Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
File:                     X-MxcqYILFSryRHxn1edSf2AmBQ.mft (raw, json)
Hash identifier:          2aik8CGxR2cun9Xc4OJ09hoF04bNevxdzKXyk+D/Prg=
Subject key identifier:   26:59:CE:11:80:BB:09:42:A1:36:25:CD:B2:F5:63:DF:B9:70:3B:66
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Certificate issuer:       /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial:       05D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
Manifest number:          05D2
Signing time:             Thu 03 Apr 2025 01:38:38 +0000
Manifest this update:     Thu 03 Apr 2025 01:38:37 +0000
Manifest next update:     Sat 05 Apr 2025 01:38:37 +0000
Files and hashes:         1: X-MxcqYILFSryRHxn1edSf2AmBQ.crl (hash: 5U9olUlBgw4sHT92Kk+LTWoTtfKXTVfODVaGpSu1frQ=)
                          2: AEEE236EC67911EEAD12F8AE775412E6.roa (hash: T0oca2AEcgFcrK1PsYZJPTBdlzaX1LQylDi6J2hgcIM=)
                          3: 74F314B2C67911EEB6CAC8AE775412E6.roa (hash: yQ5Y5mos3jGJ876UZawgqxeARaqaofzDLCBHBUrxZE4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690793AF
        Validity
            Not Before: Apr  3 01:38:37 2025 GMT
            Not After : Apr  5 01:38:37 2025 GMT
        Subject: CN=67ede69e-d811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:4d:71:4e:5e:3d:4a:c1:02:d6:cb:48:c5:
                    4a:b0:44:9a:3b:cb:fa:20:6c:3b:98:eb:b9:84:ca:
                    cd:3c:5b:7d:5d:ac:b3:48:40:01:3d:a4:d4:f5:9d:
                    30:50:dc:96:45:41:47:79:fb:7e:0e:bc:60:9f:ea:
                    ea:44:71:da:93:4f:b8:29:10:e4:4b:8f:98:af:a5:
                    cc:f9:df:9d:a6:17:a7:73:61:16:65:75:ca:1a:cb:
                    10:02:98:07:a6:db:2f:af:e8:97:7c:a5:c6:3b:21:
                    43:3e:ac:e1:04:04:92:48:27:89:11:ae:31:19:25:
                    f1:39:89:18:b2:6d:a2:c6:c8:15:55:e6:d2:09:0e:
                    64:15:38:50:11:91:7d:8d:be:74:58:b3:16:b9:e8:
                    e1:b5:6b:89:cd:11:08:df:f0:0b:ef:8c:2c:f7:e7:
                    9c:83:86:5f:2f:2b:f6:7f:f2:d6:c9:68:3c:71:7c:
                    27:50:26:10:29:7e:5c:93:35:19:22:6a:20:36:8a:
                    3e:aa:cb:12:d2:e3:cd:a3:0a:79:4c:37:a7:11:14:
                    9a:f8:7e:d9:59:45:66:d2:f0:01:fb:22:14:09:cd:
                    a4:1c:7f:f8:a0:59:90:18:11:e8:a9:00:04:39:62:
                    f5:dd:a8:7a:c9:96:2d:6a:e9:ae:84:a4:f1:3c:de:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:59:CE:11:80:BB:09:42:A1:36:25:CD:B2:F5:63:DF:B9:70:3B:66
            X509v3 Authority Key Identifier:
                keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:c5:1d:43:05:37:5c:32:74:8d:0d:9d:a7:d4:4d:96:55:
         22:f7:99:74:d0:9f:c1:e8:56:b9:5e:b7:0d:59:d9:2c:4b:b9:
         4d:b6:96:ae:04:1a:a6:2c:31:67:a2:66:98:a4:47:0d:ba:87:
         09:f9:0d:8c:52:36:2f:ac:14:fc:7c:5a:8c:1e:74:1c:28:88:
         81:c1:21:56:f0:f4:34:58:d5:6b:3f:fe:4c:34:42:37:5c:71:
         3d:ed:02:b8:17:ca:4c:c8:df:7c:58:4e:f2:51:a3:d3:9a:a4:
         eb:fd:da:aa:8a:35:b8:bb:d5:ca:e1:2d:40:b1:98:af:e5:dc:
         9c:2b:4a:2e:9f:3c:e0:26:0f:f9:a8:82:53:19:da:08:3c:a1:
         e6:37:aa:41:d2:0c:cc:54:dd:76:68:19:16:1e:b0:11:90:f4:
         d2:23:eb:1e:f3:96:f5:3b:01:e7:6e:b8:83:12:8a:48:10:57:
         0e:da:f5:2a:ed:63:55:c2:ae:09:4c:1b:85:4d:5a:f7:31:67:
         37:10:cf:6f:3f:44:56:31:f1:16:30:15:f7:c1:ae:42:3b:cd:
         e7:de:2a:49:3b:dd:6a:fd:68:5d:b6:ad:2d:62:5b:78:b6:4d:
         61:b0:51:c5:be:2b:af:f7:89:f3:2b:3b:3d:0d:ba:33:b2:b3:
         33:40:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:41:43 2025 by rpki-client