Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
File:                     mEs08lM_l20v8hGUKFlsTLCoNJQ.mft (raw, json)
Hash identifier:          U+dNekTIppY1cx0Ky8Wf5XP1WS3+dyu+2JK7y5tABzo=
Subject key identifier:   5A:29:D7:84:8E:86:44:7D:DB:AD:3E:7B:86:A2:93:4D:EC:36:1E:61
Authority key identifier: 98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94
Certificate issuer:       /CN=F363E7DEAF/serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
Certificate serial:       018E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
Manifest number:          018D
Signing time:             Sun 27 Jul 2025 04:42:05 +0000
Manifest this update:     Sun 27 Jul 2025 04:42:04 +0000
Manifest next update:     Tue 29 Jul 2025 04:42:04 +0000
Files and hashes:         1: mEs08lM_l20v8hGUKFlsTLCoNJQ.crl (hash: dy94nc8og6SL/Nk7GFVjcjtOFbgenZhybqwLBmj1T+c=)
                          2: D26968643D1911EF839BE3A0762E951A.roa (hash: J0djfjB+ImP9O4b/Y0DGlGrugUtQ+yVNNLjhpRXf1yA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E7DEAF, serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
        Validity
            Not Before: Jul 27 04:42:04 2025 GMT
            Not After : Jul 29 04:42:04 2025 GMT
        Subject: CN=6885ae1d-52bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:47:84:e9:30:d8:e6:ac:2e:bb:35:4d:57:
                    b3:8e:9b:89:a7:79:10:74:7d:fa:3e:9f:d2:cb:5e:
                    9b:88:dc:6e:f8:87:3e:10:57:eb:16:38:d1:25:87:
                    fd:66:bf:24:6e:9b:c1:85:2a:23:61:67:8a:e9:05:
                    83:12:a4:22:2c:c6:9a:a7:98:2d:2c:c3:2d:ce:8a:
                    77:1b:2f:e7:12:48:ab:20:d9:21:b0:8c:be:b1:03:
                    0e:fd:80:94:40:4f:41:a1:2a:2f:08:56:0e:cb:cd:
                    fe:0b:48:d1:5b:5b:a4:23:e4:d5:06:f7:8c:8f:77:
                    74:ce:7e:cd:8c:f1:e0:c0:48:00:94:12:eb:8f:01:
                    4a:0a:56:d2:7f:0f:ec:ff:d6:45:50:12:09:16:f4:
                    86:82:5d:cd:41:3f:33:ee:14:b1:8b:e0:df:f1:80:
                    2f:70:90:75:b7:11:b8:69:51:9b:5e:72:45:b6:4c:
                    1a:ef:1d:ab:2c:f2:20:0a:16:10:6c:c1:83:53:df:
                    be:f5:d3:8f:2c:39:9d:80:29:3f:db:de:7b:74:67:
                    35:39:a7:e0:99:45:32:42:e7:40:a3:d5:fc:b7:60:
                    53:c2:24:43:b4:0f:de:be:34:34:d8:83:b3:8e:3c:
                    f7:26:07:8d:7e:a1:b5:ba:4c:24:8d:17:df:a9:5e:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:29:D7:84:8E:86:44:7D:DB:AD:3E:7B:86:A2:93:4D:EC:36:1E:61
            X509v3 Authority Key Identifier:
                keyid:98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:f0:d8:6b:1f:91:92:2f:b6:da:81:5a:54:2b:fb:98:0b:
         e7:9e:6d:2a:59:ad:6f:d2:87:8c:bc:7b:a9:6e:17:6b:62:62:
         25:fb:9f:dd:27:0f:fc:8e:ef:6a:52:62:a2:cd:1c:e5:44:19:
         de:f3:f9:a1:7a:ad:64:8b:5f:50:53:0e:68:a6:4c:d3:47:4d:
         45:8b:72:ec:35:72:dc:5f:29:25:c1:73:48:66:d5:d1:d1:0f:
         bc:28:b9:9e:16:e3:b3:20:95:51:ac:8b:b5:9c:89:32:da:37:
         e4:c2:02:5f:62:da:36:4e:f3:c1:a8:65:04:6a:0f:57:bc:82:
         87:58:28:92:a0:a6:d4:25:22:de:9d:ce:72:fa:8e:e6:81:c9:
         cd:b9:2a:8e:7d:ab:d9:7e:7b:a2:6c:c5:9a:2c:cc:4f:bf:ed:
         c3:96:af:5f:e7:d4:af:7b:0c:13:4d:06:73:9e:71:08:ad:b3:
         05:fa:6c:c2:20:ba:41:41:82:b7:a5:97:b1:ba:43:c5:0e:59:
         38:3d:eb:84:38:60:1b:0f:d7:6c:e1:45:28:0a:d4:4b:03:15:
         71:e2:4b:4e:33:06:ca:71:d5:03:45:46:9c:5d:0e:68:1d:09:
         36:dc:a7:98:1b:c3:f2:2f:40:bd:f9:67:fc:69:73:17:63:d3:
         be:4c:1d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:22 2025 by rpki-client