Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          WdUXxLKkVJIwp3hoEK7mNZDoYfv3m1KV3wb5dBp7vQM=
Subject key identifier:   66:F7:EF:CD:9D:FD:25:7D:C5:CA:42:13:37:D0:D6:A4:F3:99:1E:FC
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       0142
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          0142
Signing time:             Sun 08 Jun 2025 04:42:49 +0000
Manifest this update:     Sun 08 Jun 2025 04:42:48 +0000
Manifest next update:     Tue 10 Jun 2025 04:42:48 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: hpoP7BvBhpQkN4Y4AOGGtHTcftGOvsuu+XbmNjQj8JE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Jun  8 04:42:48 2025 GMT
            Not After : Jun 10 04:42:48 2025 GMT
        Subject: CN=684514c9-dbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:19:3b:cc:7d:b4:9f:f9:60:c6:b9:8b:4a:
                    ce:d9:41:78:b9:dc:51:29:56:58:d0:08:11:8f:32:
                    21:e6:db:50:42:e9:ee:23:d9:20:77:5a:d5:e1:83:
                    6f:f6:81:fc:c7:f3:52:bf:87:5a:ca:c8:1c:0f:cf:
                    8c:22:89:bc:41:24:1a:17:f3:36:e2:11:8f:87:f1:
                    d6:25:af:21:b3:b6:53:36:0e:da:e0:ca:ce:ee:14:
                    1f:ed:ee:5f:cc:a4:ca:12:50:74:05:6e:32:d1:d8:
                    03:16:e1:1b:cd:0b:2c:9d:85:6d:1e:0c:d6:ff:d0:
                    a4:c0:80:01:2e:f9:59:54:ad:3e:42:2e:ec:67:bb:
                    32:d0:9a:2a:08:8d:b0:cb:fe:3f:e2:0d:bf:84:4f:
                    6b:a4:79:66:23:a8:7d:33:2f:bf:54:d3:ba:dd:69:
                    7a:28:32:0b:07:52:58:43:b2:a9:3b:54:a7:3c:29:
                    93:01:5f:06:e3:41:0d:c0:ec:28:e6:84:21:18:3a:
                    07:f6:57:96:ef:7e:09:fb:7a:fe:98:80:d2:82:7b:
                    a3:c7:02:be:ca:3b:f1:c6:31:e1:89:04:87:60:0d:
                    f7:09:55:2e:85:1e:18:2d:3d:3d:b9:5a:e4:e2:92:
                    0f:8c:f1:2f:a3:b5:2e:fe:70:92:83:c5:20:41:38:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F7:EF:CD:9D:FD:25:7D:C5:CA:42:13:37:D0:D6:A4:F3:99:1E:FC
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:38:08:6b:a7:e8:43:e2:01:c6:08:1b:b8:ea:d1:1c:a2:6a:
         1f:24:2b:51:7d:a2:37:42:40:f9:4f:a9:4e:85:65:95:28:4e:
         21:94:ac:9e:ca:45:fd:48:e7:0d:e7:62:94:31:c9:fb:ee:91:
         e7:13:a2:11:16:30:ee:3c:ab:d7:a9:7e:62:58:10:7a:8d:af:
         70:d2:54:0e:6f:29:8e:2f:ae:7e:04:71:dd:c7:13:6e:96:ef:
         a1:0e:b1:23:00:4f:df:e1:37:4b:7a:89:f6:ea:d5:ba:f7:d6:
         2e:13:41:3a:12:61:dd:3b:b5:9c:54:38:74:01:10:1f:d3:20:
         b0:6d:9e:43:e0:00:32:f9:3d:b9:45:9e:61:38:75:5c:60:b9:
         1a:b3:2d:9f:dd:41:5e:95:4a:62:fd:90:e8:d3:2a:f7:eb:54:
         d0:30:d9:e6:7a:3f:65:c5:3c:ef:5a:82:67:cb:d7:33:32:4f:
         d8:d7:fc:38:4b:d0:dc:59:0b:f8:b4:68:e2:19:62:9f:5e:11:
         a5:14:e1:5a:48:66:00:85:3f:d5:0d:c1:36:11:65:1e:78:17:
         9a:9e:9f:92:9b:30:25:1e:a2:5c:b4:c6:ab:e1:7a:87:a4:e7:
         e8:54:c2:80:ed:69:9e:1a:96:d0:45:0d:42:84:cd:33:a3:4f:
         b0:5d:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:49:36 2025 by rpki-client