Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File: DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier: AT9UM888CUtNEEQvRRE8uh3iweZsqSodgh+6Akv1BG0=
Subject key identifier: 87:6C:F2:0F:05:BA:6C:AC:69:CF:66:79:0B:46:D3:06:79:67:51:39
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer: /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial: 0B86
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number: 0B85
Signing time: Thu 03 Apr 2025 01:00:43 +0000
Manifest this update: Thu 03 Apr 2025 01:00:42 +0000
Manifest next update: Sat 05 Apr 2025 01:00:42 +0000
Files and hashes: 1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: 9NPykeWIExO68GtjrvDZTieo+Rfd2c/xSywIrVQRuw0=)
2: D550D09C037F11EDA40460C2F1222468.roa (hash: 9wZBqedJVTgdGdUQ5S31jykjUra1rcqD+ULApifCF68=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2950 (0xb86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB628AF
Validity
Not Before: Apr 3 01:00:42 2025 GMT
Not After : Apr 5 01:00:42 2025 GMT
Subject: CN=67edddbb-38ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:1e:61:91:02:82:37:6b:eb:2b:03:9e:ab:
26:0e:5a:66:bb:21:e0:e6:3b:5f:ac:c3:a5:f3:c8:
98:95:36:6c:8b:20:c4:8a:09:d7:48:4d:03:e4:72:
94:37:a0:91:c8:af:2f:3e:6a:15:34:1f:23:c9:9d:
55:b5:e3:ee:80:aa:d0:db:b9:40:73:2d:83:3a:b7:
8a:da:f5:13:8d:08:ad:11:f3:54:ad:c8:01:70:f2:
66:74:7d:0f:04:82:50:c4:21:46:83:9f:0a:1b:aa:
48:26:8e:56:13:9d:23:3a:0c:f6:83:e8:f8:ac:8b:
27:62:bd:ed:ff:fb:b1:3f:b3:8f:f8:c5:ed:3d:ab:
26:35:a6:e7:f2:53:5b:86:fb:53:c1:8b:a7:3d:81:
d6:8d:45:9a:b7:fa:2c:f2:a5:fd:72:16:94:4d:76:
ff:77:b3:f0:c6:82:da:41:bc:ca:01:67:5e:f8:4a:
70:5f:be:4e:4c:54:6f:03:f6:2b:73:6a:ad:53:82:
af:db:21:ea:df:f6:f9:c7:39:aa:42:2b:a5:4a:76:
77:b1:45:eb:d5:9e:25:b0:1b:c2:b4:02:4f:f3:b0:
bf:cd:a4:ce:c4:95:70:42:89:ce:8e:03:aa:b3:05:
d0:77:f7:f3:53:ba:8a:db:9e:43:53:bc:97:58:4e:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6C:F2:0F:05:BA:6C:AC:69:CF:66:79:0B:46:D3:06:79:67:51:39
X509v3 Authority Key Identifier:
keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:88:de:24:b3:e3:66:a1:15:c2:07:f3:ca:69:b6:71:0d:dd:
5e:4f:a6:29:f2:e4:e8:86:67:0b:66:f0:3a:01:23:09:05:55:
7d:6c:b2:60:ca:f2:98:9f:ea:6d:50:d5:f8:20:45:f2:4c:c0:
af:0a:16:f0:19:c0:37:e3:54:97:fb:d9:80:4c:06:5b:6a:6a:
89:93:63:44:f2:17:1d:fc:c8:73:ef:fe:fe:11:53:c5:c4:27:
8b:08:ee:d5:6a:3c:63:ea:dd:2d:8d:3b:02:b0:05:f1:d3:91:
fd:a5:05:dc:18:37:fe:f1:ca:6f:a7:03:0a:75:61:6a:da:6b:
0f:d5:8a:64:48:09:02:8c:be:ee:1a:54:ec:ee:b9:d0:a5:6c:
32:3f:32:7d:06:58:9f:d8:60:b3:16:a7:d6:0f:a7:8b:2d:90:
18:a9:33:68:b4:f8:df:8b:73:87:60:b7:94:de:7b:9b:54:da:
59:fd:b8:fd:9c:8d:6a:05:f4:ea:e8:1c:4a:42:92:45:d2:21:
7b:b1:71:e3:f4:2e:d9:d8:7d:9a:83:7a:5e:d0:bc:fa:4a:ca:
57:32:40:2b:a8:c3:3a:12:fa:18:2e:1c:23:1f:28:be:db:ed:
ab:64:36:d8:49:cb:51:72:bb:6c:cb:08:08:62:b0:7d:8a:0a:
30:ca:f6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:24:32 2025 by rpki-client