Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: 8qhkUc/ly2U/fUT1Cq6k2l8FZV5WjJ1cVdXCV+XOYeg=
Subject key identifier: 84:10:07:89:70:49:BE:0A:C8:53:0C:58:1A:6C:92:30:DC:C1:7D:89
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 0561
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 055F
Signing time: Fri 31 Jan 2025 01:44:01 +0000
Manifest this update: Fri 31 Jan 2025 01:44:01 +0000
Manifest next update: Sun 02 Feb 2025 01:44:01 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: nYzgWsA0MdANIOVycssdFZ/mkePEhKqwP2sQ5gGYyXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1377 (0x561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jan 31 01:44:01 2025 GMT
Not After : Feb 2 01:44:01 2025 GMT
Subject: CN=679c2ae1-6fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:6d:3b:2c:0f:13:f8:c7:9f:05:f8:ba:b8:
b5:e6:84:ba:73:92:a0:85:b1:f1:cd:77:3b:ef:2b:
a3:48:a4:61:74:d2:90:07:e3:3f:2a:3d:97:59:49:
ca:10:e0:c5:83:ee:e0:26:5a:c1:52:99:28:37:dc:
5c:47:63:f2:7c:65:3b:91:e3:1d:d0:aa:8b:0b:51:
5a:4b:11:5f:e0:58:a2:86:43:c6:49:67:9f:06:32:
e3:5a:24:02:77:24:8b:e6:c4:bc:42:ff:b0:0a:db:
48:6b:6a:22:50:b6:28:56:ab:58:ed:35:7f:52:3e:
ae:8a:ec:b0:ab:9b:67:05:a1:e9:fd:63:26:f5:f8:
19:66:ed:d2:3c:2e:67:42:f9:53:0b:87:2f:4b:6f:
15:68:fb:58:d9:45:13:c5:4d:e0:25:27:e8:f0:66:
81:b3:0b:f5:17:16:5c:de:50:ed:a7:76:88:f1:18:
af:dc:f3:94:0d:12:24:f2:62:a5:ad:5d:4c:43:da:
9b:45:3a:83:05:e1:c3:a2:a2:80:95:5c:0a:e2:f7:
c5:2a:c3:e3:44:c6:ed:a3:6a:8d:d5:db:fc:31:2a:
56:6e:2c:4b:60:cc:44:eb:a8:80:f0:a8:09:68:28:
5c:32:cb:46:3d:d3:e0:01:61:8e:af:52:ef:19:17:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:07:89:70:49:BE:0A:C8:53:0C:58:1A:6C:92:30:DC:C1:7D:89
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:96:53:16:c6:0b:95:91:f7:71:ef:34:8b:dc:a1:55:b8:fe:
67:08:b5:cc:27:5a:ec:17:74:f2:40:20:0f:1f:9f:ce:6f:0d:
20:a3:cc:81:11:10:73:e3:9e:c3:30:31:34:75:84:74:87:31:
ee:29:db:a3:31:72:c4:47:3e:b7:ad:5f:3c:d5:6d:e4:01:7e:
7e:c4:fc:3f:f5:c6:95:82:54:19:a3:f5:c9:0b:f8:9e:8c:df:
2a:1c:06:d9:aa:7d:65:8d:45:51:bc:c0:9b:59:41:ff:84:6d:
c9:01:66:ce:03:2a:3e:7d:27:dc:03:99:00:ba:13:e8:e0:77:
88:25:9f:d0:03:8d:a7:f3:24:f2:f2:46:63:16:a9:f3:8f:ef:
59:23:c1:a3:0b:2b:5b:25:d5:d9:e3:f6:da:fc:4a:08:64:1c:
7b:8b:1d:71:bf:2a:81:48:31:65:6a:b1:f1:3a:a2:b1:1f:ca:
02:30:43:bb:0f:7f:68:c7:04:17:3e:ae:38:34:b4:18:8e:fc:
d9:59:01:ee:38:2f:3e:15:f0:d8:b4:37:6f:87:4b:47:34:06:
7b:c9:59:87:8d:f4:a0:52:93:ab:e5:e2:c6:d9:fb:39:08:14:
e9:1f:4b:68:10:a1:f3:80:4d:ea:24:ef:ad:df:00:34:cd:6f:
4a:b9:42:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:39 2025 by rpki-client