Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
File:                     SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft (raw, json)
Hash identifier:          q47jCXvgWawKOwPLjswzFaJc3tvz4v8/nrThPy6CTZQ=
Subject key identifier:   DB:AD:93:6F:F0:17:07:54:42:79:26:CB:9D:ED:D3:DD:CF:A1:86:20
Authority key identifier: 48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F
Certificate issuer:       /CN=F367DA9BAF/serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F
Certificate serial:       0388
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
Manifest number:          0387
Signing time:             Wed 04 Jun 2025 03:25:08 +0000
Manifest this update:     Wed 04 Jun 2025 03:25:07 +0000
Manifest next update:     Fri 06 Jun 2025 03:25:07 +0000
Files and hashes:         1: SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl (hash: EQk2UT3bLkv5s45tkSTA3jRssG8MRPGmuYlW4ae8l3g=)
                          2: 46F0B40CABC211ED9ACEA683F1222468.roa (hash: gMJyXLKD9QP+OLiQjsuXWN3MuSsqyBtsebI9uk9Cd8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAF, serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F
        Validity
            Not Before: Jun  4 03:25:07 2025 GMT
            Not After : Jun  6 03:25:07 2025 GMT
        Subject: CN=683fbc94-d363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:3d:6d:16:c7:a8:77:6f:8e:37:5c:34:ba:
                    17:e6:8b:3b:be:e7:7a:8a:ab:d7:4c:39:b9:6b:36:
                    e5:7e:e0:d4:7f:27:e7:05:2a:52:47:1d:23:6f:9f:
                    5c:6d:82:42:77:72:92:82:ac:e5:b6:f1:7f:60:d0:
                    12:e7:f7:c6:7a:57:5f:99:c1:16:3a:d8:3c:15:3d:
                    a7:5e:de:e3:e2:c5:65:6d:de:2d:fe:94:01:39:29:
                    40:1d:30:e3:5b:f9:6f:e2:13:9a:35:44:94:70:fa:
                    2c:64:d2:fd:3c:7f:f7:67:91:bc:fa:73:52:be:f1:
                    19:31:27:89:13:a9:a0:f6:e7:b9:44:17:f4:61:2f:
                    94:8c:12:56:57:9b:b4:71:04:35:a4:75:82:ea:63:
                    66:f6:1a:e2:83:ca:48:4e:4c:33:52:b6:57:80:28:
                    e8:83:76:7b:96:f8:11:7b:7e:df:f0:25:cb:f4:82:
                    75:a0:33:b4:ac:12:2d:ff:21:84:d9:b5:e6:e4:49:
                    30:48:0e:8e:76:61:2c:4a:0c:68:14:a3:9a:a2:b3:
                    79:56:7c:59:99:e6:a2:56:80:77:29:af:8a:fa:75:
                    ff:9f:2f:e0:3f:af:fc:27:6e:94:db:b8:9b:13:8c:
                    3b:88:0c:b1:48:ae:33:9d:7d:7d:c4:ba:ab:e7:3d:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AD:93:6F:F0:17:07:54:42:79:26:CB:9D:ED:D3:DD:CF:A1:86:20
            X509v3 Authority Key Identifier:
                keyid:48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:83:86:0b:9c:ae:ca:fa:01:d4:dd:54:dd:50:49:37:26:b0:
         6b:99:76:f7:97:eb:51:df:81:0a:6a:cf:ce:e3:01:2d:f0:ee:
         77:af:bb:75:f1:a1:47:b3:19:f8:4c:07:70:42:9b:bd:55:b2:
         07:98:55:78:03:31:c9:eb:96:18:90:83:97:f4:0a:6f:e0:50:
         9c:f4:a1:ac:f7:06:83:43:92:5b:88:79:dd:8f:07:3a:13:1c:
         5a:04:ea:2b:75:66:9e:aa:e2:32:52:0f:56:57:a4:15:7b:30:
         8c:c9:a1:94:5c:5a:e7:e4:15:f7:5b:f6:97:a6:8f:4e:48:cf:
         63:6e:21:ec:8d:1a:6f:44:ad:17:79:fe:87:fd:78:33:3c:ae:
         6a:3c:e0:b6:a7:a5:91:1a:84:1c:65:2e:4a:14:fd:09:cc:c5:
         99:e3:34:7f:1f:f8:47:05:10:e8:35:72:87:60:73:4a:ee:be:
         e1:58:dd:4e:fb:6e:67:ed:e3:ff:11:db:10:c8:0f:8f:17:6e:
         af:52:54:98:63:cd:d0:80:d2:7b:b9:69:f1:3f:c8:63:26:32:
         cb:b3:7d:1c:e8:be:8c:e9:9a:91:16:30:ae:cb:51:5f:b3:0d:
         c7:b4:1d:51:e3:d2:22:d3:b6:6b:8d:05:16:ff:d2:9c:22:28:
         43:af:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:19:46 2025 by rpki-client