Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File:                     h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier:          yeUUP2qhYl6DBIu0eR4Gyl9dXIw5wJm6yh8g/KroZRY=
Subject key identifier:   D2:B8:A7:06:87:3D:C3:EA:EE:B5:7A:F3:7A:0E:A1:8E:FA:D7:6A:42
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer:       /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number:          15
Signing time:             Sat 07 Jun 2025 05:21:22 +0000
Manifest this update:     Sat 07 Jun 2025 05:21:21 +0000
Manifest next update:     Mon 09 Jun 2025 05:21:21 +0000
Files and hashes:         1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: K/XmaXRUcM1g9TrlYNkWv4mIEvff0CPJ3Ge85iSn9/w=)
                          2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
                          3: A9CB3386354F11F09EC9F1A7DAE4EC9C.roa (hash: 7U1mV0n4hOOQ2C/rrtUaR6Lca9wumtLagsFczOgXBJk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
        Validity
            Not Before: Jun  7 05:21:21 2025 GMT
            Not After : Jun  9 05:21:21 2025 GMT
        Subject: CN=6843cc52-29b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:e6:59:a2:6b:ad:a7:37:23:ba:f9:24:0e:
                    06:a6:fa:6b:65:ae:e2:39:dd:bc:69:46:11:b4:96:
                    03:ca:ae:aa:38:c1:48:ea:52:81:d8:ac:f7:88:d3:
                    70:51:53:7d:b6:73:9c:d0:6c:21:ba:e1:91:8e:8c:
                    da:d0:88:3d:26:b2:2e:82:ac:bf:4b:07:22:80:84:
                    b7:f5:8e:2d:6b:8e:da:67:f1:cf:e5:85:4d:e0:70:
                    90:4c:4e:28:17:9d:24:30:05:81:b2:d5:f7:8b:ea:
                    2d:21:35:ca:ab:a1:02:90:71:30:1a:11:a9:1b:6a:
                    fa:62:75:96:2a:c0:57:df:85:c7:68:12:4f:ba:2b:
                    3f:08:d4:71:d0:6d:0a:a0:a3:0a:25:bb:ab:1f:8b:
                    e1:f0:1a:e3:3b:35:cb:7c:e9:e6:91:81:a1:fc:6e:
                    88:1e:14:75:43:da:c8:aa:eb:26:22:dd:61:08:29:
                    d6:e5:a5:0c:4e:a4:b5:41:35:50:de:23:8f:41:14:
                    1b:97:25:8c:15:54:34:cf:d8:a6:f6:7b:14:ed:e5:
                    16:01:06:ed:28:e3:ce:2a:9a:51:9f:7b:ef:4c:8b:
                    e0:c3:cd:5f:09:ab:33:f6:48:53:6d:20:37:4c:54:
                    41:2f:96:cc:03:cf:62:b1:0a:5b:8d:61:1f:17:1b:
                    20:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:A7:06:87:3D:C3:EA:EE:B5:7A:F3:7A:0E:A1:8E:FA:D7:6A:42
            X509v3 Authority Key Identifier:
                keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:24:76:eb:53:bb:6a:24:b5:0a:a1:6a:ac:55:b8:22:f4:
         fb:58:37:c4:0c:c4:b5:cb:d5:46:f0:83:a6:86:25:13:e0:54:
         d7:66:95:c2:c1:d1:97:47:27:fc:33:32:de:09:ca:4d:27:b7:
         ea:af:08:74:47:8e:9d:74:bf:2a:36:e1:17:10:88:62:46:5f:
         20:e7:02:73:2d:5d:69:13:1a:f2:da:45:3d:57:f6:10:cd:29:
         9c:0f:1e:b3:a3:33:5e:10:3b:a7:83:30:fd:14:c7:be:74:48:
         a3:a2:83:8a:a9:a4:4d:d2:26:7d:20:a1:fe:61:58:43:76:48:
         6a:82:f7:7a:14:c4:90:c3:07:01:6d:6b:ed:90:2d:56:99:7a:
         4f:f2:e4:5c:d4:c3:ce:94:bc:d3:bc:00:dd:34:f1:db:ed:fe:
         59:9e:2b:3c:11:7f:5d:89:7e:4f:ad:a1:38:30:03:02:46:ef:
         bf:73:76:13:46:98:88:cd:5e:01:49:b8:fb:33:a9:ba:34:ff:
         5b:35:b7:cf:c6:43:08:9d:20:6c:36:32:7a:69:57:0d:15:94:
         d4:1a:e2:15:ed:65:35:a5:a9:a3:da:78:3b:75:5e:23:80:b3:
         ac:a6:f2:c7:ba:f5:58:c3:7e:16:b9:11:61:d5:cf:28:d3:56:
         6d:1d:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:48 2025 by rpki-client