Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: 0ve8cYPGL5ajmD4D85rpDshwc4XA4BXKIwe/keAejbo=
Subject key identifier: F2:C7:93:E8:9D:DB:CA:12:D4:B0:C2:00:D8:E3:54:E8:6C:00:8C:AB
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 01C8
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 01C6
Signing time: Thu 17 Apr 2025 04:20:44 +0000
Manifest this update: Thu 17 Apr 2025 04:20:43 +0000
Manifest next update: Sat 19 Apr 2025 04:20:43 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: 9KTOyjFpHZQpdcduG4gChE43wI1eXkBZYeAalweDJeM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Apr 17 04:20:43 2025 GMT
Not After : Apr 19 04:20:43 2025 GMT
Subject: CN=6800819c-0aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:77:6e:75:83:9e:ec:07:ed:51:06:af:4f:
1a:9b:6f:cb:7a:e8:f9:db:ba:0c:ff:2f:25:0b:d1:
4b:38:12:dd:09:3e:8e:f4:d3:43:9d:1c:a0:66:ed:
1f:ac:46:91:13:4c:17:6f:37:7a:33:59:fe:60:ae:
48:5b:52:41:1e:cb:98:8e:e5:4a:31:a1:63:1e:92:
28:46:9e:48:b7:a6:36:27:63:d4:35:50:15:b7:eb:
b0:48:d6:b3:92:33:ec:47:71:36:cb:fb:55:fc:6f:
48:c2:91:ac:ed:60:4c:19:d7:c4:cf:9d:e9:a4:09:
22:d1:86:73:ed:ad:36:a1:c8:f9:88:02:d3:e0:bb:
2b:12:f3:25:6b:8a:5c:8d:53:a3:c5:be:45:5e:23:
b9:e7:de:a0:bb:2c:a4:05:17:74:4a:62:da:e5:5f:
f3:d9:8f:67:e0:0b:ed:89:60:4b:6d:30:b4:84:97:
c7:e0:20:08:71:eb:d4:6a:ad:b4:73:bc:0f:8c:7a:
88:fc:e6:45:aa:fc:48:d3:12:44:e8:ef:f0:39:d3:
da:ce:1c:5e:93:fd:67:5e:7d:ae:15:8a:13:0a:e8:
f1:7c:6e:3b:4d:3a:3a:71:7c:5c:17:84:42:99:4e:
c3:4c:ac:f2:64:5b:31:34:90:76:5c:d0:c5:d4:68:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:93:E8:9D:DB:CA:12:D4:B0:C2:00:D8:E3:54:E8:6C:00:8C:AB
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:1a:b5:4e:91:2d:60:99:4c:cf:50:f2:1e:43:50:db:9f:9a:
bc:44:b8:73:bc:f9:6d:74:29:00:ee:0f:2c:4c:da:32:36:a5:
5a:3d:a5:f5:d1:66:e2:6c:79:4f:b4:04:50:29:c4:f4:df:d9:
61:69:bb:40:bc:c4:15:9c:c5:7a:bc:af:39:c0:95:63:85:6d:
4a:c6:5c:08:a1:e4:5c:24:ba:31:6f:0f:66:7f:a1:95:14:db:
3c:69:6a:be:d3:ee:1b:ea:78:c6:95:2f:88:87:bd:2a:77:b1:
17:4a:65:8d:b0:65:a5:73:ed:50:36:dd:ab:59:e2:10:4f:cc:
a8:c0:d6:ba:7f:51:f8:1d:8e:13:83:87:9b:9d:0c:9b:39:38:
98:12:6e:fb:82:51:fd:ae:8b:2f:d3:43:4a:5f:84:ca:f7:a8:
cd:c5:5d:e2:2d:f0:d3:b1:8e:b3:5f:e6:38:2a:3f:62:4a:dd:
25:e5:02:67:7e:b8:4e:cf:b6:f9:33:a2:60:2c:1e:48:0b:af:
11:ed:09:97:49:36:51:65:91:fd:30:4b:1f:52:f8:a6:c6:98:
79:b5:ee:e6:f3:1b:f3:6f:f6:fe:57:a1:73:4d:25:5f:03:46:
53:0f:c5:02:0f:7d:74:e8:b7:72:df:30:65:ae:3a:af:88:45:
83:1e:d3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:04:27 2025 by rpki-client