Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft
File:                     eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft (raw, json)
Hash identifier:          GaafEpH+QxQdfTNERLjd6CSMOTOuIy+11umREVOrlj8=
Subject key identifier:   B5:23:E4:A9:09:38:80:D9:3B:2E:A2:21:2E:5F:C4:C4:76:FC:14:53
Authority key identifier: 78:D1:CD:77:9C:79:9F:A6:4D:6E:90:FA:FC:7B:86:E8:1B:C2:FC:1A
Certificate issuer:       /CN=F36722D4AR/serialNumber=78D1CD779C799FA64D6E90FAFC7B86E81BC2FC1A
Certificate serial:       0129
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft
Manifest number:          0127
Signing time:             Sun 15 Jun 2025 04:52:57 +0000
Manifest this update:     Sun 15 Jun 2025 04:52:56 +0000
Manifest next update:     Tue 17 Jun 2025 04:52:56 +0000
Files and hashes:         1: eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.crl (hash: RMnX6GhHNY3JEMlW1hNTVKQ97NBcSu9/7vznVDYRb2I=)
                          2: F67461F871D211EFA77D6C9D762E951A.roa (hash: hFqt+iY0NXqJMEPrUi4FTpDYq4F0QoFd2j0M+mcF8u0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft
                          rsync://rpki.afrinic.net/repository/arin/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36722D4AR, serialNumber=78D1CD779C799FA64D6E90FAFC7B86E81BC2FC1A
        Validity
            Not Before: Jun 15 04:52:56 2025 GMT
            Not After : Jun 17 04:52:56 2025 GMT
        Subject: CN=684e51a9-a9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:a0:76:aa:7e:63:b0:8e:ec:7a:86:62:cb:
                    2a:08:b5:c9:83:60:7f:a1:32:08:55:c6:de:13:ea:
                    56:f8:b6:3c:1a:e6:d9:f0:d7:d9:df:7a:aa:c1:b0:
                    0b:a0:f0:27:e9:6c:ff:fe:bc:15:5f:7d:7b:0c:3b:
                    ff:83:84:99:0c:cc:b7:31:ce:4a:ee:8b:f8:11:54:
                    01:dc:b3:a4:30:dd:bf:fe:10:60:7e:67:a6:60:90:
                    8d:11:17:e2:b8:d2:a7:e9:d5:20:eb:c1:52:3f:a7:
                    ed:39:e3:11:54:f7:6a:a0:65:b0:47:7a:50:39:8b:
                    54:fe:4d:93:8c:cc:af:7d:f1:bc:79:00:3b:94:07:
                    96:1d:b3:48:cd:ac:ee:c4:58:18:70:ef:22:21:a1:
                    c0:02:30:06:ff:c5:aa:a3:a0:ad:26:4d:81:63:a6:
                    70:d8:c4:5c:bb:b5:b3:dd:ce:67:f6:a3:0d:fb:7d:
                    86:fc:be:b6:5e:b7:ee:04:67:b7:ac:f0:c2:d1:c1:
                    84:e5:5b:ef:9c:79:c3:8e:a5:16:68:30:9a:df:7e:
                    24:2d:83:be:ee:a7:86:34:38:2f:0a:6e:64:46:43:
                    50:43:fc:26:c5:42:0f:2c:8f:ed:fe:e1:71:da:f2:
                    c4:12:24:45:eb:d3:ac:21:10:71:c8:4a:b5:07:85:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:23:E4:A9:09:38:80:D9:3B:2E:A2:21:2E:5F:C4:C4:76:FC:14:53
            X509v3 Authority Key Identifier:
                keyid:78:D1:CD:77:9C:79:9F:A6:4D:6E:90:FA:FC:7B:86:E8:1B:C2:FC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:34:b6:ce:9e:2c:09:8a:cc:7b:de:b9:a0:9f:2b:bb:7a:d4:
         1c:5b:89:40:72:da:0d:73:1d:ca:81:92:b5:14:83:cd:81:5b:
         d2:9f:92:f0:51:a8:6b:a7:10:99:ca:99:3e:48:ba:43:af:b8:
         cb:e3:44:a1:b3:33:d0:59:0d:b5:4c:77:4b:6d:f6:4e:d0:d7:
         4a:ec:d0:8a:ad:10:22:45:ca:fd:bb:92:b1:83:10:a3:8b:56:
         de:cc:2e:87:5f:97:19:0a:96:84:51:8a:52:44:d1:2c:a0:6e:
         a8:b8:2b:71:44:22:40:64:f3:69:fe:7f:6d:52:8f:90:1f:8e:
         02:e5:fa:eb:f9:fa:8d:e3:63:d6:bf:95:35:8a:35:94:55:37:
         16:8e:d0:a6:e8:e3:bd:5f:b7:f8:ef:c2:34:60:0b:d3:e6:6f:
         f2:47:c8:1d:80:e9:97:d3:10:58:23:5e:53:a9:41:d1:79:75:
         25:4a:ae:3d:f7:34:94:71:68:2d:f8:83:b9:5f:24:4f:5c:b2:
         e8:b7:f3:4a:08:b1:74:52:f1:cb:cb:3e:fe:7a:41:b0:4c:a0:
         26:2b:f4:c0:67:7a:92:f9:c8:89:6e:df:91:f7:32:1a:2e:a2:
         c2:7b:a4:7c:9c:97:07:5f:40:f1:3f:a3:8e:85:8c:2f:36:b9:
         74:9d:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:55:54 2025 by rpki-client