Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: UdumS+eDF/EFRotEkbmDp8hfclYEfH/6YXMq6dJhiMk=
Subject key identifier: 9B:A1:46:34:72:00:CC:E2:E3:E5:A6:B1:4B:11:3D:09:20:21:F9:24
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 012F
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 012D
Signing time: Thu 21 Nov 2024 02:36:21 +0000
Manifest this update: Thu 21 Nov 2024 02:36:20 +0000
Manifest next update: Sat 23 Nov 2024 02:36:20 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: KMZuOb7otfnI2wh24X1x3znlgW8Vf80ejgDJ6MS4jqI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Nov 21 02:36:20 2024 GMT
Not After : Nov 23 02:36:20 2024 GMT
Subject: CN=673e9ca5-1324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:c0:da:2c:7d:49:6a:da:b6:35:c1:eb:29:
e8:88:b9:c9:65:79:f3:d3:8e:23:0e:06:54:a0:b2:
a0:0e:8f:7d:f5:fa:5a:09:47:b2:2b:4b:a2:5b:1e:
8a:ba:6e:51:d9:1e:86:cd:fb:09:b1:89:e4:8a:60:
35:20:43:b3:da:85:7b:82:24:4d:79:58:74:85:39:
d2:7c:00:26:e7:b2:2b:8c:c1:e8:8c:66:08:03:c7:
9e:c1:2c:2e:0e:d0:48:47:f4:a0:3e:78:a9:9d:e7:
2b:28:31:c3:00:15:ba:13:b7:3e:a8:2a:0f:91:8f:
a8:72:cb:19:a8:8f:20:5d:27:b8:96:a0:35:4e:b7:
03:b3:6d:18:83:de:e6:52:ab:bc:7a:88:47:27:24:
ad:e6:0d:8d:ef:bb:5a:c7:f0:a4:2d:cc:15:11:c9:
60:e4:9e:e1:0b:d2:ac:fc:23:c4:fe:0d:bf:c2:47:
ba:c1:30:db:61:07:30:90:a4:0b:31:01:69:3c:37:
f8:91:61:8f:3c:5c:ed:cb:0f:d0:22:5b:27:3b:f2:
06:9b:5f:3a:09:26:93:77:89:28:98:50:96:d2:a3:
52:89:95:50:ec:20:2a:d4:89:69:10:5e:29:35:52:
ca:9c:8d:ba:41:19:6b:67:9d:36:59:37:67:54:4a:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A1:46:34:72:00:CC:E2:E3:E5:A6:B1:4B:11:3D:09:20:21:F9:24
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:35:2f:23:9b:a5:fb:f6:b2:a1:0b:7d:18:67:62:41:61:a8:
ef:b4:a0:47:63:32:a7:a3:6e:57:ad:ba:c4:b7:ff:1a:99:2a:
4c:c1:58:2e:e9:78:a7:b7:02:2a:c0:c0:95:81:b5:73:ed:92:
f0:1d:b3:0b:bb:c9:99:d1:fb:40:39:74:fe:be:56:c3:5d:af:
c9:0e:91:0f:a3:87:cc:0f:9b:ea:4c:36:e9:23:44:e1:11:61:
ca:57:aa:ca:68:a5:a5:ac:9f:94:8c:b9:ad:bf:34:4d:bc:83:
cc:ff:53:55:fd:1a:cc:d2:21:fd:76:04:b7:ef:57:bb:18:b4:
75:17:3a:89:ef:33:a8:6c:4b:92:a2:1f:95:af:47:4f:aa:e2:
e5:70:67:c1:8e:8b:4d:ee:d2:26:3e:86:03:a1:c8:ff:c4:d8:
85:22:7d:33:a1:3c:4e:c3:1e:25:db:4e:5e:58:df:36:fd:ba:
50:3d:3c:03:a6:44:ba:d4:0a:18:b2:30:e1:41:d5:61:1c:38:
b9:89:42:ff:93:bf:87:90:88:06:71:81:1a:cb:ca:41:be:74:
f7:ba:17:db:f4:91:94:fc:7a:04:6c:81:b6:6c:3b:6c:40:e1:
f4:d3:1f:5d:1b:1c:bb:4f:0a:2f:7b:b6:5a:9e:6e:b1:22:db:
20:a3:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:52 2024 by rpki-client on console-fra.rpki-client.org