Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          XKcUMZs8K6BwoW/BHaqr9ooGqqbYLDwdodDklTsSbB4=
Subject key identifier:   F1:10:46:72:47:40:F7:45:40:1B:F1:93:7A:22:D9:89:E9:C6:88:52
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       FC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          FB
Signing time:             Mon 09 Jun 2025 05:01:00 +0000
Manifest this update:     Mon 09 Jun 2025 05:00:59 +0000
Manifest next update:     Wed 11 Jun 2025 05:00:59 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: CErlIZyLvUlkQwzh0UoFePXd5zB/2W/a5OYUocvxgVs=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Jun 2025 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Jun  9 05:00:59 2025 GMT
            Not After : Jun 11 05:00:59 2025 GMT
        Subject: CN=68466a8c-4f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:56:75:51:76:4b:37:36:78:8c:db:99:9b:
                    0d:72:72:a1:c3:20:8e:04:01:39:d5:5d:c5:a7:52:
                    bd:3b:5e:75:67:30:a8:76:f3:60:ff:0f:26:b4:db:
                    46:d0:db:74:3c:11:2c:ed:bc:11:ef:8d:7d:77:c8:
                    77:e1:3c:a6:53:cf:91:27:f1:aa:83:a6:2b:25:d1:
                    ad:3e:fd:0a:77:83:eb:fd:34:20:00:71:81:91:d0:
                    2b:d8:3c:2b:40:59:5a:51:4c:c7:57:db:81:43:ea:
                    7d:52:f4:d6:3c:be:ab:28:6b:9d:f7:21:de:ba:2e:
                    b3:2f:1c:d5:a7:41:0e:81:69:29:4b:8a:26:12:b3:
                    86:d3:ce:ec:f4:7b:b7:b6:bd:9d:e2:ee:83:35:3d:
                    35:1f:cd:bb:4e:f5:05:8b:8f:5a:c4:6f:0d:ae:b3:
                    c9:29:aa:55:49:fe:05:93:e1:48:60:a6:d1:10:bf:
                    64:2b:83:fa:84:eb:ab:e4:c1:24:8a:8e:e4:1d:90:
                    03:c0:55:2f:88:ab:16:0a:fa:de:4a:b5:7d:14:42:
                    5c:13:b5:a3:8c:d5:c3:ef:62:ec:fb:7a:1c:e1:b7:
                    1f:37:40:44:03:7d:42:b9:cf:09:7f:9a:fe:f1:af:
                    ad:8a:52:f6:85:01:f0:bf:c5:36:21:fd:70:e2:b4:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:10:46:72:47:40:F7:45:40:1B:F1:93:7A:22:D9:89:E9:C6:88:52
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:89:b8:8d:28:f6:fc:7c:53:3a:19:a8:ce:84:da:db:03:98:
         c7:51:f7:81:6a:92:76:d3:96:b3:49:80:9d:c4:80:be:73:1f:
         5f:29:c6:25:a5:2a:3c:e0:f0:4f:58:6b:07:e1:e5:90:54:35:
         29:be:9c:3f:37:98:b9:ad:97:41:b3:75:97:47:7c:88:3c:f1:
         63:d7:6c:79:41:dd:fe:0e:91:52:f3:19:07:7f:94:cd:08:01:
         08:0a:8c:c0:71:b1:e2:96:5e:df:23:e8:69:35:a4:64:ca:95:
         f9:8a:8d:a1:e7:00:1e:5a:5b:d7:3e:59:56:d8:31:7b:56:24:
         9b:e6:d5:4a:74:ce:89:02:c3:64:de:96:e4:ad:3c:92:09:af:
         af:de:38:ca:c6:c3:f5:f0:d1:4d:a5:67:c8:c2:8e:ad:26:9c:
         52:09:f5:cd:a4:fd:20:66:1b:e2:cf:e7:f6:a2:cb:63:8c:f9:
         49:86:01:16:c1:e6:2d:ab:f3:03:f1:f5:6c:c3:09:d5:67:d4:
         03:22:e0:4e:8b:74:97:04:35:9e:f6:31:34:be:fc:e2:1b:98:
         89:90:b0:49:1f:a8:03:dd:9a:66:5d:5f:39:fa:4f:10:19:0b:
         07:ea:c3:fb:50:99:f0:0d:bd:9e:90:75:7c:1c:5d:b5:11:66:
         41:5f:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:37:08 2025 by rpki-client