Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
File:                     JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json)
Hash identifier:          lir3quqciBbReZtYV6k/5vhuyG3cPSLNTcQ9OaPYNJs=
Subject key identifier:   96:92:E4:F9:CE:F0:41:5B:39:B1:6D:18:05:C4:28:C2:8A:1E:F0:46
Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
Certificate issuer:       /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Certificate serial:       025A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
Manifest number:          0258
Signing time:             Fri 18 Apr 2025 09:03:31 +0000
Manifest this update:     Fri 18 Apr 2025 09:03:30 +0000
Manifest next update:     Sun 20 Apr 2025 09:03:30 +0000
Files and hashes:         1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: ziREyyoIM7AE5Gvi4bD01nU6XdRNfEdEve5jv/shIi0=)
                          2: D5189642585A11EE959ED9784AD9E6FC.roa (hash: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=)
                          3: 0525AE88585B11EEA76861794AD9E6FC.roa (hash: 7rp3+TdgE0k+yfnwL23onTrWLktoLa5cPkFU5dKOKQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Apr 2025 05:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
        Validity
            Not Before: Apr 18 09:03:30 2025 GMT
            Not After : Apr 20 09:03:30 2025 GMT
        Subject: CN=68021563-be8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:ac:05:c7:e7:f7:72:7c:76:76:88:5a:3e:
                    63:8f:96:73:74:6f:ed:6e:57:e4:63:4d:e6:e5:99:
                    55:6e:80:50:f5:bb:c9:65:44:ad:e8:69:f6:0c:85:
                    aa:c1:ea:21:18:80:76:75:82:2a:5d:95:ea:2f:47:
                    0f:8a:58:df:a0:ed:88:45:36:3c:e2:48:28:a9:33:
                    44:85:ff:0e:96:ae:a4:2a:ed:0c:cd:ae:56:f6:67:
                    c7:74:06:b2:ec:a3:49:78:c8:1b:6f:5f:51:f7:2a:
                    c1:ad:83:4c:fa:74:95:80:1a:58:7c:bc:fe:c9:28:
                    1a:2d:80:d6:5c:13:b6:40:4d:ac:d8:08:42:8d:13:
                    d8:73:26:02:82:84:4f:40:3b:1a:db:6c:32:ee:01:
                    90:06:4e:b9:8f:6d:2d:84:1f:72:7e:a8:b4:48:49:
                    44:7a:a5:ca:21:59:7e:3d:3b:76:fc:34:1c:3f:db:
                    26:bc:06:ab:ec:ea:8f:65:76:45:4d:56:fa:73:f0:
                    9b:4f:78:32:91:9b:b8:2f:e0:2a:53:cf:0b:04:dd:
                    1d:d4:0b:44:5a:02:1c:1b:5b:48:25:fb:1d:b8:55:
                    b8:eb:0d:51:72:90:53:e3:65:89:46:51:bc:f4:d1:
                    61:09:e0:e3:ab:92:f9:21:70:3a:72:36:c5:86:67:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:92:E4:F9:CE:F0:41:5B:39:B1:6D:18:05:C4:28:C2:8A:1E:F0:46
            X509v3 Authority Key Identifier:
                keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:54:49:9c:04:a5:6a:8e:ad:66:b7:9d:7f:a2:2b:6a:db:1a:
         89:9f:3f:e0:96:f1:d6:dc:7b:06:c8:38:b6:40:97:7c:3a:6f:
         e2:0f:0a:b1:21:4f:11:18:20:77:5b:6a:3d:21:d5:19:ea:39:
         3b:07:66:3f:36:83:be:30:04:87:4b:d0:6c:0e:45:1e:d5:6c:
         4b:3c:2a:3c:e5:4b:2b:c6:c0:17:a1:0d:7f:7c:7e:a0:0a:ce:
         d8:a7:98:72:d5:c1:03:00:76:3b:a6:00:db:08:55:5a:55:d3:
         e2:74:bd:ea:37:ba:c1:61:68:ef:39:f3:01:74:b4:a2:25:18:
         47:fe:5e:b6:69:27:bb:f0:64:37:cd:a4:0a:f5:04:97:a4:04:
         1a:8d:68:9d:cb:c3:1b:86:24:fd:3a:46:59:10:8e:b0:ff:09:
         3f:e9:19:1d:38:c7:23:48:31:87:33:83:79:33:06:ac:e7:82:
         0d:63:d2:0c:54:7e:57:1e:19:b9:6a:d0:2c:2c:bf:27:6f:a2:
         22:0b:2e:dc:77:31:cf:5b:8d:d3:b5:5c:6f:bd:99:fa:db:99:
         5d:e5:6a:2e:dc:9a:df:9f:d2:db:a5:45:56:8a:68:3c:91:41:
         e1:2a:07:eb:46:09:b1:33:2c:01:ca:98:03:74:33:f5:68:19:
         bb:f0:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:56:23 2025 by rpki-client