Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
File:                     YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json)
Hash identifier:          Qr81UsLjaW6jeTFXIThDI4GaFo/t7bBAc+Z6QemaBjA=
Subject key identifier:   8D:0D:EE:A2:91:11:55:C4:F1:32:6B:48:5F:3E:6C:15:5E:DD:46:B7
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0699
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
Manifest number:          0604
Signing time:             Thu 12 Jun 2025 02:46:57 +0000
Manifest this update:     Thu 12 Jun 2025 02:46:57 +0000
Manifest next update:     Sat 14 Jun 2025 02:46:57 +0000
Files and hashes:         1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: N8l5f4444jmn7znse7aFen1+cJsMP4yf0hMhsC4A05A=)
                          2: 0091161A144C11F0801A51F76DB8BCC6.roa (hash: 9oNkMM3GJvaxowbYxronZzBOKB5XFOoDP/A6k15+A4M=)
                          3: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=)
                          4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=)
                          5: CBF2E4B829EC11F0A80400EBDAE4EC9C.roa (hash: JxQxoQO5e0xyVP8JrZC6HNTSh2BQxTdpde2yD+5NMPI=)
                          6: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=)
                          7: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=)
                          8: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=)
                          9: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=)
                          10: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=)
                          11: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=)
                          12: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=)
                          13: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=)
                          14: D64D49223E5911F0956A9DBBDAE4EC9C.roa (hash: YsGQStqKKIJfkra1egaJQtfLnvLGLX2PlxNcSWIc/0Q=)
                          15: 01E1321A3E5A11F0B7F45DBCDAE4EC9C.roa (hash: tNYBiIqQJL0JjP5Fr7JKp7+lo47X4fq0T1n16WVA4Lc=)
                          16: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=)
                          17: 666FD3D82EEA11EFBC63294B762E951A.roa (hash: MTXkIou//Guz3KRl/9YKtpj6n9ZVBkXEGaijhN0evTk=)
                          18: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=)
                          19: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=)
                          20: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=)
                          21: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Jun 2025 02:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jun 12 02:46:57 2025 GMT
            Not After : Jun 14 02:46:57 2025 GMT
        Subject: CN=684a3fa1-0c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:85:47:9b:38:80:e8:bc:ed:0c:d4:45:d8:
                    b6:07:40:b1:d2:ab:c1:35:cb:6d:58:c3:5b:38:f7:
                    a2:0c:76:49:37:f2:90:e9:d5:8a:9e:50:f2:71:c7:
                    7d:b4:75:72:3a:0d:42:75:64:96:0c:16:c5:86:97:
                    28:0e:d7:f9:bc:62:eb:11:99:00:e6:55:64:fc:7f:
                    66:9c:b9:08:f8:14:77:01:7d:23:17:f4:a1:ba:f3:
                    e0:04:5a:bd:39:56:75:f9:3a:3e:15:3b:ae:c3:97:
                    61:7d:25:f0:c7:f3:d5:e2:6d:1c:60:89:f4:20:f2:
                    00:02:b5:bb:d3:2d:2a:d4:da:31:03:7d:1c:ea:00:
                    4c:6a:1a:8b:fa:34:4f:5d:e2:12:5f:eb:17:fa:06:
                    87:e6:ed:9b:47:97:e5:21:77:c7:78:e7:a5:0d:47:
                    54:05:4c:97:4b:46:f3:d7:da:02:18:59:9b:05:6d:
                    d0:58:8d:e0:16:76:73:ad:28:d4:cb:05:cc:6d:6d:
                    ff:72:aa:f4:6e:4a:71:36:f4:d7:f2:cb:2c:b9:81:
                    67:f9:c9:aa:60:61:c3:b2:e4:26:08:77:f4:0c:e5:
                    f8:dd:55:ab:af:c6:71:19:7c:96:ea:1d:81:6b:b5:
                    95:b1:be:f7:a8:c1:c7:62:71:ef:4a:68:c6:13:59:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0D:EE:A2:91:11:55:C4:F1:32:6B:48:5F:3E:6C:15:5E:DD:46:B7
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cd:80:f5:fc:af:44:de:d9:3d:e9:4a:07:c3:4d:a1:c8:b0:
         ef:ad:bb:74:a7:5a:eb:be:2d:df:95:e8:e7:8f:71:0d:65:6b:
         e1:22:28:77:b9:10:31:04:ff:f2:35:18:94:1f:59:44:7d:67:
         2b:c0:e0:9c:aa:15:9e:3f:3d:ab:bd:9c:d3:58:8c:17:52:1d:
         ca:39:22:04:f6:04:fa:02:23:7b:96:28:b4:4a:48:35:0a:47:
         c2:64:b5:85:63:c5:88:9d:53:8c:69:65:dc:76:4e:19:82:74:
         c3:2a:63:6c:d8:9a:12:7f:bf:02:c8:bd:d8:31:4b:b5:39:77:
         7c:49:77:54:d9:e6:1a:ed:74:7a:6f:0b:58:45:4b:d9:8a:c6:
         33:e0:af:06:aa:06:51:e8:68:4c:23:3c:00:87:ba:c1:1c:f4:
         a6:23:92:de:e3:71:ef:9c:c2:80:1a:25:b3:88:35:1f:62:75:
         0d:a4:72:d9:2c:39:51:7b:a2:f2:11:61:e2:97:41:d1:cd:b5:
         31:57:5e:75:75:4a:86:78:d7:ef:42:dd:71:f8:e1:f1:88:34:
         b9:a2:2e:59:20:b3:18:1d:d0:cc:b7:cf:4b:09:c0:c0:5d:57:
         76:19:f0:50:30:ff:b3:36:a1:fc:74:2f:52:f7:7f:35:80:73:
         84:a0:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:14:27 2025 by rpki-client