Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          o3hHEZFofXijzxzibAxm4E37ejxa9gJ+f2dJI/+KpV4=
Subject key identifier:   A6:B6:B3:38:CF:63:20:D6:27:55:E8:16:2D:D0:2F:CB:FC:4C:1E:33
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       0345
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          0345
Signing time:             Wed 11 Jun 2025 03:35:37 +0000
Manifest this update:     Wed 11 Jun 2025 03:35:37 +0000
Manifest next update:     Fri 13 Jun 2025 03:35:37 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: 8ALxrM08X1V9F55XfjU8w9CDfcjwLfgPLX9KN6EUHwA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 13 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Jun 11 03:35:37 2025 GMT
            Not After : Jun 13 03:35:37 2025 GMT
        Subject: CN=6848f989-76de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:7d:cc:21:24:e8:49:2a:ed:08:5b:dc:ec:
                    56:26:4a:81:e9:70:24:2e:b9:f2:e9:64:38:69:ba:
                    e2:c7:6f:00:b2:76:51:1d:24:08:bb:a4:d6:ef:61:
                    f7:c2:d5:2e:0d:a0:2d:80:9b:f6:72:d3:13:00:c4:
                    88:f7:85:31:cf:4e:ee:4e:bc:10:f1:19:e1:c1:77:
                    d2:0a:84:8c:a4:09:30:77:9e:43:ed:56:2a:27:d1:
                    e1:69:91:c6:eb:d3:3e:33:99:03:34:68:6b:37:06:
                    f9:49:80:cc:b1:12:4c:ca:d0:eb:9b:64:58:7d:32:
                    af:1d:ea:fd:dd:72:c2:76:0f:81:92:89:8a:ec:dc:
                    7d:92:35:82:27:42:b3:a2:00:a1:68:2c:d0:80:bc:
                    b3:2f:61:2a:97:cf:03:6f:60:99:3a:b3:36:d4:09:
                    8a:d6:60:d4:48:70:c7:37:7b:2b:b8:5a:71:ba:c7:
                    a7:80:ac:9b:08:5b:e0:96:35:61:da:7f:b4:67:2e:
                    54:2c:8f:ee:9f:9e:c6:5c:55:27:69:9a:e3:a7:cf:
                    b0:07:10:42:1f:c9:9a:dc:be:08:49:70:08:30:80:
                    25:ab:8b:e6:83:51:77:6d:00:35:30:90:0b:f2:b8:
                    b8:11:7f:91:94:86:32:50:20:3a:18:54:f3:7b:f4:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:B3:38:CF:63:20:D6:27:55:E8:16:2D:D0:2F:CB:FC:4C:1E:33
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8f:f6:d6:cb:30:bb:f1:2f:79:5d:e7:15:64:15:40:4e:b2:
         95:ed:37:f6:d4:1a:63:4f:f1:d5:3a:e8:8b:dc:ce:54:87:33:
         6b:75:c6:36:e3:a8:05:4c:51:37:24:96:6c:20:cc:f6:f8:b1:
         21:af:ea:67:61:1a:26:15:df:5a:3f:63:63:94:69:36:02:6e:
         26:64:bc:b9:fc:06:75:c6:e4:da:bc:cd:6c:8c:d0:02:dd:8e:
         f3:92:67:78:93:c0:74:2c:50:63:e6:a2:31:de:11:c4:2c:66:
         1c:45:a7:f2:e7:4d:3c:a5:29:a7:18:2c:b6:5e:0e:58:ee:8e:
         51:48:4e:fa:c4:f6:3e:49:18:40:f7:91:dd:b3:e3:b0:2c:4c:
         c4:dc:ab:18:a6:13:df:7f:c5:a9:c0:34:03:89:7b:22:d5:38:
         ee:10:46:00:10:72:3d:ee:a4:a6:eb:ed:a5:2d:23:2c:2b:b8:
         6c:ae:35:f7:ea:e3:ab:25:02:a9:6c:85:03:f9:8a:d1:80:8c:
         62:c6:6a:12:6c:5b:a5:77:be:de:0a:e4:ef:12:08:47:b5:21:
         b5:94:7f:42:bf:fe:25:74:c2:a4:59:ba:c2:e7:b3:22:8e:88:
         34:1e:68:ed:fa:1f:d1:7d:e8:f7:52:34:97:c0:3a:b0:b2:2f:
         9d:9c:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:17:06 2025 by rpki-client