Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          rvRRYpe4HVw/U9vKO5wND2PD/8ziCqmhkTxRebImZF4=
Subject key identifier:   6C:B5:E7:87:B2:35:E6:06:AF:C0:69:E2:49:A2:0F:E9:49:A9:55:9C
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          01CC
Signing time:             Fri 18 Apr 2025 09:25:23 +0000
Manifest this update:     Fri 18 Apr 2025 09:25:22 +0000
Manifest next update:     Sun 20 Apr 2025 09:25:22 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: Zchdhv5Oi0ccCQZqdEE53PxIVcQQHb7pvEtKJXUeuKY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Apr 2025 05:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Apr 18 09:25:22 2025 GMT
            Not After : Apr 20 09:25:22 2025 GMT
        Subject: CN=68021a82-203a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:41:48:af:ad:df:05:e8:3d:e5:c1:40:40:
                    05:b9:94:39:62:c1:db:0d:f0:46:4d:b4:39:1b:8b:
                    ce:81:bc:14:d2:37:4d:22:fe:a6:cb:a3:8a:ce:55:
                    af:4c:34:e0:52:88:14:f7:f2:3e:a8:cf:01:83:51:
                    a6:2f:32:cb:07:f7:d3:54:dd:90:c9:e4:34:54:b9:
                    ab:74:e1:3c:6f:15:95:78:8f:2e:c9:fc:86:83:13:
                    1e:fa:a0:2f:b8:ca:d0:93:92:37:6d:23:c0:aa:9f:
                    fc:e5:84:ad:33:ae:73:8b:50:1b:f3:3a:53:ad:c3:
                    2b:90:c9:4b:79:5b:e8:8b:18:a3:2d:81:9c:a9:ee:
                    bc:64:38:2d:aa:24:95:6c:67:68:d9:66:c4:ad:dd:
                    49:11:7f:8a:79:6e:32:48:41:f9:d3:56:b3:74:d3:
                    a2:c2:98:fc:ef:56:61:84:ba:ab:1f:03:d9:9f:15:
                    f6:be:6a:06:61:6d:02:b2:1d:01:5c:df:14:00:54:
                    8c:46:78:f1:06:95:44:7b:4b:7f:ed:05:69:3a:53:
                    74:77:a6:7e:29:95:e3:fc:5e:c7:09:a9:d0:03:12:
                    a2:2f:88:b1:49:49:00:ef:54:90:e1:ce:0d:96:67:
                    60:eb:ff:ce:9a:a5:8a:ce:ba:3a:64:24:16:56:1f:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B5:E7:87:B2:35:E6:06:AF:C0:69:E2:49:A2:0F:E9:49:A9:55:9C
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:ab:7c:22:d5:f3:fc:db:a8:74:f8:91:71:dc:7f:51:1d:
         fd:6b:12:78:c4:02:7a:c7:e5:1d:dc:00:2c:14:03:60:df:b8:
         d5:34:bc:e8:00:8c:17:09:34:e0:04:7c:61:be:2b:7f:09:84:
         57:b5:9b:96:b7:8e:db:71:6c:2c:cb:2b:70:cd:07:a7:01:28:
         d4:a3:87:38:ff:53:55:16:cf:c9:c6:af:04:7d:4e:46:b9:84:
         94:db:40:77:dc:bd:0a:d1:2e:0e:ea:89:89:ca:01:94:c8:d3:
         5e:c9:7e:46:0c:c4:76:e0:42:ea:31:87:98:58:52:7b:d6:8d:
         f5:23:3c:6d:e4:25:ce:41:44:32:a8:93:e7:13:27:7a:37:54:
         3c:0c:3d:94:1a:a0:ab:73:ae:6a:60:f3:ef:1b:6f:f4:fd:f1:
         52:2a:15:60:ea:49:3c:6d:84:ee:9f:af:f2:3a:b9:79:7d:3f:
         0a:84:69:e2:f4:80:dc:38:36:44:14:3c:f1:08:55:db:5f:cc:
         64:f4:d5:3d:c3:a2:7d:a6:51:57:7e:97:86:2e:c8:a3:03:25:
         d5:33:9d:9e:f9:d0:20:0f:8b:ac:02:71:87:85:af:71:7f:7f:
         3c:a7:f9:d1:34:f1:86:17:78:40:d2:93:00:fe:39:c9:e1:ae:
         4e:1d:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:13:31 2025 by rpki-client