Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          0Yv+ygLKtDaR17vZi+RjlFGx1im2dVE4W/fPyDhXuWU=
Subject key identifier:   77:4B:8A:F6:58:8E:EC:24:59:7B:93:D7:4E:96:2B:21:37:C1:88:83
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          C8
Signing time:             Sun 15 Jun 2025 05:08:03 +0000
Manifest this update:     Sun 15 Jun 2025 05:08:02 +0000
Manifest next update:     Tue 17 Jun 2025 05:08:02 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: euJTAMNx4/JVIyCmtFM/N8iH78/yhHmpvpYX2itkS8s=)
                          2: FAE9132EBEE311EFA8C67594762E951A.roa (hash: 4V2xq+YhsqcDrEW6q5qpBpAI8sGhmeoDwb8giUJL3zw=)
                          3: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: Jun 15 05:08:02 2025 GMT
            Not After : Jun 17 05:08:02 2025 GMT
        Subject: CN=684e5533-6b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:de:c3:30:c1:25:c7:2a:bf:ef:ed:71:c7:
                    01:5f:28:67:2a:2e:5b:46:1a:14:dc:e3:95:eb:53:
                    6e:e7:b3:11:29:1e:3d:1c:b4:7a:6a:c0:ed:c2:9c:
                    f1:df:d0:0e:aa:32:98:5b:7b:c4:d1:87:57:63:2b:
                    dc:65:fb:86:a7:d9:c5:70:11:14:54:f9:f3:ad:55:
                    a7:e5:4d:40:b7:95:e5:29:ab:d9:27:0a:38:20:22:
                    fe:2b:c2:46:91:21:93:82:f6:63:d9:7b:37:5f:91:
                    53:c4:0e:dd:85:eb:25:33:e4:15:b7:32:80:96:b8:
                    5e:24:fb:33:d9:5a:b1:7f:8a:5b:14:ac:fa:84:08:
                    ac:0a:e9:db:b5:3b:63:dd:82:21:ea:a8:e0:16:29:
                    21:56:20:42:38:4c:2c:59:88:93:50:1d:9f:81:ef:
                    30:d1:0e:9e:7b:a0:30:c0:3f:2e:d7:08:fb:bb:7c:
                    fe:24:a6:97:03:d1:c6:f0:9e:3b:29:0f:18:96:30:
                    18:21:91:f4:be:c0:c5:75:22:58:ed:c0:dc:ed:02:
                    ab:db:1d:07:16:2b:9c:f6:bc:f6:9a:25:e8:d5:0d:
                    c1:f5:97:94:e8:d2:02:5f:5f:95:82:8a:39:3a:52:
                    d9:c4:d2:c7:ed:d3:0f:92:1e:89:3f:65:74:fa:46:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:8A:F6:58:8E:EC:24:59:7B:93:D7:4E:96:2B:21:37:C1:88:83
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:b9:9f:42:c7:5e:96:c6:f4:68:ba:32:fa:c8:04:7b:75:
         9f:70:2f:3b:25:88:a5:f1:6a:6a:cc:be:8e:54:06:1d:9a:af:
         d1:35:bd:5b:ce:8b:50:59:f6:d1:a2:d7:5e:de:42:57:7b:10:
         53:f6:9c:ba:91:5f:76:f1:6f:01:3b:4d:b9:b2:e7:5d:47:2c:
         26:01:c7:3a:64:70:41:2b:df:69:7e:ba:77:fb:9c:fc:1c:11:
         93:85:f9:d4:ef:fa:f1:87:59:32:d2:ab:c1:45:e4:51:10:a8:
         bf:59:f2:fe:24:61:eb:db:26:20:ab:2c:7d:4c:fa:2e:e6:52:
         f4:b3:f1:cd:3a:0b:b2:68:51:ab:bd:69:81:03:38:8e:f6:67:
         22:b7:eb:71:b4:8d:f7:56:a9:ba:5b:38:0c:6c:85:72:9f:fa:
         0b:d5:3f:6b:20:8b:e2:60:ac:62:b0:e4:21:ca:37:36:25:71:
         55:b9:59:1e:24:41:af:f1:74:6e:cd:c8:8a:5c:29:ad:1c:43:
         73:9a:a4:58:62:70:e1:7b:02:15:1d:85:f6:37:28:6d:ae:a8:
         49:36:5e:ce:13:60:16:96:95:d8:77:2f:57:20:c6:d8:ec:b6:
         fa:e1:28:29:12:03:b0:9e:e8:0c:a0:40:b4:42:0a:58:5e:18:
         f3:e2:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:12 2025 by rpki-client