Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
File: Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft (raw, json)
Hash identifier: TglvtsHbe7APhG0GjPTU3041u5ZB8yFCUdJDhPAbqcA=
Subject key identifier: A7:09:B1:03:BC:FC:AA:4D:EB:74:5C:B3:1F:85:09:59:80:45:BD:CB
Authority key identifier: 3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
Certificate issuer: /CN=F36FC328AF/serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
Certificate serial: 04D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
Manifest number: 04D1
Signing time: Wed 12 Mar 2025 01:57:02 +0000
Manifest this update: Wed 12 Mar 2025 01:57:02 +0000
Manifest next update: Fri 14 Mar 2025 01:57:02 +0000
Files and hashes: 1: Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl (hash: 0WXmnYqmy5Dl67iO6WpI8ml+OetyTxMgBfCYuE5uci0=)
2: 5966A982513411EC87153C3CD8A014CE.roa (hash: XiML3N/Ks2DTKm6yJyQZ8MauTZzboO/Tl8GClySWfiw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 14 Mar 2025 01:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC328AF
Validity
Not Before: Mar 12 01:57:02 2025 GMT
Not After : Mar 14 01:57:02 2025 GMT
Subject: CN=67d0e9ee-78ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:5b:45:1e:5b:dd:d7:a3:99:48:ad:fd:cf:
eb:64:d7:f5:f7:83:6f:1b:a3:9a:e4:79:52:16:cb:
bb:ab:ad:2d:e6:79:70:69:2e:49:5c:32:64:bb:2b:
91:29:99:76:b6:0f:98:1c:8b:52:61:32:e0:98:cf:
be:3c:b5:dd:46:b5:dc:ec:09:99:4f:63:f2:fa:1d:
fc:be:65:71:46:45:36:6d:de:45:0c:bb:e7:71:19:
bc:5b:24:af:36:bf:bc:4d:ec:e6:b0:75:ec:61:a4:
3a:f7:1e:7f:25:48:b1:98:ec:5d:f9:d4:cf:84:cf:
fc:16:4c:d6:d3:96:16:19:db:ec:54:8b:16:f8:49:
84:de:76:5e:9c:2c:34:0a:6c:46:4c:18:7e:4d:a3:
a1:ac:d0:0f:7c:af:f6:95:2e:c4:f0:ec:a5:03:6b:
be:04:53:fa:80:bd:43:6d:af:8b:ac:f5:39:90:40:
5c:14:bb:3a:ff:70:84:48:a6:92:f2:2c:f5:60:e5:
b0:e0:4e:d3:43:28:b8:3e:1a:df:21:26:87:bc:bc:
56:b9:03:7d:3c:b6:5a:5e:57:4c:ed:79:1c:34:94:
d3:40:8a:fa:44:d0:8c:5d:63:7d:76:36:c1:8c:0e:
bd:40:aa:ef:73:6f:b0:e1:1c:ff:65:64:d4:25:bf:
b4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:09:B1:03:BC:FC:AA:4D:EB:74:5C:B3:1F:85:09:59:80:45:BD:CB
X509v3 Authority Key Identifier:
keyid:3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:35:40:50:e1:9a:e1:3d:13:9b:d4:0e:6e:dd:95:27:47:66:
e5:59:be:0c:92:23:5b:99:3e:e3:7a:3b:9e:de:ad:0e:07:b2:
a2:e5:dc:a1:c8:07:a8:b4:58:63:9a:8e:7c:b5:0b:7d:42:f2:
86:06:27:cd:82:45:3e:62:2b:aa:ca:97:b9:1d:b9:67:47:c4:
94:48:c8:c3:8d:3a:5f:62:19:c6:ea:35:25:c6:a4:cb:57:49:
ab:b4:71:8b:f1:af:8a:e3:e6:76:c4:95:14:cf:bd:ed:b6:c9:
3b:67:08:76:b9:08:46:3a:a1:c3:49:b9:4a:8e:bc:62:c1:94:
4e:fb:08:c9:01:13:61:f8:73:ff:67:55:ab:55:b5:a9:8b:de:
8b:a3:f6:c3:c2:7c:56:24:b0:62:95:df:c8:8d:4c:7f:b9:8a:
02:ea:41:9c:e5:10:af:cc:9f:90:07:cd:01:ca:a3:d8:0e:0f:
cb:a3:80:4c:0e:f4:64:a8:81:9b:ec:ce:9b:d2:94:60:0a:4b:
dd:fb:82:61:98:78:54:91:88:40:02:07:4e:d6:86:ad:fc:3d:
a2:42:15:e5:9b:91:ed:2b:fa:bf:4a:0b:ce:2d:00:51:b4:07:
ae:4d:8c:fe:eb:b2:7b:14:7c:eb:38:21:79:53:b9:7f:d6:d8:
f6:83:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:30:15 2025 by rpki-client