Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
File:                     N783y2Va9seOuogIKpvt0b5AScQ.mft (raw, json)
Hash identifier:          VyrfFlRK9YS2sthGEEIQKlfg/9GH10A+bbF27PGcNd8=
Subject key identifier:   C3:4A:3C:57:E5:1F:B8:E7:9F:69:F6:F2:97:85:DC:9D:47:F3:59:66
Authority key identifier: 37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4
Certificate issuer:       /CN=F368788DAF/serialNumber=37BF37CB655AF6C78EBA88082A9BEDD1BE4049C4
Certificate serial:       040E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
Manifest number:          0409
Signing time:             Thu 13 Mar 2025 02:07:38 +0000
Manifest this update:     Thu 13 Mar 2025 02:07:37 +0000
Manifest next update:     Sat 15 Mar 2025 02:07:37 +0000
Files and hashes:         1: N783y2Va9seOuogIKpvt0b5AScQ.crl (hash: 67UI+/zlXtjjZda8j27LSJ7mVFwewbZnQ7ZVYmrIp7c=)
                          2: 4FA146B8A26D11EF8615AF63762E951A.roa (hash: 1lWOSLXoKapO4xyywLf2L4cW6uZX3BBDfChH/GRyj0g=)
                          3: 7D242F2063AB11EFA5073EA9762E951A.roa (hash: j6s7+D+sOoor2rnPY/jLlNXmijWZQCCdk4aJ0Yczhkw=)
                          4: 054F4B7C63BC11EFA8EF188F762E951A.roa (hash: sLm+VxrF0gqIYYWrMeaPyCiKXVb8QRFJvY1rOOeuSj4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368788DAF
        Validity
            Not Before: Mar 13 02:07:37 2025 GMT
            Not After : Mar 15 02:07:37 2025 GMT
        Subject: CN=67d23de9-d232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:e9:45:ab:86:21:73:c4:81:9d:16:d8:96:
                    d3:7f:dd:47:bd:98:09:97:92:29:1c:95:fb:fc:dd:
                    e5:38:d7:23:f9:c0:c4:54:ad:94:35:a3:a0:f3:6a:
                    d5:3c:3b:ec:48:36:13:f7:90:4b:bb:bf:7a:c5:68:
                    ac:50:45:ad:b1:db:28:92:d9:74:ca:fb:ea:dc:b7:
                    c2:6c:57:f6:70:cc:dd:f3:98:8b:f6:64:e7:dc:0b:
                    5b:40:8e:dc:d6:5c:b6:9d:b5:09:e4:1f:94:f3:58:
                    ec:6f:6d:da:d8:9c:5c:10:5d:c8:0b:32:9f:86:58:
                    0e:38:8b:b6:93:b6:24:7c:01:44:5a:96:27:dc:95:
                    7c:0f:a4:54:f9:a8:46:79:cf:70:d2:02:5f:88:12:
                    c0:2b:0d:7d:a2:9d:b6:80:e5:e3:bf:05:a6:a3:8c:
                    1a:62:1a:28:86:f2:6b:34:86:48:1c:65:4c:84:a5:
                    ba:29:dc:53:e8:35:94:07:e3:aa:ff:19:a3:7f:53:
                    b0:a0:9c:8b:03:e7:aa:bf:57:64:f3:a2:af:ce:f6:
                    1f:8a:d5:bd:71:20:81:f1:10:a6:ed:a9:29:e9:7c:
                    28:3b:1e:20:0f:50:e5:0a:d3:ac:3e:ee:ac:ce:2e:
                    ec:6b:97:74:37:7b:2e:b1:d2:3d:cc:c9:e3:9f:ef:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:3C:57:E5:1F:B8:E7:9F:69:F6:F2:97:85:DC:9D:47:F3:59:66
            X509v3 Authority Key Identifier:
                keyid:37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:90:b4:da:49:ff:af:a7:63:b4:56:90:c1:f0:5c:b1:88:
         a9:92:bc:05:81:68:c6:b8:62:e9:7b:b4:1c:10:2a:55:34:ac:
         34:2a:08:5d:0e:f2:93:4c:65:ca:aa:ea:51:91:6b:4d:f6:99:
         26:0b:01:6b:df:79:f0:df:77:79:e7:65:b7:46:2d:86:6e:25:
         18:cd:24:3d:06:57:88:67:1a:e9:72:e9:89:5e:2f:7a:1b:51:
         b0:11:0c:d4:e2:83:bf:19:af:09:20:28:cb:2b:25:b3:b4:e9:
         fa:a8:9b:c4:9d:dc:9a:31:7e:18:68:ab:c0:e9:e2:a5:22:b0:
         b6:02:e0:82:fb:1a:ff:95:20:f8:9d:a5:78:5c:b7:fd:24:13:
         c6:41:e0:05:74:07:93:4a:9b:c6:00:81:04:b9:08:e5:85:5b:
         b4:f2:28:30:47:c2:78:6c:db:21:fa:f2:3e:dd:dd:84:dd:53:
         29:89:0c:20:e5:af:5a:de:00:79:c4:56:83:5f:62:ee:9f:cc:
         2b:79:45:77:eb:f4:dd:c6:b1:de:f4:7f:ae:0f:f9:f9:ac:cf:
         82:fe:f6:ad:0f:aa:6f:ac:34:31:b6:36:a2:dc:6d:e9:ab:cd:
         cf:30:52:11:60:98:53:86:c4:92:fe:8f:b6:7d:21:20:db:85:
         d7:79:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:47:42 2025 by rpki-client