Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
File:                     lxWomCIk5V6mKKnmhSkjWEy0wSs.mft (raw, json)
Hash identifier:          VDMqCbcXfMUNsF89qeyA9ccYQvcrzfNkVRr4zEqucwE=
Subject key identifier:   D0:BE:16:D5:FC:B1:3A:4B:95:14:45:7D:AF:D5:37:44:09:2E:58:DA
Authority key identifier: 97:15:A8:98:22:24:E5:5E:A6:28:A9:E6:85:29:23:58:4C:B4:C1:2B
Certificate issuer:       /CN=F367B915AF/serialNumber=9715A8982224E55EA628A9E6852923584CB4C12B
Certificate serial:       0661
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
Manifest number:          0661
Signing time:             Wed 04 Jun 2025 02:02:08 +0000
Manifest this update:     Wed 04 Jun 2025 02:02:07 +0000
Manifest next update:     Fri 06 Jun 2025 02:02:07 +0000
Files and hashes:         1: lxWomCIk5V6mKKnmhSkjWEy0wSs.crl (hash: vVtXyV/z4AANsBs2ALUBdMeY6y1g8GbK9RYV9ChWgdw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B915AF, serialNumber=9715A8982224E55EA628A9E6852923584CB4C12B
        Validity
            Not Before: Jun  4 02:02:07 2025 GMT
            Not After : Jun  6 02:02:07 2025 GMT
        Subject: CN=683fa920-fa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:76:1c:ef:90:28:d7:30:f3:42:ce:f7:f5:
                    96:fd:18:7b:8a:83:44:f4:b5:aa:69:19:ce:be:a3:
                    1b:25:03:79:9e:ec:2e:06:d7:a5:65:1f:fe:c4:f8:
                    14:07:0f:28:0c:76:ad:69:50:bf:64:7d:de:70:15:
                    54:19:c9:59:e7:1b:a5:10:bd:44:c6:dc:d0:c2:90:
                    01:5b:93:52:59:5e:df:2d:75:c7:58:b2:89:74:8e:
                    07:92:4d:6c:a1:d3:c3:c6:c2:ee:56:2b:f2:a1:fd:
                    6d:40:52:d0:26:fd:6e:53:7e:f3:4b:23:11:6a:67:
                    7c:7a:ea:ee:62:d7:62:cd:10:e8:18:aa:26:b6:51:
                    05:c6:59:1a:82:a2:d4:18:3e:85:c3:7f:dd:81:92:
                    f5:07:96:14:99:60:5b:84:57:00:b9:0c:fd:9c:0c:
                    6a:ed:21:57:9a:71:7f:70:47:65:1d:c4:99:bf:50:
                    79:77:28:78:69:99:3f:dd:34:48:36:91:da:bd:a8:
                    c6:fe:c5:f4:99:47:65:fb:a5:f8:68:9d:23:37:eb:
                    4c:fd:80:f8:9f:8d:19:b5:c5:95:da:dc:62:b5:1d:
                    de:56:4c:1f:98:bc:5e:13:eb:51:1a:48:b9:dc:9e:
                    79:6c:20:a4:2f:b6:ab:a1:5d:4b:dd:38:ce:95:4f:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BE:16:D5:FC:B1:3A:4B:95:14:45:7D:AF:D5:37:44:09:2E:58:DA
            X509v3 Authority Key Identifier:
                keyid:97:15:A8:98:22:24:E5:5E:A6:28:A9:E6:85:29:23:58:4C:B4:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:3f:5b:09:42:72:7e:d0:30:45:af:46:63:e9:38:c5:54:
         45:96:74:0e:52:b2:70:40:af:74:c4:c0:4f:9e:8c:e3:b2:1f:
         21:4d:e3:10:e0:b7:06:aa:34:c7:52:51:c8:1d:4b:79:e9:9b:
         e6:b9:bb:c3:51:27:1a:72:bc:45:3c:69:97:28:2c:d1:fa:30:
         91:83:82:3f:15:c8:c5:91:f5:04:2a:4e:1e:f4:75:1d:0e:51:
         ae:48:95:a7:42:a2:cd:3b:2d:9a:50:4d:81:1f:6e:53:57:e3:
         6f:bd:8d:d1:bc:d5:d9:96:b4:97:d2:3f:7c:34:45:9f:95:59:
         30:d2:73:98:60:6e:9c:e0:b3:20:23:1d:9f:c8:3e:03:41:45:
         c9:b8:d7:e4:05:05:6e:a1:b9:6d:6e:a1:03:fa:75:8f:4d:28:
         49:38:72:4b:59:4c:66:68:31:9a:dc:79:fa:a5:c4:55:8a:d1:
         29:df:78:48:a6:56:d9:bc:08:11:28:4c:d9:f6:a2:20:2d:66:
         69:18:c9:9e:93:0b:1b:91:1f:33:a6:2e:9e:50:af:06:ac:9e:
         01:66:84:f5:3f:20:fc:23:dc:36:97:03:d6:ee:fb:b0:83:b1:
         7c:f4:ba:47:2d:fb:ed:4b:d2:37:5b:99:8b:64:b0:92:f4:56:
         b3:b4:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:39:05 2025 by rpki-client