Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          103qV4qnBWq/g4NhT3eY3AjaS8LCoGGnT4YtSsYad7M=
Subject key identifier:   36:A1:C9:24:7C:67:33:3A:76:57:33:6B:EE:02:3A:F9:0F:EA:E2:31
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       084C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          0847
Signing time:             Sun 27 Jul 2025 01:47:29 +0000
Manifest this update:     Sun 27 Jul 2025 01:47:28 +0000
Manifest next update:     Tue 29 Jul 2025 01:47:28 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: +r1q1Un4O2wySvlmN0cJ9bO3ab+J3mCBXL5yT3oIC3M=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Jul 27 01:47:28 2025 GMT
            Not After : Jul 29 01:47:28 2025 GMT
        Subject: CN=68858531-3079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:8a:79:7f:36:fe:cf:74:69:eb:9f:87:9c:
                    a8:c7:c5:07:a6:54:85:a8:74:ab:82:3e:7e:44:44:
                    3e:be:c7:3a:d5:02:bb:ea:f2:ac:ba:68:47:d4:bb:
                    ff:c6:e9:2c:ca:40:e5:49:2d:ce:57:d9:d8:62:a3:
                    22:fd:b2:b8:b9:3e:ca:0c:6f:55:0f:4f:bb:16:ec:
                    f4:18:8a:70:2f:f1:a1:13:89:8e:14:6f:ae:d3:d5:
                    c7:61:1a:30:0b:c7:89:f0:3d:fe:4d:58:89:59:38:
                    e7:b1:9a:d5:5b:e7:28:7a:ff:a2:27:29:d4:c4:45:
                    fc:de:cc:0f:b2:4f:0a:3a:40:36:c7:49:f4:ed:51:
                    fd:16:8c:09:a9:01:04:07:11:12:54:11:09:78:81:
                    1c:0c:db:b4:16:5d:a3:6b:48:80:a9:5e:8c:40:61:
                    4c:fd:18:53:f1:17:23:ab:32:40:2b:26:d3:2d:97:
                    1b:13:0c:50:e1:10:01:f3:09:d2:f8:4e:11:65:9b:
                    d0:17:1a:66:b9:47:af:6f:2d:c4:7a:a5:95:a2:82:
                    49:1a:e1:fb:fc:d9:6a:3b:64:49:12:99:56:ed:61:
                    51:81:b2:db:27:26:01:40:f1:58:88:46:14:ee:48:
                    4e:92:c4:eb:d0:5d:c1:bb:29:25:2b:0d:94:96:c9:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:C9:24:7C:67:33:3A:76:57:33:6B:EE:02:3A:F9:0F:EA:E2:31
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:50:e9:e2:e6:31:23:72:f6:97:f8:42:b6:6a:e0:b1:6a:d3:
         e1:40:1f:cc:f2:9e:77:e0:1f:ca:21:07:54:82:8d:3a:47:1f:
         8f:d4:92:7c:ec:d8:db:f5:5c:aa:37:e2:7a:cf:bc:ba:08:4e:
         39:a3:37:2e:28:3e:85:2c:d7:ae:ed:95:2d:8a:ec:1a:7b:a9:
         97:d9:de:b0:80:8a:48:32:e2:67:c7:fc:95:01:f1:6e:3c:9c:
         bb:99:2b:84:91:96:88:a3:b0:90:48:4e:07:00:6f:7c:94:7d:
         4a:bf:79:22:e5:70:ad:71:b6:5f:84:98:94:cf:1a:69:a2:d0:
         fb:03:10:ab:46:71:da:1d:38:ab:2d:ef:a2:5f:5f:a0:5b:46:
         3d:92:7d:0d:78:da:58:a0:bf:13:20:ab:e8:2f:48:83:9c:2f:
         22:88:0b:de:ff:de:90:93:2c:53:9b:7b:38:23:7c:9d:41:f9:
         29:b5:aa:f6:18:cb:04:36:7a:35:59:a1:82:eb:3c:f5:f5:3a:
         54:11:62:d3:1a:1e:d9:12:e4:2a:7f:b1:89:96:3f:58:5a:36:
         9c:5c:ee:d6:2e:6a:b5:7c:92:a5:a9:1c:4c:9a:c1:88:85:12:
         78:55:1e:75:aa:62:e7:63:90:63:b9:67:09:25:7f:e0:5b:f1:
         cc:1f:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:48:46 2025 by rpki-client