Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
File:                     LWxhNdlQPaoy1mWGoi7WGSlcar8.mft (raw, json)
Hash identifier:          W7uik/ypsgAvfqrOwHmQX8h9y2i0a2lGZGiem+XRRlA=
Subject key identifier:   75:4A:79:6D:1C:C0:7F:85:53:85:5E:1E:DF:7F:C3:83:63:C2:D8:43
Authority key identifier: 2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
Certificate issuer:       /CN=F367FE62AF/serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
Certificate serial:       05DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
Manifest number:          05DA
Signing time:             Thu 31 Jul 2025 02:31:55 +0000
Manifest this update:     Thu 31 Jul 2025 02:31:54 +0000
Manifest next update:     Sat 02 Aug 2025 02:31:54 +0000
Files and hashes:         1: LWxhNdlQPaoy1mWGoi7WGSlcar8.crl (hash: BwCpoJZMFtMaKOXueYme3dw+7A9AchMZYacveOvw5sM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FE62AF, serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
        Validity
            Not Before: Jul 31 02:31:54 2025 GMT
            Not After : Aug  2 02:31:54 2025 GMT
        Subject: CN=688ad59b-8584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:c3:b3:d1:df:a4:03:26:eb:12:2f:04:f4:
                    29:ee:ee:25:1d:fd:3d:ce:87:59:72:cb:73:7d:0d:
                    e7:14:f5:70:54:f7:75:bd:c7:f5:df:87:ac:f3:37:
                    74:f1:66:66:30:f7:85:a2:af:5e:46:3f:01:5c:85:
                    3d:79:35:0f:aa:ff:09:28:fd:fa:9b:43:85:2a:ae:
                    a8:72:c4:9d:30:49:9d:43:57:11:7d:f7:84:79:d5:
                    8a:52:9e:63:dd:ec:ef:90:c3:96:5a:e7:55:9d:a3:
                    9c:4f:be:82:8b:b7:ff:8c:2d:69:a4:3f:3d:95:e7:
                    51:0c:c3:fd:05:07:3d:75:7c:4c:c7:18:d2:29:05:
                    62:c6:3f:d5:b8:d9:dc:8c:5c:fd:c7:22:10:06:14:
                    2a:aa:3e:86:00:a0:a1:99:76:ec:b8:b1:87:53:05:
                    71:e9:8b:21:34:3b:fc:0f:69:52:ae:fd:85:5a:84:
                    18:80:83:16:0c:5a:35:0a:5c:30:3b:02:de:75:f2:
                    18:84:24:4c:a7:27:fd:b2:7a:0b:9c:12:a2:28:43:
                    e5:aa:7d:76:ae:0d:68:e5:02:2c:90:ed:ef:a4:76:
                    26:07:cd:39:04:e7:6c:ec:75:67:a7:5d:dd:3d:46:
                    75:72:66:70:e9:6d:46:84:fc:7d:22:35:b9:33:af:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4A:79:6D:1C:C0:7F:85:53:85:5E:1E:DF:7F:C3:83:63:C2:D8:43
            X509v3 Authority Key Identifier:
                keyid:2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:63:5a:13:0c:d6:92:72:3b:43:3a:d7:11:74:2c:0e:12:4a:
         36:8c:fb:cf:97:38:4f:6e:b2:ce:56:3a:9b:8c:74:f1:ef:33:
         34:0e:2d:c1:0d:bf:82:0a:4e:ec:09:d0:3e:83:e3:3a:05:38:
         8f:18:d0:31:16:f6:58:a3:b7:40:c5:e8:85:1a:19:95:7a:db:
         d9:1c:6f:50:c3:5e:3e:c7:12:aa:a4:9c:b1:8e:92:47:fd:62:
         b3:cc:74:1d:9e:5a:61:05:98:d6:73:8e:d8:29:d7:72:08:41:
         38:d5:56:8a:45:15:4a:f4:cc:b8:69:12:68:f1:de:9c:b0:a2:
         37:99:1a:58:8d:b7:a1:4c:84:c6:c6:77:04:c0:ca:15:40:76:
         35:7b:95:f9:f1:5f:70:dd:4c:99:72:8e:98:04:92:13:04:a4:
         83:8e:b5:6d:9a:78:c7:ed:e2:4b:63:35:54:38:0d:5c:dd:ea:
         9f:e4:ba:77:72:35:09:19:1b:6b:74:51:7d:ab:60:21:0e:b9:
         37:ce:14:d7:58:cf:0e:21:64:2a:fc:8f:10:58:17:bd:aa:2e:
         0e:fb:0e:b1:b7:9b:f1:52:01:91:e0:71:a6:e5:a5:93:cd:90:
         c2:ec:d0:11:a4:79:3e:8f:0f:fe:c5:71:13:78:d4:d3:cd:1d:
         5d:eb:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:18:15 2025 by rpki-client