0c:69:
30:da:bb:30:bb:0e:16:0e:b3:e0:62:32:a1:e8:b5:f4:c8:91:
43:43:91:14:d0:af:bc:8a:5f:cb:f2:28:e0:1d:b3:97:b0:8f:
11:a3:7b:b5:a4:fb:68:db:f4:7d:65:dd:5c:60:50:21:9b:32:
4b:87:b4:56:40:b8:4e:a3:ea:6c:a9:e7:a4:1f:75:67:ac:c3:
a8:41:e1:58:99:b1:0d:4f:df:b7:89:d6:02:1a:82:f6:ed:f3:
0e:3e:52:d2:d0:7a:07:f1:48:54:8f:f9:7f:7e:48:c7:e4:8e:
83:49:b4:6c:2f:4c:10:78:f7:23:d7:07:87:1f:49:0a:51:e8:
5b:c5:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:52:48 2025 by rpki-client