Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier:          10BD39Z3bfBvayDRZA7kWERhVpjMbK2ylM8jx8H3zic=
Subject key identifier:   7A:A3:5F:0B:34:CF:C6:72:70:C4:52:0D:26:C1:A8:15:5D:92:B5:1B
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer:       /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial:       0397
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number:          0395
Signing time:             Sat 07 Jun 2025 03:24:47 +0000
Manifest this update:     Sat 07 Jun 2025 03:24:46 +0000
Manifest next update:     Mon 09 Jun 2025 03:24:46 +0000
Files and hashes:         1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: h1Ku0IEGZcptsQv3KqypLW/veCTAHFNlGizTzbovZm4=)
                          2: D17F6EEC902411ED9E7767D2F1222468.roa (hash: JO/7laMxt+UsHBnYsLId8OjP3XjZJzj6vEh7zTGEoAg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                          rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Validity
            Not Before: Jun  7 03:24:46 2025 GMT
            Not After : Jun  9 03:24:46 2025 GMT
        Subject: CN=6843b0ff-8481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:26:23:b3:44:5c:ae:4e:49:77:54:75:e6:
                    b2:f2:bf:33:bb:6d:10:e7:d9:33:cb:ec:2d:92:24:
                    a8:57:04:23:b5:ed:99:5f:b9:34:bc:ce:ce:29:d5:
                    73:cb:e0:40:86:d6:f8:6b:96:fa:33:ce:bc:55:25:
                    ca:4f:b5:69:11:f8:93:2e:59:f7:dd:c0:ff:db:71:
                    6e:b3:52:2a:ee:55:88:f7:ef:c7:0c:7c:53:0f:58:
                    b7:90:c8:b4:2f:05:58:04:e0:99:18:21:73:92:ab:
                    b8:25:66:1f:c6:14:85:f9:b3:93:3b:86:09:2a:da:
                    ae:12:ee:69:80:3f:cd:c2:20:fa:b2:ee:f5:23:df:
                    e0:ac:95:6f:cf:c9:9a:aa:11:7d:53:33:c3:a9:d4:
                    77:37:1b:58:8a:16:18:40:21:ee:6b:48:6f:d5:32:
                    aa:09:16:4f:df:74:c0:62:56:88:b3:79:ab:a8:0a:
                    d2:c5:d9:10:0b:37:53:f7:aa:eb:de:69:bb:37:a2:
                    9e:b0:17:fd:c9:4b:a4:e8:b8:c2:84:be:0a:19:c2:
                    f2:35:28:8f:35:cc:f9:bb:91:dd:6d:af:73:c6:0c:
                    f3:be:4a:df:56:a3:09:cd:c6:83:b7:b4:eb:30:c6:
                    7f:a9:33:ae:be:d9:bd:32:b4:80:57:c1:0e:76:03:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A3:5F:0B:34:CF:C6:72:70:C4:52:0D:26:C1:A8:15:5D:92:B5:1B
            X509v3 Authority Key Identifier:
                keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a3:4d:d8:6f:c1:e8:9a:3e:4a:df:5f:6b:60:ed:d8:91:8e:
         b3:4e:ee:b3:ed:21:a4:30:61:bd:b0:33:02:8e:40:87:67:a5:
         10:6c:0d:10:19:8a:ac:b5:f6:54:75:31:e7:3d:2b:b6:28:87:
         8f:7e:05:05:09:f0:f6:0c:ac:e2:3d:ce:a0:3c:e0:25:9c:52:
         75:ff:2a:36:f5:f8:7d:cd:aa:7a:a5:9c:1c:20:7b:65:1b:83:
         f8:a2:5c:42:eb:7c:10:fb:a7:e3:fb:52:0d:c2:e5:cb:45:9d:
         ca:30:8a:d5:de:f7:07:16:4d:58:7e:91:7b:d2:7f:fc:b2:42:
         fc:0e:e8:dc:df:48:56:0c:69:e1:7f:d0:2b:cb:c4:8b:9e:21:
         90:24:5c:c3:da:be:72:f9:36:0f:51:29:8b:70:92:31:99:7a:
         d4:be:f5:e4:9f:f9:8b:7d:db:a9:08:41:07:e8:f4:9d:f5:27:
         17:38:6f:f0:b4:ea:f5:c6:72:8f:dd:1d:2d:01:2c:0b:b9:bc:
         1a:b2:aa:a6:e3:28:b8:f6:09:b4:4a:65:bd:e3:eb:ae:ad:9c:
         b0:be:10:55:1a:6c:2f:2a:55:54:51:34:d0:98:43:4a:64:37:
         be:95:db:35:44:d6:be:f0:cd:43:22:08:1f:e9:fa:d4:7c:48:
         d7:cd:c6:c0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk3MkZSSTExMC8GA1UEBRMoNDg2OUI5NzVGNDlEOTgwRkU1MTVDRURENDlBMEM0
MEVCQjgxQUNBMjAeFw0yNTA2MDcwMzI0NDZaFw0yNTA2MDkwMzI0NDZaMBgxFjAU
BgNVBAMTDTY4NDNiMGZmLTg0ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDW1iYjs0Rcrk5Jd1R15rLyvzO7bRDn2TPL7C2SJKhXBCO17ZlfuTS8zs4p
1XPL4ECG1vhrlvozzrxVJcpPtWkR+JMuWffdwP/bcW6zUiruVYj378cMfFMPWLeQ
yLQvBVgE4JkYIXOSq7glZh/GFIX5s5M7hgkq2q4S7mmAP83CIPqy7vUj3+CslW/P
yZqqEX1TM8Op1Hc3G1iKFhhAIe5rSG/VMqoJFk/fdMBiVoizeauoCtLF2RALN1P3
quveabs3op6wF/3JS6TouMKEvgoZwvI1KI81zPm7kd1tr3PGDPO+St9WownNxoO3
tOswxn+pM66+2b0ytIBXwQ52A4J9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUeqNf
CzTPxnJwxFINJsGoFV2StRswHwYDVR0jBBgwFoAUSGm5dfSdmA/lFc7dSaDEDruB
rKIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NzJGLzRDNzU4RjZBOTAxMDExRURCQzNFMEY5QkYxMjIyNDY4L1NHbTVk
ZlNkbUFfbEZjN2RTYURFRHJ1QnJLSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L1NHbTVkZlNkbUFfbEZjN2RTYURFRHJ1QnJLSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzk3MkYvNEM3NThGNkE5MDEwMTFFREJDM0UwRjlCRjEyMjI0
NjgvU0dtNWRmU2RtQV9sRmM3ZFNhREVEcnVCcktJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1o03Yb8Homj5K319rYO3YkY6zTu6z7SGk
MGG9sDMCjkCHZ6UQbA0QGYqstfZUdTHnPSu2KIePfgUFCfD2DKziPc6gPOAlnFJ1
/yo29fh9zap6pZwcIHtlG4P4olxC63wQ+6fj+1INwuXLRZ3KMIrV3vcHFk1YfpF7
0n/8skL8Dujc30hWDGnhf9Ary8SLniGQJFzD2r5y+TYPUSmLcJIxmXrUvvXkn/mL
fdupCEEH6PSd9ScXOG/wtOr1xnKP3R0tASwLubwasqqm4yi49gm0SmW94+uurZyw
vhBVGmwvKlVUUTTQmENKZDe+lds1RNa+8M1DIggf6frUfEjXzcbA
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:39:05 2025 by rpki-client