Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
File:                     YCmqMiQ3H_80BW6mdrX5npQG208.mft (raw, json)
Hash identifier:          kT7sBjZPBLRFxj0RGqOdvUUYrptxF0Vm6SnkL4y6RRY=
Subject key identifier:   B5:DE:D9:12:6F:22:C3:E1:60:1B:15:37:BF:D7:F1:D0:D9:33:3C:C8
Authority key identifier: 60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
Certificate issuer:       /CN=F362BDD7AF/serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Certificate serial:       F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
Manifest number:          F7
Signing time:             Wed 04 Jun 2025 04:57:18 +0000
Manifest this update:     Wed 04 Jun 2025 04:57:17 +0000
Manifest next update:     Fri 06 Jun 2025 04:57:17 +0000
Files and hashes:         1: YCmqMiQ3H_80BW6mdrX5npQG208.crl (hash: n0amXzPRb2Ugwa5XOWwxHUcleO1sv7HroPk1ANCS1fo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AF, serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
        Validity
            Not Before: Jun  4 04:57:17 2025 GMT
            Not After : Jun  6 04:57:17 2025 GMT
        Subject: CN=683fd22e-cc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:c1:50:c6:bb:79:79:14:a0:f9:a1:a0:8e:
                    a7:f1:66:d5:92:79:58:b6:16:38:0e:9c:bd:0e:ac:
                    e1:bd:17:2a:26:35:c4:0e:a9:05:d1:02:e1:27:cf:
                    17:ae:02:b8:68:e5:01:df:3a:cd:f8:89:f8:88:e0:
                    94:e8:c7:4a:60:18:9d:8e:50:6a:e9:bd:35:4d:3c:
                    2f:b4:91:86:05:c2:8e:46:17:0b:78:e9:55:0d:76:
                    02:87:4c:ba:39:5d:18:7c:b7:b4:b5:63:8d:f1:60:
                    57:ce:a6:3f:2b:f3:38:d6:8e:a2:92:1c:8c:24:1f:
                    ef:d8:6a:5b:b7:b9:24:a8:67:ad:50:82:ae:5b:8e:
                    47:99:ff:be:b8:8d:f9:4a:da:ab:ba:92:44:fd:cc:
                    9f:4a:a7:42:56:73:cb:20:ce:27:8e:aa:16:98:6a:
                    3e:02:d6:a3:0a:b1:c3:68:81:5a:fc:a7:36:2e:43:
                    be:4c:c9:59:49:c8:45:a5:1f:67:e6:53:48:2f:03:
                    c8:0c:62:e3:05:bd:0d:70:8b:7c:12:41:61:5b:db:
                    59:05:fb:c7:a0:c5:ab:b5:b0:69:5e:0b:ed:38:13:
                    e3:d1:e5:68:dd:f1:f3:65:9c:df:31:40:85:d5:ac:
                    28:a9:e6:90:45:34:5e:87:51:9c:7e:27:d2:dc:43:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:D9:12:6F:22:C3:E1:60:1B:15:37:BF:D7:F1:D0:D9:33:3C:C8
            X509v3 Authority Key Identifier:
                keyid:60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:57:75:54:11:6d:f2:84:eb:a5:5c:4b:7e:0a:cc:24:a9:
         73:3a:83:66:e9:e2:85:89:97:94:99:25:33:72:75:4a:29:ea:
         31:cb:01:b1:09:36:49:45:0d:8a:c8:8e:ae:95:0b:1e:77:aa:
         1a:10:d0:6c:a4:21:17:12:de:a2:c0:63:d7:35:65:1f:56:96:
         21:d9:db:ae:20:bd:4c:1d:32:eb:50:f5:96:b2:e1:ed:ba:26:
         ff:06:0c:e7:db:df:60:c2:f2:36:59:fe:8f:95:6c:66:5a:3a:
         50:d8:ed:6d:14:68:75:86:d1:f2:96:2b:8c:8d:e3:5d:c0:c7:
         7d:a1:a0:00:6b:a2:ce:6f:aa:f1:8a:29:44:fd:80:03:7c:3e:
         a9:8c:95:61:3a:e4:a2:54:e1:01:90:cc:ec:db:39:71:5c:49:
         9f:21:98:bc:2b:b1:53:0c:50:ea:5b:18:d4:9c:c3:3b:21:e9:
         4d:7f:d7:cf:2c:2e:65:c8:e3:89:2c:bb:c5:9d:fb:be:13:8a:
         bf:11:a4:23:42:01:1b:db:5b:92:60:8f:40:d4:d3:40:e9:3b:
         f9:4f:a8:7b:f0:01:a6:96:40:98:0c:b1:eb:d0:64:34:4a:25:
         91:e6:ef:d9:04:e4:96:1d:20:1c:09:5e:b9:6b:22:89:b5:44:
         70:11:0e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:44:54 2025 by rpki-client