Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
File: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft (raw, json)
Hash identifier: qlFXsG9IA7OjvF6qA88e+3EtaXK48fqseRO0NmhdXOk=
Subject key identifier: 89:C0:46:0B:F2:3D:62:C9:D6:F9:17:D2:D6:F2:6D:0E:08:25:72:F3
Authority key identifier: 3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
Certificate issuer: /CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Certificate serial: 08C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
Manifest number: 08C6
Signing time: Thu 03 Apr 2025 01:08:19 +0000
Manifest this update: Thu 03 Apr 2025 01:08:19 +0000
Manifest next update: Sat 05 Apr 2025 01:08:19 +0000
Files and hashes: 1: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl (hash: CMe2gCIMRJsojJ2d7QvozxAeLEaolRrEZHNGFrFPSvY=)
2: ECE652CC57A211E983F84274F8AEA228.roa (hash: PvTpFnTUW5owha8oV/cdl6xRQsqx1W1UB5KJjdzCL08=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB735AF
Validity
Not Before: Apr 3 01:08:19 2025 GMT
Not After : Apr 5 01:08:19 2025 GMT
Subject: CN=67eddf83-711f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:46:44:0d:d6:4c:30:ab:85:80:53:9a:1d:
c3:aa:ab:e1:0d:b1:1b:12:e0:87:ac:19:90:61:4a:
e9:1d:d7:b3:52:e6:1b:d3:00:57:92:a4:31:c6:8f:
91:9c:d1:3e:19:aa:25:a7:2d:b5:61:c9:f5:3f:2f:
38:17:e5:8b:7f:a6:c2:3e:54:8f:04:a2:a5:09:0d:
0a:58:20:ea:a4:91:4d:a2:3b:22:67:f6:d0:9c:8b:
bc:1e:88:3f:af:27:55:3a:5c:2e:f8:56:7a:15:5a:
0c:3e:d1:8d:07:5a:94:a4:51:18:0a:ee:19:0c:d6:
15:d2:e4:b0:b6:9e:db:9f:db:ee:e7:56:28:b1:79:
84:bc:8b:14:ab:6a:2a:11:30:0b:d0:c9:ed:c1:fa:
94:24:b5:5e:01:b2:0c:d5:81:e1:80:6d:7a:1c:ba:
7f:bb:49:45:bc:bf:be:78:c5:00:a8:76:66:52:ea:
3a:32:58:e3:6e:6a:cf:26:70:c8:6e:c6:dd:c3:65:
05:9d:54:f6:b8:75:e1:4d:8a:d6:fb:d8:f0:5a:f7:
9e:54:8c:2f:0e:a1:52:1a:de:f1:15:0b:42:8b:7b:
94:af:c2:d5:2c:84:10:23:33:97:5c:5b:09:50:54:
b9:48:fc:13:5f:56:8d:91:4a:15:ca:af:81:d8:d5:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C0:46:0B:F2:3D:62:C9:D6:F9:17:D2:D6:F2:6D:0E:08:25:72:F3
X509v3 Authority Key Identifier:
keyid:3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:8d:42:6c:4e:6f:53:27:c8:54:35:fa:4e:ef:98:a9:c4:
fa:3b:05:32:89:22:24:8f:c9:81:0d:1b:5a:20:88:c3:69:0f:
ba:66:af:b8:66:ff:85:a7:69:98:83:39:a1:47:b6:5f:ae:22:
5d:06:8a:45:5d:46:22:61:ad:8b:7a:bd:a7:55:0f:17:b6:57:
a8:45:ef:17:2f:82:84:2c:a6:e5:f5:dc:16:75:18:85:4f:12:
b0:df:e5:9c:b4:14:17:15:c2:77:eb:dc:24:97:9d:c3:85:97:
6d:f9:3b:0b:ea:1a:c1:08:d3:50:5a:ef:a5:b5:8e:78:ef:19:
27:c4:9a:97:8a:5e:25:fd:38:51:02:04:5d:67:59:5e:e8:34:
98:46:8f:04:76:6f:75:a5:85:67:7c:bc:be:11:d1:68:48:b0:
00:95:1b:bd:9f:6c:b4:fd:ba:47:59:c7:e6:0e:b5:b6:1c:4d:
c5:6b:f7:b9:66:17:45:19:da:00:e0:9c:cc:b6:59:8d:29:56:
d7:2b:69:60:a6:2c:8f:a0:76:d1:1f:50:78:1f:4c:a7:1a:1a:
00:98:72:8b:d4:48:8d:e6:17:87:0e:4a:51:9f:3b:b0:cc:a8:
fa:c9:ff:69:2a:26:7c:34:21:cf:70:ff:e2:d4:2f:22:27:00:
2b:07:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:21:46 2025 by rpki-client