Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          dAVhoVlx0egPxqJJ4kT92nleJF7AfUGhqrPJ6QrsTdk=
Subject key identifier:   50:37:4B:37:ED:56:7C:09:CB:83:CF:BC:1D:1C:FB:25:FE:BB:CC:37
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       FF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          FE
Signing time:             Thu 12 Jun 2025 05:00:19 +0000
Manifest this update:     Thu 12 Jun 2025 05:00:18 +0000
Manifest next update:     Sat 14 Jun 2025 05:00:18 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: qIdcCTbuZWbx7lrLnAaBClaXrCMg0u0hzeBqIROndEE=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Jun 2025 00:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Jun 12 05:00:18 2025 GMT
            Not After : Jun 14 05:00:18 2025 GMT
        Subject: CN=684a5ee3-00fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:3a:b8:76:82:cc:e1:da:09:89:02:9f:35:
                    d5:a2:71:a8:d5:ae:a2:db:fb:30:d8:9e:af:64:af:
                    a1:b9:a9:c6:ff:ae:45:c2:6c:ea:2e:8b:d3:da:77:
                    87:ee:10:57:10:4c:60:71:35:d8:86:41:28:4d:85:
                    91:29:c1:49:8e:5c:ed:51:7c:86:0e:d4:74:ca:f6:
                    e9:9f:5b:1e:2b:95:79:5d:ef:ae:57:74:de:63:30:
                    4c:49:10:e5:08:75:8c:ad:8b:04:5f:9d:0a:89:f5:
                    02:a0:85:27:5c:97:03:7b:c4:13:d4:b1:92:67:57:
                    4f:fe:4d:43:68:69:23:eb:05:36:e1:20:a4:eb:26:
                    54:20:8c:bd:b2:62:be:56:1c:6d:3a:d5:cc:8a:e0:
                    3c:f6:26:ac:5e:df:33:3a:e0:70:25:c8:2f:0f:7d:
                    72:5b:7f:9e:fb:68:28:ff:af:bb:fa:91:f7:ae:05:
                    c6:71:b4:e3:8e:0f:1d:75:9d:fd:16:3c:0e:9f:c9:
                    88:95:e1:ff:e2:29:be:eb:50:f8:52:96:a9:1b:89:
                    9d:7a:63:d7:bd:85:5f:9b:ac:de:52:df:e4:cf:4c:
                    a6:ae:ae:f7:46:2e:78:b7:5e:7d:88:72:43:82:3c:
                    e8:69:6c:52:0f:20:bc:ed:6c:08:01:34:f8:23:c3:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:4B:37:ED:56:7C:09:CB:83:CF:BC:1D:1C:FB:25:FE:BB:CC:37
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:7a:4a:ed:5e:4f:5b:7a:e9:40:f9:70:fc:1f:9e:41:c5:
         2d:f4:a0:2e:72:6a:50:50:fd:2a:6c:3d:af:7e:71:b9:69:1b:
         c5:38:27:0b:5a:3e:1f:95:89:95:c3:39:30:ad:95:90:5a:ec:
         59:32:bf:a0:2a:cb:f5:0f:90:10:bf:14:bc:fa:27:25:d2:dd:
         68:23:33:56:58:c4:59:2b:09:11:1b:8d:ca:4c:97:30:c4:fb:
         49:28:10:3b:8a:22:7c:a1:ac:30:f4:c4:0a:9a:b1:d2:d6:f8:
         49:72:24:e7:b6:70:13:74:42:ad:5c:01:52:63:71:be:84:63:
         e3:65:9a:7f:48:df:fb:f3:d8:89:4a:da:ef:18:64:56:97:39:
         02:12:a5:10:89:85:0e:9d:66:94:9e:26:31:f7:5d:f4:f9:b5:
         2f:b0:e6:73:05:b6:1c:d8:fd:f5:6e:f6:12:de:f4:b1:ba:e5:
         02:f5:7b:a1:78:93:28:b1:97:35:59:15:3b:be:28:6f:76:44:
         6a:cb:29:77:dd:d3:53:37:ee:bc:2a:fb:36:20:6f:98:26:06:
         b1:e6:b2:1d:bd:b4:5c:09:91:ea:04:65:00:4a:ec:f8:1c:aa:
         cc:86:63:c0:7f:74:49:1c:8d:ce:d0:a3:b5:13:d7:9d:7a:7c:
         c0:26:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:59:15 2025 by rpki-client