Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File:                     L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier:          7uUvl5bbSqgwbBbCoI81rjSqkrDyVdlKbSHubpwV3Ds=
Subject key identifier:   24:47:19:D5:81:0E:4E:1A:E5:3C:48:C1:0F:07:28:D9:93:A6:73:D8
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer:       /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial:       02CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number:          02CB
Signing time:             Wed 04 Jun 2025 03:52:21 +0000
Manifest this update:     Wed 04 Jun 2025 03:52:20 +0000
Manifest next update:     Fri 06 Jun 2025 03:52:20 +0000
Files and hashes:         1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: 9AjcgsWd4zDh7HvO+ev9qbnxD5tOM+oOm8zotyQB0g0=)
                          2: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
                          3: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
                          4: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
        Validity
            Not Before: Jun  4 03:52:20 2025 GMT
            Not After : Jun  6 03:52:20 2025 GMT
        Subject: CN=683fc2f5-5e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:c0:72:0a:7e:7d:41:97:c4:1f:b0:fe:79:
                    38:7f:bc:e2:5c:91:a0:44:c4:57:48:dd:0f:a7:72:
                    dc:2b:a3:60:91:bc:d4:f3:83:78:9a:cc:08:74:52:
                    7a:64:65:6f:40:70:1c:1c:c0:ae:59:40:45:62:ef:
                    a9:71:25:21:d6:5a:ed:6e:d1:77:0b:4d:82:07:53:
                    cf:09:06:dd:96:58:ab:47:90:ec:48:6b:d6:1a:37:
                    4a:19:a3:fd:de:4f:f4:cd:c5:e6:f9:a7:93:0a:fc:
                    82:cc:90:00:bb:a1:25:19:00:52:2e:41:ff:fb:7a:
                    07:59:bc:7e:b0:d0:7f:16:00:e6:54:b2:4f:68:7a:
                    a7:ec:df:37:6b:05:e0:21:da:01:8f:12:34:3d:45:
                    3a:8c:82:e3:48:64:4e:24:a3:53:58:f9:40:19:24:
                    4f:2d:5d:de:11:52:b0:ec:49:9b:e5:6d:28:87:87:
                    57:2f:8b:77:64:93:c5:5d:41:6c:a3:d2:03:a4:e7:
                    48:94:6e:4a:e1:32:b3:04:7c:10:b2:99:6d:c5:b7:
                    f6:37:56:db:d6:0c:34:0b:97:73:22:60:d5:6c:62:
                    b3:c3:1f:5e:2a:5d:8c:f4:b7:fc:82:56:0d:b1:a9:
                    48:de:1c:1e:c1:b5:7a:a8:00:c1:ee:55:e1:c2:bc:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:47:19:D5:81:0E:4E:1A:E5:3C:48:C1:0F:07:28:D9:93:A6:73:D8
            X509v3 Authority Key Identifier:
                keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6a:ab:29:7c:a5:29:22:48:8e:2b:77:5b:98:75:71:42:fd:
         6f:28:99:55:6c:c2:1a:7f:bf:3b:14:6d:fb:10:1b:f1:21:f2:
         c7:d8:38:8b:3a:a7:6d:40:3c:82:ed:22:de:bd:86:74:90:0a:
         6c:47:47:eb:be:27:ee:0d:87:cf:df:2a:ef:50:b5:c5:2e:47:
         2c:21:b2:e5:a8:85:21:85:35:38:63:bf:4f:76:3a:e1:c5:89:
         2d:1f:9a:af:71:e7:90:2d:7e:39:13:23:5e:2a:ab:2a:24:9e:
         a9:73:18:f0:59:92:8d:a9:50:1f:69:b5:53:63:f1:a6:20:38:
         b3:df:fe:0f:61:80:3b:85:4a:7d:7e:06:bd:54:8c:bc:80:dd:
         48:b8:5e:a9:4e:fd:c4:89:81:5f:5f:e5:16:b1:51:b2:0e:cd:
         b0:d6:11:39:6b:05:ab:fa:b8:d8:f5:29:6a:02:19:e3:2a:22:
         69:d7:61:5f:f7:b1:a4:d9:ef:d3:cd:45:4b:9b:9f:10:2c:75:
         37:18:eb:a4:d0:05:5a:40:8a:d0:8e:13:40:54:fb:bb:c7:61:
         8f:5d:2a:0d:a6:3b:9e:cc:b9:fc:c7:e2:f1:b7:e3:a6:42:d4:
         1c:3a:f3:1b:fd:49:49:2e:30:e0:0b:8f:80:0d:84:b8:e0:13:
         a5:a9:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:50:32 2025 by rpki-client