Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
File:                     W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft (raw, json)
Hash identifier:          rOR4wxNZrJprjlVz7vNiolPw+GWyRcZcb/v6vqU9QN8=
Subject key identifier:   8E:37:A9:8A:AD:8E:7A:E2:42:B5:35:BE:A1:CD:F7:0E:3F:5C:77:F7
Authority key identifier: 5B:F8:D4:B0:B5:1C:5A:82:7C:E1:00:27:5F:09:B3:DA:A1:96:3E:64
Certificate issuer:       /CN=F3659308AF/serialNumber=5BF8D4B0B51C5A827CE100275F09B3DAA1963E64
Certificate serial:       05BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
Manifest number:          05B9
Signing time:             Thu 03 Apr 2025 01:39:59 +0000
Manifest this update:     Thu 03 Apr 2025 01:39:58 +0000
Manifest next update:     Sat 05 Apr 2025 01:39:58 +0000
Files and hashes:         1: W_jUsLUcWoJ84QAnXwmz2qGWPmQ.crl (hash: cqjulEsxy5YKcS+oa98ukWAjUnTUH2ww9ICH15MXzLY=)
                          2: 8CC62B08B87E11EBAF9A7E6AF8AEA228.roa (hash: 92mRoDJb/uCNie5wFmUGwLfKgji5VHv1+cWi4LYckXc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659308AF
        Validity
            Not Before: Apr  3 01:39:58 2025 GMT
            Not After : Apr  5 01:39:58 2025 GMT
        Subject: CN=67ede6ef-8eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:77:b9:36:54:ed:3f:c7:a3:65:3c:5b:ad:d5:
                    61:45:8e:0b:3f:c8:85:4c:46:4d:c7:2f:7f:4b:7a:
                    e8:cb:51:fa:74:83:51:d8:0a:cb:f8:ab:a8:01:52:
                    b8:41:00:91:3a:81:3e:15:f1:58:6f:89:80:1d:79:
                    83:13:01:ef:78:da:42:c1:af:c5:69:40:e8:13:8b:
                    17:3f:ce:57:72:66:ef:0e:3c:43:9c:c9:f6:8b:0c:
                    c5:cb:d6:2b:76:65:08:f1:b1:f2:74:77:9a:60:de:
                    21:e9:1c:57:b0:56:a6:a0:95:6b:85:ac:3b:ef:b8:
                    7d:d7:59:6d:44:55:f9:36:4d:48:94:67:56:d2:0f:
                    f0:20:b6:53:67:d1:32:a9:4f:78:80:6a:0b:b4:60:
                    1f:10:77:e5:df:7f:76:d4:db:ff:ab:3b:2f:b2:0c:
                    48:3d:d3:66:95:9b:ae:9e:6c:e4:a8:b0:49:aa:f9:
                    2a:17:99:7d:8e:e0:62:37:53:03:98:21:22:f6:e6:
                    36:a4:5a:9a:1a:71:43:5e:29:f9:42:e2:51:b0:a4:
                    fa:b8:8c:c1:07:80:d1:c9:b2:e5:e7:2b:f4:5a:a7:
                    35:0b:5c:d6:0a:3c:30:3a:a3:ae:7d:28:12:0c:10:
                    6a:50:b7:f6:df:b3:a0:72:af:9d:61:25:a6:b8:49:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:37:A9:8A:AD:8E:7A:E2:42:B5:35:BE:A1:CD:F7:0E:3F:5C:77:F7
            X509v3 Authority Key Identifier:
                keyid:5B:F8:D4:B0:B5:1C:5A:82:7C:E1:00:27:5F:09:B3:DA:A1:96:3E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cf:e0:fe:e9:6c:fb:77:2d:9e:9c:a8:f2:a3:6b:fe:ab:c5:
         ed:cc:f3:a5:dd:d7:9c:4c:a3:d4:4a:30:27:02:65:27:03:99:
         96:1e:12:23:9d:5f:23:a8:e2:24:3a:29:48:0b:0a:db:f0:ef:
         1f:59:8f:33:8a:a8:e4:43:c9:63:0e:5b:2f:0c:ea:76:03:34:
         2b:a6:1a:f5:80:d9:92:89:40:31:67:c3:b1:15:9e:8d:27:58:
         f4:25:91:38:3c:1c:5e:57:f8:38:e6:b9:d0:0f:2c:d9:8c:98:
         1f:d4:34:92:6c:ae:7f:b2:85:c6:31:c1:46:bb:51:d6:8e:8d:
         33:0f:86:c3:0e:5b:d4:42:33:5a:85:21:fb:a8:35:96:7a:95:
         ff:69:cb:25:5c:17:65:14:fd:ba:a5:c6:9c:fa:a9:9a:23:7a:
         5e:55:ef:82:20:de:a3:ec:c2:5d:fe:f5:4a:ba:cb:62:35:ec:
         b0:bd:f0:74:74:f5:4e:04:c6:10:60:13:8b:8f:fa:43:37:02:
         2d:ed:28:e5:50:2d:01:b3:a9:9f:5f:7c:ef:0d:5b:58:63:08:
         74:d8:ee:d3:9d:af:70:62:c0:2e:00:95:a9:fe:0c:ea:fc:9d:
         3b:9f:a2:ec:93:1b:95:3e:91:1c:ac:65:3c:e9:3a:a7:32:4a:
         11:cd:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:51:22 2025 by rpki-client