Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
File:                     04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft (raw, json)
Hash identifier:          UI5MEv5HxveSH/qDRaQEcK5qMh3YOf1JFsmzwgFIhn8=
Subject key identifier:   90:F7:40:B9:D3:8A:EB:E1:86:82:97:CD:EE:F0:1D:85:94:34:51:AF
Authority key identifier: D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
Certificate issuer:       /CN=F3669277AF/serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Certificate serial:       0567
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
Manifest number:          0566
Signing time:             Wed 04 Jun 2025 02:36:34 +0000
Manifest this update:     Wed 04 Jun 2025 02:36:33 +0000
Manifest next update:     Fri 06 Jun 2025 02:36:33 +0000
Files and hashes:         1: 04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl (hash: VdWUijvWexo2KQ+HNwKTb/wzHv04eJbl/mYH6y4Ka2A=)
                          2: F801051021E111ECA44DE462D8A014CE.roa (hash: nTH9YXhLp/XAxSwNODnbgqpCA63kmWCLMXXncguLAuk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1383 (0x567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669277AF, serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
        Validity
            Not Before: Jun  4 02:36:33 2025 GMT
            Not After : Jun  6 02:36:33 2025 GMT
        Subject: CN=683fb132-20ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cf:7d:73:8e:ee:4f:69:ca:dc:9a:2a:b0:be:
                    2a:66:a1:4c:bf:88:07:7f:cc:ec:bc:7a:33:50:8c:
                    19:f5:ef:eb:32:7c:f6:43:03:36:01:02:32:1a:69:
                    da:f2:ee:2f:ac:96:49:8a:c8:cb:8e:c9:47:e8:80:
                    eb:44:29:4f:6d:ca:91:51:7f:a9:6b:64:b2:b0:48:
                    4b:e9:32:eb:65:21:f7:91:1b:4c:8f:98:ee:ce:92:
                    79:68:40:89:3e:dc:7a:f0:88:71:59:e0:a8:a7:b8:
                    df:da:7a:66:18:5d:dc:44:b1:9f:c1:97:70:9d:79:
                    b3:e3:9f:cb:9d:16:a9:70:cf:b6:b5:4b:d2:de:a1:
                    df:5d:52:26:40:99:4c:c6:b5:58:4e:0e:0d:a3:f3:
                    49:bb:68:bd:29:c7:ce:5e:97:65:59:48:1c:5c:b2:
                    ae:00:fe:c3:bd:b5:4c:1b:d3:e0:2f:b8:6e:6b:2f:
                    f4:23:91:dc:ce:44:51:46:4e:19:d9:d8:fb:8d:a0:
                    b5:64:15:83:ad:e2:7e:b7:1b:e2:c5:c6:20:e7:42:
                    07:87:c0:a3:41:e1:ff:4e:55:16:03:aa:e7:f8:6c:
                    84:df:cf:5f:65:f6:65:f7:78:f8:04:c4:3d:de:78:
                    a4:36:06:11:f8:17:e9:ff:01:50:19:5e:5a:1e:9e:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F7:40:B9:D3:8A:EB:E1:86:82:97:CD:EE:F0:1D:85:94:34:51:AF
            X509v3 Authority Key Identifier:
                keyid:D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:51:a4:bf:e1:f5:b0:05:cd:36:1a:b2:29:72:2f:f4:81:
         8e:93:6b:c3:55:e8:1c:3d:d6:fc:e3:1d:49:e4:54:c1:27:ef:
         8b:ab:f0:02:ff:5a:49:9d:d9:68:86:e9:68:ae:cd:7b:c9:a5:
         8a:7a:7d:47:66:eb:29:32:89:ed:98:2b:7c:c8:af:6f:5a:cd:
         61:9c:30:8a:f4:05:a6:d4:96:a0:f0:87:33:bd:bd:e2:01:bd:
         15:8c:75:d5:65:7e:b5:05:c9:7f:51:11:38:6e:47:8d:8d:62:
         4c:51:d3:3e:89:58:2d:1b:87:3b:80:37:d5:e4:a2:c7:8a:56:
         e2:89:0c:13:98:5a:b0:2c:b7:c5:a9:78:02:4c:4a:f3:dc:75:
         3c:36:af:72:12:20:9f:cd:2b:1a:52:0b:8a:99:4a:06:45:7d:
         5d:0e:e4:5d:b1:73:8c:36:45:32:19:99:95:7c:fe:b6:e9:fb:
         34:0a:3f:f6:e1:b2:0f:c6:99:79:45:63:0e:e1:d5:5d:31:e8:
         ed:35:29:bd:95:d5:03:85:3c:90:6b:8d:a2:3c:19:e3:05:ad:
         4e:15:32:cc:c1:4e:30:01:b1:93:ce:9e:41:00:68:27:64:8f:
         b1:6e:0e:5a:7b:71:63:b4:de:62:43:26:2e:de:45:95:1f:8f:
         2a:fd:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:47:11 2025 by rpki-client