Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier: e6BVOz+E0bZlhUex5XxPvRHl07AbGF/quV/WwIbhros=
Subject key identifier: E4:0F:F2:F1:48:00:63:FE:70:CF:03:5F:33:76:94:0A:37:D0:F6:87
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer: /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial: 0DCC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number: 0DCC
Signing time: Thu 03 Apr 2025 00:54:47 +0000
Manifest this update: Thu 03 Apr 2025 00:54:46 +0000
Manifest next update: Sat 05 Apr 2025 00:54:46 +0000
Files and hashes: 1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: QLwdmFt9rohwan8LFULNf+BQxcnmNTRktzB0Z9kEFeI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3532 (0xdcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688596AF
Validity
Not Before: Apr 3 00:54:46 2025 GMT
Not After : Apr 5 00:54:46 2025 GMT
Subject: CN=67eddc57-c7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e7:31:9a:c5:70:95:db:fb:d1:29:f6:c0:40:
1e:26:27:d6:10:60:cd:a0:1d:0a:e4:47:fc:f4:23:
02:06:56:2d:e5:f6:ca:47:0f:11:10:86:2e:91:34:
3b:a8:b3:eb:db:f6:47:c7:f9:2b:56:18:62:d5:c5:
7a:28:ad:84:4f:ed:9c:e6:5b:14:75:b2:5f:48:24:
70:ff:45:bc:23:7a:53:a4:80:e4:d6:ff:ab:22:67:
8e:ef:d4:5f:da:82:68:3b:f6:4b:dc:ba:49:ea:e3:
06:bc:c0:5e:6c:f5:1b:fd:af:f3:1e:46:cc:4d:dc:
f8:41:5d:2e:5b:bd:d5:32:a3:33:f8:2b:09:78:61:
63:eb:01:96:b7:82:8c:8c:0b:e0:d9:01:ba:7f:70:
3d:3b:77:f0:0f:49:ac:0b:50:3a:d3:df:1f:b1:54:
81:e4:b8:63:90:40:b5:24:e6:1b:17:8b:63:15:fe:
b1:f6:c2:c8:bb:6b:28:a2:f0:65:24:db:de:96:86:
36:3d:98:18:88:ee:c5:08:13:c3:e5:10:07:b5:39:
4a:92:cb:2f:67:02:e5:3a:4d:59:2e:0b:db:b6:e0:
7a:cf:11:46:e3:b5:ab:df:2c:16:a1:12:60:ca:e6:
0b:2f:57:35:29:2a:3b:08:bb:f9:7e:11:ce:a6:5b:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:F2:F1:48:00:63:FE:70:CF:03:5F:33:76:94:0A:37:D0:F6:87
X509v3 Authority Key Identifier:
keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:32:eb:f4:b4:38:3d:5d:a5:a2:4a:b5:44:11:e8:0c:80:
1f:72:2d:43:7f:8a:6d:76:02:5a:95:44:2f:0a:3c:02:85:fe:
ec:01:72:cb:46:76:02:f0:94:e1:63:fc:ad:54:f8:4a:e3:06:
c3:13:78:5f:bd:f6:66:d8:81:3a:80:bd:70:4b:f8:06:fe:da:
00:16:8e:4a:67:3e:40:69:b5:c2:e5:7f:f6:52:f3:0d:cd:ac:
18:71:12:a9:26:5e:9f:22:f1:3d:4d:fc:85:25:09:12:da:63:
7f:bf:fb:b0:2b:b6:7f:ce:5f:2d:0d:83:f8:8b:71:e3:12:a7:
ca:dd:4b:7a:78:58:97:65:e7:da:c5:98:38:87:52:74:b0:bc:
62:7b:c9:fc:00:d5:0e:ce:01:1f:34:7b:99:3e:32:e2:b5:24:
82:25:7a:b0:3f:07:b7:ba:4e:ff:32:e0:25:3f:12:c3:01:b2:
04:96:f8:22:d5:d6:84:53:6d:d7:e5:a7:77:71:c0:e6:6f:7a:
e6:11:57:ea:34:9a:1d:f7:56:fd:fd:0d:89:6e:c8:e2:51:c1:
ec:7c:b4:0c:25:25:0d:32:6f:70:d6:36:f5:85:89:26:b2:1c:
8e:cc:ee:19:be:d6:f8:5d:a1:3d:fe:01:41:13:a2:27:46:c5:
6b:81:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:27:09 2025 by rpki-client