Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          h/SjTQxHJirNZpY7PRTQw3Qwi+JKd/ycxIDQV6/KP7A=
Subject key identifier:   26:4C:26:50:B1:FE:43:62:3A:79:43:DB:7B:5F:0B:41:03:F8:83:92
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       01D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          01D1
Signing time:             Sun 08 Jun 2025 04:25:03 +0000
Manifest this update:     Sun 08 Jun 2025 04:25:02 +0000
Manifest next update:     Tue 10 Jun 2025 04:25:02 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: W45+Nq4baQjC+c2GIrsJ3AxCDHCIU7Z+Zx1J7VS2ysQ=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Jun  8 04:25:02 2025 GMT
            Not After : Jun 10 04:25:02 2025 GMT
        Subject: CN=6845109f-b98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:60:cc:23:43:75:23:c0:3b:40:e8:cc:74:
                    94:c9:17:e9:9b:f5:cb:ac:d0:45:04:5a:3d:cf:3d:
                    72:39:23:50:f3:c2:a0:14:4a:cb:76:37:f9:c7:5d:
                    17:c0:ee:06:f0:ef:a0:91:ec:00:68:d8:51:ca:7d:
                    d3:de:db:f4:d2:94:d3:76:0e:78:8e:58:99:a7:b7:
                    90:db:c6:4a:32:be:20:f8:f1:40:e0:bc:17:54:ef:
                    56:e2:5b:4b:32:92:19:f0:4b:78:a2:bc:a8:b2:3c:
                    c1:b4:d8:ec:b5:27:e3:2b:51:07:27:04:4a:5a:a6:
                    b8:e6:8d:f0:03:ee:01:1e:99:9d:d6:0a:8e:84:b4:
                    76:0a:6b:5f:81:b7:f4:c2:4a:fd:07:33:93:1e:0a:
                    ca:24:04:8b:5e:4c:ee:72:89:94:f4:18:62:1f:a2:
                    88:dc:fb:a9:36:7b:03:cc:51:fa:51:f1:1e:ff:08:
                    28:5e:91:3f:c4:40:f2:f5:0c:d5:dc:ae:25:f1:75:
                    a6:3f:d6:83:58:81:7b:e5:3f:ba:80:f2:bd:48:9a:
                    d5:3d:b0:85:3c:74:54:17:4a:21:2a:64:ff:5b:4c:
                    0e:be:44:51:af:0f:7e:1f:57:01:f9:19:63:1d:e7:
                    90:02:84:f7:2e:be:89:0a:68:ba:a6:e0:fc:81:8e:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4C:26:50:B1:FE:43:62:3A:79:43:DB:7B:5F:0B:41:03:F8:83:92
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:35:d9:27:5f:c9:4c:a9:9c:c4:1a:7f:c1:5f:1e:e7:16:
         3e:25:69:79:29:1f:2b:b6:e5:fa:a5:14:49:cb:a2:28:4e:f3:
         5e:2b:99:b5:37:e3:2a:19:55:97:0c:3d:e2:f6:c6:cb:de:f0:
         5d:62:30:96:66:d5:25:4f:97:78:8e:20:86:00:e6:dc:d2:59:
         d7:73:72:6e:bd:1c:a8:54:ea:b6:dc:dd:9c:70:6c:22:f9:78:
         ae:d6:36:99:db:f0:2d:af:6e:64:b5:be:e0:23:4c:0d:d1:a2:
         ac:a6:02:96:94:0e:f1:af:9f:a7:02:be:ac:23:cc:48:2e:d0:
         5c:64:03:72:db:32:17:6a:bb:97:08:5c:30:3b:4e:43:6c:ec:
         4a:2d:c5:ca:59:3a:91:5b:ba:64:a1:2c:98:b2:e0:f2:5c:7a:
         9e:c0:86:58:25:3e:dd:01:50:da:c6:b1:87:fa:3e:d7:a5:ed:
         c0:32:9d:0a:a9:4e:5a:4f:3e:36:8b:e2:67:11:4e:d2:6c:34:
         f7:8e:0c:a4:89:7f:04:56:fa:8d:78:82:61:21:6c:8c:66:47:
         5b:7c:38:ea:53:bf:a4:79:2a:ca:41:b8:18:ba:f7:1b:95:3e:
         2a:6d:4e:49:c1:71:a9:46:17:89:82:09:0a:1b:c6:f2:9b:dd:
         f8:f9:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:47 2025 by rpki-client