Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier: aJ5aZPPr4hXNagDegk6JVEazuUdOB67knTtk8UapP3A=
Subject key identifier: 6E:81:07:BB:52:09:5E:D5:62:49:D1:37:9A:C0:A6:45:12:38:04:04
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer: /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial: A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number: A3
Signing time: Thu 03 Apr 2025 03:17:46 +0000
Manifest this update: Thu 03 Apr 2025 03:17:45 +0000
Manifest next update: Sat 05 Apr 2025 03:17:45 +0000
Files and hashes: 1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: 5PKGgl43LGO/3fB5qmILwnG3SjkC3f4XCFfFDBJ9DNI=)
2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BCCC8AF
Validity
Not Before: Apr 3 03:17:45 2025 GMT
Not After : Apr 5 03:17:45 2025 GMT
Subject: CN=67edfdda-db31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:2a:3e:89:e5:7c:03:9b:88:05:5e:ad:5a:
b7:fd:65:80:c7:14:11:87:b9:36:e2:11:cb:21:65:
46:da:fc:ca:78:81:0e:e8:08:8c:58:ef:e8:90:d7:
c9:fd:e6:d3:18:b6:31:b5:bb:97:75:96:61:7b:d8:
af:e1:dc:2c:44:c4:83:18:a5:b2:24:69:c7:65:72:
6a:e4:b4:27:7a:df:ff:6f:cc:17:ae:c9:8b:66:60:
e1:0c:87:fa:06:fb:8e:9e:86:95:2a:32:d1:9f:f2:
8d:5b:b0:24:11:19:38:ef:38:3a:de:22:8b:55:1e:
88:68:2c:18:35:9d:1c:f8:1f:e7:5f:56:c2:f6:d7:
9e:3e:e1:47:4a:f2:8b:c2:ed:5b:59:77:79:c6:e3:
c4:66:2c:c8:cb:f5:e9:79:72:f4:15:a7:99:2c:4b:
0f:35:97:4d:f6:99:51:2d:0e:2b:d0:ac:48:94:17:
c9:a0:a9:72:74:2b:5a:12:4b:f6:f1:a7:ec:74:e0:
b1:5a:e0:96:fc:0d:fa:de:89:33:f9:f2:4c:05:c1:
f9:f8:7b:ff:6f:07:08:a0:be:83:c6:e3:51:12:29:
ef:de:d3:f8:eb:78:dd:67:bf:a7:de:8f:8f:2c:a8:
4d:93:22:15:a0:7b:b7:b5:ce:1c:6d:5d:46:47:db:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:07:BB:52:09:5E:D5:62:49:D1:37:9A:C0:A6:45:12:38:04:04
X509v3 Authority Key Identifier:
keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:dc:2d:54:af:29:83:db:16:77:9e:e7:a4:66:e5:7e:e2:bc:
9a:a2:0d:a9:9b:c2:36:d6:6b:12:82:7d:a6:85:3d:f9:4c:27:
1c:9a:2d:8a:46:3c:4b:47:a9:59:38:43:fb:bf:03:c3:93:ea:
77:6d:3f:95:77:88:7d:d8:b5:50:15:e1:b7:5e:42:69:65:e7:
fd:b6:b7:72:2e:a5:b6:18:ac:48:5f:a5:b5:59:0d:a5:50:67:
ec:7d:32:fc:da:2a:93:61:26:af:0f:33:10:13:0d:2d:22:ef:
ec:a0:35:c0:0a:ac:51:75:fb:f9:4f:db:52:0f:a1:91:5c:57:
10:7f:b8:ad:84:9b:a3:7e:11:e9:b0:6f:77:1e:d9:d3:0a:d7:
3d:00:10:46:89:e5:7f:4d:39:d1:74:f6:6a:2d:da:1a:2b:0c:
fd:86:e9:40:42:0a:6c:2d:86:01:0f:43:12:73:86:53:1e:7f:
de:ee:36:ec:d7:2e:b3:bd:41:81:45:d7:ca:11:69:ba:b9:ea:
89:00:55:11:4f:3a:32:cb:0e:d2:2d:e0:3b:09:bf:1c:3d:ed:
a8:bd:a5:51:ec:e5:05:b3:1e:d8:c6:3b:73:09:0a:ca:9c:e0:
2b:d9:f5:c5:b7:16:af:69:30:21:fd:26:f3:9b:8a:b7:04:90:
f4:72:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:29:42 2025 by rpki-client