Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File:                     dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier:          PQ5tML+4slNc0ceyvPeVhp2M6bKnIpYLmepJy84P3Ks=
Subject key identifier:   12:A4:3A:37:F2:E4:0B:BA:78:33:FB:20:C0:C6:1D:1C:07:73:AA:2F
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer:       /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial:       015B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number:          015A
Signing time:             Wed 11 Jun 2025 04:41:57 +0000
Manifest this update:     Wed 11 Jun 2025 04:41:56 +0000
Manifest next update:     Fri 13 Jun 2025 04:41:56 +0000
Files and hashes:         1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: Mc4kcDgNNc7kuRTGDacU3dOa8FerizoiZt82wYOuJg4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 13 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
        Validity
            Not Before: Jun 11 04:41:56 2025 GMT
            Not After : Jun 13 04:41:56 2025 GMT
        Subject: CN=68490915-acc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:aa:15:70:2b:a7:66:4e:42:ee:c4:c4:e2:
                    31:2e:65:39:30:2a:08:f6:c9:15:dc:2f:ed:83:9a:
                    31:91:65:e3:87:63:a0:aa:0a:52:19:49:0e:67:7e:
                    f2:5f:68:ba:79:e0:86:e3:f7:2c:a8:96:c7:bc:4b:
                    80:2c:08:c0:db:5f:66:37:4a:2e:68:f0:d1:d8:02:
                    ae:f9:b5:c9:52:8b:06:c0:a2:cc:94:ca:96:44:de:
                    51:7f:1b:dd:95:b7:fd:89:c5:21:bf:75:70:e2:4c:
                    01:17:63:c6:9b:4e:4f:c0:55:64:eb:e5:50:d1:19:
                    b2:49:45:1b:56:ac:f1:8e:d4:b5:48:99:f0:35:c3:
                    cf:83:5b:ac:8b:97:86:f7:39:7d:c0:af:41:70:c4:
                    c4:1e:ee:fc:0a:39:9c:e8:ab:98:ab:30:a6:23:d1:
                    03:8e:3e:53:28:fa:65:56:20:4b:d6:4f:98:f6:05:
                    53:ab:bb:e8:8a:8a:bf:b4:0c:5c:88:7f:17:d9:03:
                    a9:0c:83:42:54:91:8f:39:0f:5a:c4:7b:64:ea:cd:
                    7b:35:f9:e1:eb:c4:cd:1d:0a:37:c9:d5:a6:a3:76:
                    f3:bd:64:8a:1d:12:eb:42:21:7c:1c:80:d5:e2:75:
                    05:e1:a3:04:bb:92:2a:20:b0:e8:61:8a:5b:46:c3:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:3A:37:F2:E4:0B:BA:78:33:FB:20:C0:C6:1D:1C:07:73:AA:2F
            X509v3 Authority Key Identifier:
                keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:22:57:e3:91:1c:a5:a2:83:c9:9d:f2:4d:b9:85:86:8e:
         2f:ab:81:da:13:69:df:29:de:7e:9e:76:96:be:74:d8:eb:1d:
         cd:57:f1:48:8a:b0:9c:4a:7a:dc:f5:f0:bd:7f:dd:8a:15:08:
         ec:1e:51:26:f9:72:f7:66:3c:41:fe:7d:58:4e:14:b6:3b:32:
         29:73:b5:a1:68:ca:dd:e4:f1:9f:0d:5d:a0:9d:7e:f1:88:d2:
         4b:9f:3b:d2:aa:ff:8b:59:1c:51:bc:f3:d9:85:72:23:88:a3:
         25:6b:02:45:9a:fb:c8:5b:50:12:c1:b6:56:cd:5d:99:1f:e4:
         ef:9a:c7:22:ea:60:16:1a:b5:15:8a:82:54:e8:4f:28:90:90:
         6c:7b:e2:4e:d5:d6:86:b1:79:0b:fa:81:6b:cb:b9:cd:13:4b:
         18:dc:b4:7a:cc:43:5d:b9:04:66:de:89:12:13:e5:28:a6:ac:
         4a:db:ab:da:3a:be:0f:24:ae:82:df:7e:c7:87:4b:99:3c:95:
         ad:00:ff:13:1d:ba:56:e7:df:e4:8d:a2:4d:8c:7a:44:05:d2:
         09:29:b3:d6:06:cd:af:2c:81:38:56:1e:ec:25:68:81:04:ac:
         c4:de:68:69:45:a9:f6:40:f9:1f:ff:fb:29:29:36:83:b7:92:
         b7:b1:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:27:46 2025 by rpki-client