Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          2WOL/GdXWhv9MrLtlmxMvLIZCuvcB2518jmDNQVkQVA=
Subject key identifier:   1D:32:EA:63:B6:D2:AA:7F:53:FD:A2:B1:0A:02:BE:70:07:8E:1B:FC
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       08E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          08E3
Signing time:             Thu 13 Mar 2025 01:08:54 +0000
Manifest this update:     Thu 13 Mar 2025 01:08:53 +0000
Manifest next update:     Sat 15 Mar 2025 01:08:53 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: mpdwiJ6qxTr6o+kPQXDj9lBRcNQJETO1EjpMHk7rxcI=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2279 (0x8e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF
        Validity
            Not Before: Mar 13 01:08:53 2025 GMT
            Not After : Mar 15 01:08:53 2025 GMT
        Subject: CN=67d23026-9c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:bd:75:d9:6a:d2:9b:40:54:11:61:17:80:
                    b2:f9:c1:8a:71:54:9a:40:43:bc:49:38:bd:4e:1d:
                    dd:28:48:72:91:97:94:01:37:2d:0b:54:b1:56:4e:
                    37:25:a8:6f:56:79:ab:ed:49:f0:fc:62:78:7d:7f:
                    bb:eb:83:e7:25:20:4c:1f:0b:47:a0:19:13:e3:a0:
                    51:4d:17:fb:77:4e:10:e1:3c:58:6e:04:99:bd:ba:
                    d7:18:31:c5:86:2b:d8:f2:a0:a1:7b:18:30:fd:f2:
                    dd:a7:db:fe:47:91:0f:32:f4:71:c3:2e:07:8c:6f:
                    fd:d8:81:6e:07:4e:1e:7e:6a:b0:28:20:d8:df:81:
                    45:4d:18:48:2c:3a:ea:28:1f:20:e9:93:59:33:b4:
                    4d:e1:3c:9a:2d:96:ad:1b:b9:ae:1e:09:f1:25:28:
                    45:51:c9:05:47:44:68:75:2d:70:47:00:36:8e:57:
                    f7:4a:3c:4d:e7:c0:9a:2c:24:28:a0:eb:2b:10:18:
                    04:fe:34:a9:79:f8:ed:b2:f5:d4:0e:85:b9:19:fe:
                    50:62:53:d2:7d:07:b6:75:65:97:74:b3:26:6e:3d:
                    e3:cd:84:8d:52:7b:bb:cd:37:f2:c9:d6:e6:1d:5d:
                    04:23:94:2d:16:59:25:ce:7d:e1:f9:e8:79:fd:b0:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:EA:63:B6:D2:AA:7F:53:FD:A2:B1:0A:02:BE:70:07:8E:1B:FC
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:c5:ff:b8:8b:53:54:7a:49:d5:55:61:82:9e:28:2b:c9:
         50:8c:34:28:a0:56:de:a3:3f:8b:71:6d:dc:4d:87:70:ab:47:
         b6:6f:81:3a:35:78:25:a8:12:5f:9b:eb:2b:ef:02:48:09:75:
         41:24:e0:23:c9:f8:67:af:0e:9e:6c:48:9c:94:bb:6d:ec:a9:
         af:86:d6:7f:af:6d:8a:81:9b:a3:85:a6:b9:a8:5e:02:72:bb:
         0d:50:9a:d0:26:3b:11:b9:20:89:cf:94:16:18:4e:f6:ce:03:
         99:6d:64:5d:7e:48:f6:ca:7e:b7:a1:2c:bd:5d:40:b3:a5:b2:
         7a:43:02:0b:39:ac:21:22:b1:65:19:3b:4c:0d:1e:95:64:b3:
         55:53:7e:42:fd:0d:f2:96:c5:ee:74:5f:50:13:8d:ce:c9:3c:
         9d:6f:4a:e4:1e:f6:3f:b0:fe:ee:3b:4c:94:cd:be:79:35:dc:
         4f:8c:e3:c2:85:2c:6e:3d:42:2b:54:8c:4a:55:ce:47:6f:6a:
         8c:9e:1c:b7:8e:1c:f3:0e:c5:b7:16:81:ea:d8:41:12:ad:cd:
         af:fc:15:19:75:ee:b8:bd:dd:6d:e4:41:5b:d8:50:68:19:8f:
         ce:09:88:a5:1b:1b:9a:36:b5:36:94:3d:58:ab:71:5a:78:74:
         9e:49:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:39:33 2025 by rpki-client