Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File:                     IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier:          PvhCTt7asaYyfLBMxwphhLaPElqg2JveQvu6HYRqC7Y=
Subject key identifier:   57:51:1F:99:C6:A1:5E:99:E1:8C:B4:83:02:8F:97:33:49:7E:62:32
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer:       /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial:       04A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number:          04A0
Signing time:             Sun 15 Jun 2025 02:55:08 +0000
Manifest this update:     Sun 15 Jun 2025 02:55:08 +0000
Manifest next update:     Tue 17 Jun 2025 02:55:08 +0000
Files and hashes:         1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: lzRMRq6vDf3SjVdFJHPcn8I3EeDlN7V8avuApRGEtN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
        Validity
            Not Before: Jun 15 02:55:08 2025 GMT
            Not After : Jun 17 02:55:08 2025 GMT
        Subject: CN=684e360c-c665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:bc:de:08:7e:53:af:6d:b4:b3:be:25:26:
                    6d:7b:8f:70:b7:bd:c8:61:59:aa:a6:76:92:eb:f1:
                    9f:5b:e4:eb:59:18:17:f1:81:6c:7a:98:8b:28:e3:
                    5d:71:e4:20:a5:72:45:72:06:f6:e6:e8:84:cd:9f:
                    ea:a1:ae:a0:3e:9d:d1:f1:18:ae:9d:f6:5f:d0:4b:
                    06:c4:18:ab:eb:b6:61:4f:9f:51:2c:01:06:bc:90:
                    55:40:9b:7e:fa:a8:2b:81:16:7d:84:f0:60:b2:31:
                    24:af:08:eb:3f:3f:4b:89:12:c1:d0:f7:f3:8b:b9:
                    42:29:08:1a:b9:ec:bd:a6:8d:ea:e6:ec:8c:10:6e:
                    75:a1:6f:70:5b:2b:e0:c3:fc:41:7a:5e:ab:5a:07:
                    08:cd:b4:cf:fd:f0:1f:ad:b8:4b:8a:8e:58:dc:3f:
                    4b:18:64:09:f6:e8:80:2a:5d:ac:5f:e6:38:7d:74:
                    93:22:c3:4e:1f:dc:7f:6b:19:22:c5:c2:0a:75:c8:
                    03:6d:fc:7c:5f:be:66:4b:d8:c0:e2:a1:67:fa:b0:
                    96:e2:4e:86:4a:c3:59:43:be:63:fc:0a:bb:68:41:
                    3a:d8:a0:be:4f:3f:eb:79:27:47:f4:29:b9:d9:27:
                    7e:d2:e4:59:b2:48:6e:d3:bf:96:69:d5:40:3d:54:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:51:1F:99:C6:A1:5E:99:E1:8C:B4:83:02:8F:97:33:49:7E:62:32
            X509v3 Authority Key Identifier:
                keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:88:59:84:3f:49:d5:4b:5d:09:0e:88:76:52:ba:87:c9:7c:
         ff:17:a9:4e:e2:0f:47:83:f7:9a:89:c5:2a:2a:cb:ba:3f:d4:
         16:ac:98:8c:97:47:7f:76:01:72:86:bc:9f:13:59:0f:f9:53:
         0b:99:52:20:4f:41:5d:0e:15:bd:a3:f2:bd:95:0c:00:8f:63:
         65:30:ee:8e:9c:a1:4f:c6:18:0b:b1:fe:e2:a9:d1:c1:f8:ec:
         1d:eb:fc:a7:a5:ac:fe:6d:7a:da:58:3b:02:c9:6d:d2:99:1e:
         82:63:ca:bd:d3:13:27:10:57:2a:73:d7:d8:f1:0d:77:e4:3e:
         83:1d:62:66:37:a2:42:b2:09:5d:99:44:21:4c:19:c7:49:b7:
         8b:6f:b3:fd:dc:2f:53:c4:32:24:92:8c:6b:40:15:78:5c:47:
         f8:fa:d5:6c:f7:09:68:ff:c4:8e:e4:51:a4:7a:f1:4b:2f:0f:
         0f:08:1d:f8:5f:a4:18:c9:db:ee:31:3a:bd:bd:2f:74:32:86:
         59:c3:e6:8f:43:6d:68:63:f5:0c:91:b9:c3:a2:f3:79:8f:f4:
         21:40:cf:11:92:2c:a4:c1:9d:7e:b6:5e:65:b5:e0:2d:b2:d3:
         84:10:3e:ea:a6:0b:95:df:cf:54:54:54:3f:c6:25:f8:a4:20:
         30:3d:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:25:12 2025 by rpki-client