Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File: OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier: ikkm42T/WxBAFrNelRG7c/b+bA6Jr1ELu/krSCzckjw=
Subject key identifier: 16:CA:A8:EA:76:0D:B4:CA:82:BA:B3:F8:BA:09:01:EB:85:FF:46:3A
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 017B
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number: 0179
Signing time: Fri 31 Jan 2025 02:50:44 +0000
Manifest this update: Fri 31 Jan 2025 02:50:44 +0000
Manifest next update: Sun 02 Feb 2025 02:50:44 +0000
Files and hashes: 1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: Lgad3Nt1PS7y5TaoHzIvFULi6byp3BWP5Y/N2YqlRDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: Jan 31 02:50:44 2025 GMT
Not After : Feb 2 02:50:44 2025 GMT
Subject: CN=679c3a84-9f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:aa:47:fc:9e:d1:ed:0c:84:55:57:1f:20:
a7:9c:96:7a:2d:4d:d3:65:fb:c4:39:9e:96:fb:a9:
cd:df:99:04:48:b5:ed:10:f4:1b:eb:9d:35:1d:48:
b3:5c:61:ff:3b:72:b2:fa:21:51:d0:8a:c5:37:f3:
c3:41:ef:b8:88:39:fa:55:2d:87:d2:f6:28:75:e3:
bd:fb:95:cd:7d:5f:96:34:e7:07:66:68:b4:47:9e:
84:8c:c7:c3:10:57:b3:7b:52:ce:1c:07:83:53:d0:
79:1c:d3:53:e2:8b:48:57:3f:ff:79:92:cc:17:1a:
b4:68:f5:e2:99:cf:1e:f6:26:17:0d:41:6b:a7:31:
ce:78:fb:ac:02:05:60:67:57:99:e5:13:53:52:f9:
d0:38:9c:e7:8c:73:d4:38:18:de:9e:ed:45:71:6f:
48:1b:ad:fa:c7:2c:5d:08:35:09:d1:3d:5e:84:94:
a6:cf:1a:49:05:c5:e9:23:1e:1d:3e:10:9b:ac:f7:
81:9c:f5:a2:2c:29:31:fe:a0:1c:bd:7e:3f:01:61:
06:35:2b:1f:fa:d4:31:90:d6:37:b0:97:2b:9b:ee:
46:30:e6:60:da:b1:1d:02:42:c5:3a:ab:0e:10:71:
d8:8e:61:aa:be:4e:3e:0a:7a:64:08:33:70:36:40:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:A8:EA:76:0D:B4:CA:82:BA:B3:F8:BA:09:01:EB:85:FF:46:3A
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:64:47:92:77:f8:2f:f5:1e:a5:7b:03:33:a6:7f:7a:12:1c:
cb:f3:ca:94:74:c5:13:f1:5c:d2:39:34:c7:60:9e:b1:02:e2:
47:67:cd:83:e1:24:75:97:1f:8a:9e:77:3f:41:f7:e5:67:24:
e8:ce:05:d2:15:61:b1:e2:9e:77:a0:0f:11:51:ae:31:6b:8d:
88:b2:4b:b8:90:10:aa:87:f9:e7:33:e6:af:7b:10:55:b3:2c:
17:c8:5e:21:ba:93:80:32:15:61:38:8a:c8:f6:79:44:8f:fd:
0d:f8:20:73:fa:4c:4e:11:0d:8b:b5:49:e8:9a:01:7b:8d:0c:
9d:21:d2:c4:bd:a2:76:f0:de:3f:30:ee:d4:d1:13:51:43:ec:
e9:49:c2:85:3d:25:6a:f2:c6:df:d5:e0:c1:9a:ad:41:6e:cc:
b8:2f:0a:6a:94:dc:a2:c9:6b:89:6f:ec:7e:af:ef:64:b7:3d:
64:a9:c5:e7:a0:67:2a:52:c6:e0:ee:70:a3:d8:83:f3:36:bc:
63:88:00:3d:79:20:2e:31:1a:2f:a8:01:dd:83:e0:6a:58:e4:
94:ee:81:67:52:b6:6a:78:73:c9:8b:68:40:81:56:2d:9d:e4:
56:76:af:4c:4d:78:bc:c3:2a:0c:f2:3f:2a:77:7b:c8:28:0a:
0a:4d:f6:8c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAXswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjY4RjRBUjExMC8GA1UEBRMoMzlDOTE5QkVGNTRGQTVBQzY3QzM3RTNFNzU2Q0Ex
M0ZCMjM0QjUzRjAeFw0yNTAxMzEwMjUwNDRaFw0yNTAyMDIwMjUwNDRaMBgxFjAU
BgNVBAMTDTY3OWMzYTg0LTlmOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE9apH/J7R7QyEVVcfIKeclnotTdNl+8Q5npb7qc3fmQRIte0Q9BvrnTUd
SLNcYf87crL6IVHQisU388NB77iIOfpVLYfS9ih14737lc19X5Y05wdmaLRHnoSM
x8MQV7N7Us4cB4NT0Hkc01Pii0hXP/95kswXGrRo9eKZzx72JhcNQWunMc54+6wC
BWBnV5nlE1NS+dA4nOeMc9Q4GN6e7UVxb0gbrfrHLF0INQnRPV6ElKbPGkkFxekj
Hh0+EJus94Gc9aIsKTH+oBy9fj8BYQY1Kx/61DGQ1jewlyub7kYw5mDasR0CQsU6
qw4QcdiOYaq+Tj4KemQIM3A2QJh5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUFsqo
6nYNtMqCurP4ugkB64X/RjowHwYDVR0jBBgwFoAUOckZvvVPpaxnw34+dWyhP7I0
tT8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2OEY0LzY2RjM4MzJBQzY3MzExRUVCM0RCNzNBNTc3NTQxMkU2L09ja1p2
dlZQcGF4bnczNC1kV3loUDdJMHRUOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L09ja1p2dlZQcGF4bnczNC1kV3loUDdJMHRUOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjY4RjQvNjZGMzgzMkFDNjczMTFFRUIzREI3M0E1Nzc1NDEy
RTYvT2NrWnZ2VlBwYXhudzM0LWRXeWhQN0kwdFQ4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArZEeSd/gv9R6lewMzpn96EhzL88qUdMUT
8VzSOTTHYJ6xAuJHZ82D4SR1lx+Knnc/QfflZyTozgXSFWGx4p53oA8RUa4xa42I
sku4kBCqh/nnM+avexBVsywXyF4hupOAMhVhOIrI9nlEj/0N+CBz+kxOEQ2LtUno
mgF7jQydIdLEvaJ28N4/MO7U0RNRQ+zpScKFPSVq8sbf1eDBmq1Bbsy4LwpqlNyi
yWuJb+x+r+9ktz1kqcXnoGcqUsbg7nCj2IPzNrxjiAA9eSAuMRovqAHdg+BqWOSU
7oFnUrZqeHPJi2hAgVYtneRWdq9MTXi8wyoM8j8qd3vIKAoKTfaM
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:11:25 2025 by rpki-client