Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          4IZc4O5Aw1eqvJzMvIE7yG9T2dDB8SMFqoJ2Tm5VI0M=
Subject key identifier:   83:3A:5B:AE:26:34:FB:F4:CC:0F:FD:AD:9E:AE:C9:10:17:7F:AD:6E
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       0627
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          0624
Signing time:             Wed 04 Jun 2025 02:12:03 +0000
Manifest this update:     Wed 04 Jun 2025 02:12:02 +0000
Manifest next update:     Fri 06 Jun 2025 02:12:02 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: cPBAIxkqrfJAQ6MDfhHcirIfhbgFuxoMw2e6aXFOXKQ=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Jun  4 02:12:02 2025 GMT
            Not After : Jun  6 02:12:02 2025 GMT
        Subject: CN=683fab73-786b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:10:05:13:51:93:e4:c2:0b:1f:e4:b1:48:
                    c8:b5:90:c9:df:27:17:c0:12:e9:80:41:25:ec:19:
                    c7:73:2a:7a:ef:1f:ec:3f:4c:7f:34:d7:42:03:ce:
                    20:88:98:ce:fa:e5:74:5f:5f:f7:5b:39:55:88:de:
                    9b:b0:68:0e:12:b8:54:e9:ef:26:05:1d:e6:73:ac:
                    5c:23:2e:32:db:04:f5:43:41:68:81:c8:90:ea:5e:
                    b6:58:92:7a:04:bb:30:1b:c7:b0:58:aa:19:7e:8e:
                    34:c5:2d:cd:bd:fc:d9:c0:59:0c:14:94:4f:09:69:
                    bf:a1:5d:e9:2c:e2:21:b8:47:e0:79:4c:8e:1a:98:
                    c4:e1:b0:ae:07:1a:bc:b4:10:4a:57:36:b8:f6:49:
                    8c:59:ce:74:4e:51:34:ed:11:c8:37:c6:c6:83:fa:
                    55:ee:87:e9:a7:87:a6:80:31:00:f0:bd:16:0f:5e:
                    2b:61:80:e3:c9:9f:ba:45:1f:cb:1f:13:e1:92:91:
                    70:74:53:20:06:90:c2:8e:3c:42:8f:e3:d2:9f:83:
                    30:34:a0:71:2d:ce:1f:dc:9d:db:4c:62:08:a1:09:
                    e2:f4:03:e7:ff:ba:89:73:6e:18:5b:a0:dc:db:05:
                    0a:05:b0:08:0c:53:d0:69:a4:b9:55:95:67:ca:e3:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:5B:AE:26:34:FB:F4:CC:0F:FD:AD:9E:AE:C9:10:17:7F:AD:6E
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4c:5c:e5:ea:08:ec:4b:72:b5:59:ca:a2:8b:70:c7:91:01:
         c7:07:6d:c8:81:62:26:98:cc:f3:27:a5:bf:a4:d5:4d:43:59:
         02:16:15:96:4e:e6:b3:bf:9b:6a:71:1f:06:f6:18:0f:61:b9:
         73:a6:1e:04:f2:f0:e3:de:91:b8:b2:82:b3:18:d7:d7:15:fa:
         d4:8a:51:98:43:e7:d9:22:89:5e:9f:76:fd:2b:aa:8c:83:79:
         a9:83:25:fd:e7:4b:c1:cd:f5:63:1a:2c:68:fc:dc:26:fb:b6:
         8a:83:d0:0d:b8:76:fa:57:3d:f9:c1:d1:ab:c5:10:2b:47:cb:
         cb:08:08:5b:4d:9c:69:2a:91:e7:60:fa:56:50:3f:1f:01:ed:
         02:db:76:67:0e:5c:68:ef:52:53:c9:88:b1:32:72:b0:a9:3a:
         7d:9c:76:d6:f4:69:90:55:e5:ef:2a:ec:86:00:0f:a0:bc:a3:
         fd:6c:0e:73:00:ad:66:cf:f3:43:47:a4:59:65:18:ff:fd:9b:
         a3:69:ef:e5:66:8c:ef:d5:dd:be:8d:8a:15:fd:a4:21:16:22:
         63:75:a8:b5:7d:a2:28:3b:de:ba:6c:07:5e:89:ff:b6:c7:10:
         7f:42:80:96:01:d6:f1:cb:21:aa:42:49:51:75:48:24:09:45:
         9f:e0:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:02:55 2025 by rpki-client