Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
File:                     zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft (raw, json)
Hash identifier:          IyyO0XDsKX2c3nsQEn9QVAzYfKNqPjLHVC2I+DwE9J8=
Subject key identifier:   8C:FA:17:69:D4:A3:7D:F0:31:C4:89:82:02:37:D2:7A:9F:64:63:2A
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Certificate issuer:       /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial:       0176
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
Manifest number:          0170
Signing time:             Sat 07 Jun 2025 04:38:29 +0000
Manifest this update:     Sat 07 Jun 2025 04:38:28 +0000
Manifest next update:     Mon 09 Jun 2025 04:38:28 +0000
Files and hashes:         1: zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl (hash: 70hLdGCaQlGLNzZW4hIBtM0BH0ycz5Npa7qzF/FVRWQ=)
                          2: F3466CD22EEE11EFAB930A67762E951A.roa (hash: +dYtbycLkkem/RCdq5G5Tibdi9nPBFznIh17vDpR0yI=)
                          3: AA5E7D162EEE11EFB786B466762E951A.roa (hash: 7ctEzn08E4DJ3uFce48dpoQ1eMqIiYfX70Em/++n2wI=)
                          4: C10CD8A62EED11EFBB91475E762E951A.roa (hash: +GopixwYFgxwApDEisDd+3N08mZ9XQbjdM+uCxLPgTY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 04:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BC41AF, serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
        Validity
            Not Before: Jun  7 04:38:28 2025 GMT
            Not After : Jun  9 04:38:28 2025 GMT
        Subject: CN=6843c244-968a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:65:7e:2b:c2:22:a7:f1:cb:68:9a:78:af:
                    38:5e:17:5a:1f:a2:f7:e4:6b:af:c1:91:e0:d0:4a:
                    cf:fb:ff:7b:cb:e3:cf:1b:e7:a2:53:44:ca:64:85:
                    91:ee:ac:b4:be:6b:c1:e2:40:b6:f0:09:cf:ce:97:
                    45:6e:33:54:da:ce:61:20:26:ab:65:ef:37:22:c6:
                    22:7b:0b:34:43:2b:71:ce:8e:3f:76:23:6b:80:b0:
                    c0:d7:ce:d8:b0:31:6a:dc:cf:99:6a:0e:75:74:15:
                    a1:0e:6c:e6:cc:43:d9:7a:7f:3b:7f:d9:97:93:f5:
                    7e:49:dd:c8:fc:7c:fb:a5:04:18:83:f6:c2:14:6b:
                    56:ed:ec:42:aa:6a:6d:26:84:00:25:ad:10:7d:27:
                    66:3c:07:d5:9b:36:9e:0a:47:de:34:6a:22:59:83:
                    e3:71:10:1f:c0:db:de:75:62:d4:72:b0:20:f0:1c:
                    7d:1e:67:d1:c9:48:5d:f9:28:df:4d:ed:0d:77:96:
                    61:c8:2d:ae:66:20:28:1c:3a:4a:cb:81:bd:bf:e9:
                    35:30:e8:3b:33:1b:3c:1b:ab:bc:7b:45:4a:46:79:
                    37:dc:52:b6:3d:2a:79:25:65:a8:2f:c4:cb:9d:54:
                    13:4e:bc:67:12:f0:7e:37:2b:2f:92:1a:06:c8:2a:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FA:17:69:D4:A3:7D:F0:31:C4:89:82:02:37:D2:7A:9F:64:63:2A
            X509v3 Authority Key Identifier:
                keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:73:c1:84:89:4b:02:99:cf:b0:11:b3:6a:3a:aa:12:b3:b6:
         c8:f2:bc:54:8c:c2:22:f0:ad:6e:8f:e0:ca:37:f0:12:96:b9:
         c4:50:07:d6:44:24:c2:a6:f2:b7:b7:fb:11:41:cb:75:2b:ed:
         29:f2:1c:7b:94:4a:9e:e1:04:c7:0c:ec:fd:69:02:f7:2a:48:
         0c:7e:f1:d4:f5:2b:1a:f7:09:e2:bd:38:8b:0a:45:86:a5:be:
         3c:75:07:82:e4:98:28:69:ed:f0:79:32:7d:17:3f:42:c4:f4:
         0b:17:f0:31:93:1f:66:76:47:8c:af:9d:32:1c:1a:c6:2e:2c:
         e0:05:7f:07:f6:36:83:1c:f7:5d:1a:f5:9c:8e:d1:2d:65:7c:
         e7:c2:91:f3:fa:89:19:81:95:60:8b:1d:15:e8:76:32:fd:57:
         15:43:15:26:92:22:03:ad:7f:b4:88:28:d5:3d:17:5c:4d:11:
         21:14:1c:59:cf:5e:21:b8:b7:2b:52:85:e9:ad:83:c4:17:59:
         9f:5d:59:d0:17:f3:5f:0c:d8:25:a5:0f:cb:4c:77:ed:58:8e:
         26:c6:dd:87:c4:4c:32:6e:c7:3e:49:95:b8:13:03:a7:8b:2a:
         02:75:f6:87:cd:98:27:8f:c6:c8:72:4b:de:82:85:d8:aa:88:
         f0:c6:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:40 2025 by rpki-client