Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
File:                     -HlTHl-cqfSLcTODpQCBDVDy0kQ.mft (raw, json)
Hash identifier:          DS+ZZt3DTDDRzHYF0rjpJ/FcV0X8GsloYH7tah6Lxsc=
Subject key identifier:   86:68:84:0B:FE:A9:F1:FF:92:99:E0:1F:A8:3A:87:3C:06:0F:7F:56
Authority key identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44
Certificate issuer:       /CN=F361950AAF/serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
Manifest number:          1B
Signing time:             Fri 04 Jul 2025 05:23:34 +0000
Manifest this update:     Fri 04 Jul 2025 05:23:33 +0000
Manifest next update:     Sun 06 Jul 2025 05:23:33 +0000
Files and hashes:         1: -HlTHl-cqfSLcTODpQCBDVDy0kQ.crl (hash: kxbo51XLoeR5cCMcKQW7zBueTIYtXzNdiPmCLPTC0Sg=)
                          2: 7B6F3054478411F0B371B7DADAE4EC9C.roa (hash: w5E8JBOJdrFnCHufU8YUVNcTyXQmMdg4vF0OTc1n9B4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 05:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361950AAF, serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
        Validity
            Not Before: Jul  4 05:23:33 2025 GMT
            Not After : Jul  6 05:23:33 2025 GMT
        Subject: CN=68676556-a8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:cf:ff:48:f1:2e:48:6d:59:23:ce:55:a9:
                    46:27:2c:86:a1:cd:8c:47:74:fe:be:fa:ae:79:13:
                    76:96:ba:8a:5d:75:6a:1e:d1:1e:e1:9c:46:82:48:
                    f9:e1:a1:3d:77:e9:f6:d1:4e:94:a3:cb:92:84:a5:
                    95:b5:75:aa:34:2f:90:34:6b:7b:5c:40:7b:1c:b7:
                    c7:4b:ba:2e:09:4c:13:02:4a:ed:b0:4d:c9:20:55:
                    b8:88:0f:f8:88:aa:c6:f9:2d:6e:1c:b5:3f:8c:4c:
                    64:d7:be:9d:d4:b0:0f:57:09:02:9d:15:5b:b4:52:
                    9b:d7:72:a5:25:fa:c5:5a:bc:f6:26:6a:b1:ec:3f:
                    4e:8b:e0:82:66:04:72:8b:72:d7:83:3b:f3:e0:2f:
                    11:fb:59:b5:43:4f:15:38:5b:68:0e:4f:b2:37:74:
                    b5:1a:0d:e2:56:10:c5:c2:7f:98:53:64:c5:c2:1e:
                    a9:94:7b:50:f2:cf:fc:44:0e:28:b5:a5:e6:f1:98:
                    af:7d:f5:2d:0b:30:24:b8:8c:7f:16:c0:83:5d:1d:
                    58:64:6d:4d:bc:19:10:ff:ac:5d:b5:c5:18:f6:6b:
                    00:96:c7:51:2f:4a:26:99:3f:ea:6a:e1:c5:97:e2:
                    98:78:57:1d:25:a2:2c:6d:35:8d:72:bb:01:e5:d8:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:68:84:0B:FE:A9:F1:FF:92:99:E0:1F:A8:3A:87:3C:06:0F:7F:56
            X509v3 Authority Key Identifier:
                keyid:F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:59:af:8a:66:00:1b:36:d9:17:19:c1:b9:d3:28:d7:c5:
         0e:83:83:b7:07:b5:2c:d0:31:f3:c9:9c:b8:9d:df:4d:bb:32:
         8b:be:54:af:73:14:a9:21:5c:92:eb:95:27:a0:4a:16:2e:3c:
         3d:99:77:d8:45:35:60:b1:83:22:ab:91:97:52:ae:1f:a7:65:
         f7:50:5b:46:76:b3:69:2c:33:4f:ff:28:37:cb:c5:07:73:4c:
         c3:4c:83:b6:23:1e:0a:35:bf:2e:ff:68:8d:78:ec:10:e1:11:
         8c:ca:c2:d7:e6:20:35:d1:22:5a:e6:d5:ca:db:7b:c7:93:a4:
         8e:25:6d:8c:b6:90:88:df:e5:ff:73:96:2f:3f:4c:bf:b8:39:
         7a:1c:c7:db:82:8a:37:4d:f5:11:a0:fa:09:e1:2e:d5:6b:4e:
         e9:b0:36:8d:f4:20:66:0b:32:2d:fc:e4:ff:81:64:44:61:36:
         ad:be:f7:c7:75:a2:70:b7:77:ce:8d:79:2e:78:df:b4:a3:32:
         cd:51:0f:c8:37:02:09:69:16:2e:c9:9f:66:2e:cd:27:21:20:
         5f:73:7e:65:dc:35:87:81:0d:df:57:30:59:81:57:bc:72:4f:
         09:79:0f:3f:31:35:96:f3:a8:fb:c8:f9:b0:a8:18:d5:64:22:
         8c:58:01:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:40 2025 by rpki-client