Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
File:                     vN_wydKPGrRQYvSTuzVmysFCZG0.mft (raw, json)
Hash identifier:          IM+xX/+0O0Tpv6g6Ut2N4MqoULtH/EY2E+4Rg8rAh+M=
Subject key identifier:   76:E8:4E:08:5B:07:CC:31:37:2D:22:2A:1C:26:EF:18:8C:F7:1B:7F
Authority key identifier: BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D
Certificate issuer:       /CN=F3680C14AF/serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
Certificate serial:       0CE5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
Manifest number:          0CE2
Signing time:             Fri 06 Jun 2025 01:03:57 +0000
Manifest this update:     Fri 06 Jun 2025 01:03:56 +0000
Manifest next update:     Sun 08 Jun 2025 01:03:56 +0000
Files and hashes:         1: vN_wydKPGrRQYvSTuzVmysFCZG0.crl (hash: 3MDeWyBoEXgMiYhCxaSxr0ydTUaipRSh6piTCSPk3Ds=)
                          2: B33457F859DA11EC856F77BD5A40D577.roa (hash: agjY6LUdCjwnZ2M4yw1LKIU5MO1B5MHNkAfCnRIca5I=)
                          3: F7CE05E67D7A11EF88A9F065762E951A.roa (hash: CO1sEd4b6tDHp7VX2OHYT+QzzDJimiXxpvi4W3VBGpA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3301 (0xce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AF, serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
        Validity
            Not Before: Jun  6 01:03:56 2025 GMT
            Not After : Jun  8 01:03:56 2025 GMT
        Subject: CN=68423e7d-04a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:c4:00:6d:d8:9e:b0:b0:92:ca:f6:3b:30:
                    08:94:c0:7a:b7:cf:a4:1d:16:ef:c8:86:11:52:56:
                    24:de:83:cf:e6:f1:34:98:0a:6d:42:1b:c2:0c:5f:
                    88:e9:3c:76:a7:e9:16:09:07:b4:93:03:99:48:8e:
                    01:0a:e1:eb:74:26:77:a2:72:c3:2c:9d:e5:91:9a:
                    42:fd:fc:70:3d:64:e5:b2:ae:d7:3a:8f:c4:43:42:
                    24:b0:ee:28:0d:4e:24:e0:97:ce:42:46:61:f6:ae:
                    44:95:6a:28:b1:93:0c:10:00:98:2d:49:00:fe:cf:
                    19:33:96:d4:56:03:ad:6f:e5:9b:c9:5b:d3:b1:2f:
                    b6:d1:69:39:be:9f:90:d7:dc:a4:97:15:c5:33:e3:
                    57:01:20:ca:a3:ba:55:47:f3:e0:b6:a0:9c:07:44:
                    cc:4b:b9:4d:7e:3f:e9:58:61:92:66:a8:48:af:d5:
                    0a:d6:38:1b:a5:1d:0e:ac:3f:3f:c3:a7:66:2d:78:
                    ff:90:3b:10:e3:81:7f:86:a4:95:c8:ba:29:5a:9f:
                    39:cf:84:c2:da:fc:ea:8e:03:1e:b3:b0:0a:56:64:
                    db:56:04:43:ec:d9:b8:da:d5:f0:8e:d2:da:f0:14:
                    fa:92:27:5a:29:68:6a:29:62:a4:13:c3:9a:94:56:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:4E:08:5B:07:CC:31:37:2D:22:2A:1C:26:EF:18:8C:F7:1B:7F
            X509v3 Authority Key Identifier:
                keyid:BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:3b:8f:fd:ee:d4:47:cd:47:10:9d:9a:52:91:3c:b8:72:
         2c:12:20:e8:7c:37:54:1e:c2:48:76:61:ed:1d:84:b8:68:2d:
         cb:18:8e:d9:f2:b7:b0:d7:d3:11:9d:77:65:6e:34:b7:a5:94:
         23:6b:ab:28:d7:8a:e3:4b:5e:2f:a1:a3:f3:bf:5b:ff:a5:66:
         eb:5c:51:f5:3d:fd:8e:4c:70:35:18:47:26:d9:2f:66:4f:71:
         26:b7:00:45:bd:7f:14:5c:d1:25:78:06:3f:75:8a:3a:62:72:
         7b:e7:29:00:ad:da:af:0f:db:13:5c:3c:ea:2c:38:25:52:a5:
         62:55:34:65:75:e6:cf:a3:32:4d:e8:03:3d:de:5d:77:21:76:
         37:34:d3:56:b0:54:ad:97:a2:ec:ae:2d:5d:ac:50:80:90:6a:
         ba:3a:ba:8f:84:6b:a2:74:7b:20:bd:ba:fd:80:fd:70:28:a8:
         54:6f:ce:e4:ee:41:63:68:b7:db:f2:d3:97:9c:b9:d8:f2:dd:
         bd:8c:25:4a:8f:aa:ae:1a:3a:c5:2d:dd:cd:d0:14:d3:48:9c:
         ec:3e:71:84:fb:db:9c:11:d0:7e:e1:5f:98:be:65:0f:37:37:
         db:b0:7b:dd:fa:d5:66:b7:7a:e1:15:a0:56:03:87:03:bc:35:
         70:3d:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:02:48 2025 by rpki-client