Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          c6fX1C3jG2A5p0Uk4vqrI2RMMwHvau0GmX9yKh5mLlw=
Subject key identifier:   95:CB:28:49:46:BF:9C:21:AC:9C:0B:A6:D8:06:8B:25:65:78:58:B1
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       082E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          0829
Signing time:             Sat 07 Jun 2025 01:46:03 +0000
Manifest this update:     Sat 07 Jun 2025 01:46:02 +0000
Manifest next update:     Mon 09 Jun 2025 01:46:02 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: 6qHu/zgjKkZ2H5tgqsuhdlSn2WYvy1BtLjQ0+sVb2/U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 01:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Jun  7 01:46:02 2025 GMT
            Not After : Jun  9 01:46:02 2025 GMT
        Subject: CN=684399db-c6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:33:f2:8d:63:9c:ec:d0:03:af:35:ce:c9:
                    e2:10:6b:24:24:d8:30:9a:96:5f:e4:c4:99:74:47:
                    a7:e0:e6:fc:1d:a8:26:b0:6c:9b:0c:5a:1d:18:63:
                    f6:eb:79:6f:e7:b3:09:94:ed:f6:55:3f:d2:d6:42:
                    55:07:88:35:b7:32:ff:1a:25:ff:99:c9:86:2e:86:
                    b0:98:1f:20:d0:cc:ee:05:99:94:0a:7f:4d:5f:3f:
                    c5:44:88:88:09:99:b0:be:0a:85:65:48:53:ad:0a:
                    d4:95:ab:3f:fe:21:ce:39:ee:dd:c4:88:54:50:1f:
                    ba:f7:0e:b8:91:b9:3e:2d:d7:bd:c1:48:df:eb:c0:
                    c5:af:4b:0a:83:88:e1:52:8c:98:7a:14:81:a1:89:
                    ac:16:6b:3f:da:6f:f7:02:cb:3f:7b:aa:23:c7:da:
                    7c:b6:42:90:76:91:d5:b3:1f:40:71:ac:50:dd:2c:
                    f6:f9:52:c7:57:44:63:11:2e:f3:ef:be:ab:6a:c0:
                    7d:0b:a8:25:34:dd:85:b3:8f:a5:f7:0a:43:1c:1d:
                    7d:8a:ef:25:50:5d:a2:6e:fd:2d:27:53:cd:fa:42:
                    2e:46:d8:3d:03:9b:67:12:ac:24:6f:34:97:46:44:
                    ea:ee:35:88:d9:97:b9:3f:25:22:d5:4c:f3:70:b0:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:28:49:46:BF:9C:21:AC:9C:0B:A6:D8:06:8B:25:65:78:58:B1
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:af:71:5d:98:58:fe:e7:f0:1d:ae:a1:cc:61:6f:4f:c5:6e:
         d2:31:7a:7f:3a:b6:2a:35:e4:21:be:c0:95:77:cb:7a:b3:e4:
         c0:66:c0:ba:e4:08:bd:a5:2e:b2:d1:8c:69:2c:0e:47:ab:a6:
         9c:7d:18:1e:9f:9d:9d:db:73:e3:f4:94:fd:e3:60:17:84:41:
         a9:df:c4:07:83:a7:de:27:bd:df:a7:d9:52:5b:be:ff:4e:3c:
         04:51:01:50:3a:56:e8:24:ae:ba:52:cc:69:05:ac:79:ef:7e:
         b2:a1:f2:34:aa:4e:0a:16:88:62:96:9f:91:f6:1e:e1:de:80:
         a9:70:0c:47:43:64:c5:fb:ed:2f:e4:26:79:ce:23:e3:79:e4:
         59:11:a6:f3:cb:69:ca:2e:dd:2d:8c:db:3f:81:09:ae:ec:57:
         46:52:1c:47:f5:9c:91:0a:50:44:27:be:21:cd:f3:46:a2:2c:
         e8:78:af:48:c1:1d:fe:d5:44:b1:4e:2b:fa:3e:7d:c1:e0:07:
         b7:da:1d:66:cf:25:98:37:44:fa:3e:4d:6c:ad:dc:a5:64:d7:
         23:fb:49:aa:03:11:f3:8d:cc:d8:a1:e8:c9:9d:aa:44:4f:cc:
         0d:12:6c:05:89:f5:22:7a:ba:91:9b:48:9a:1d:83:49:ad:3d:
         83:32:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:23 2025 by rpki-client