Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
File:                     J8yUlEs4mAyi4IYqXfxE2GQEF88.mft (raw, json)
Hash identifier:          xz0aitJGt95VfNtNQIDymygB5JMLnCDirBGGwChmlVk=
Subject key identifier:   40:18:04:37:C9:37:C4:20:5E:B3:4D:C6:1A:01:91:1A:8E:90:6A:B6
Authority key identifier: 27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Certificate issuer:       /CN=F3698401AF/serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
Certificate serial:       02F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
Manifest number:          02F2
Signing time:             Thu 03 Apr 2025 02:26:37 +0000
Manifest this update:     Thu 03 Apr 2025 02:26:36 +0000
Manifest next update:     Sat 05 Apr 2025 02:26:36 +0000
Files and hashes:         1: J8yUlEs4mAyi4IYqXfxE2GQEF88.crl (hash: 5Hy4azvg/h4HmfrJ1bBECHuOdl0w7hAocIalawofwXs=)
                          2: 35441182D53311ED963F8F99F1222468.roa (hash: gr96mVOMzkU8Q9PplUdoOUbnlh56hiVDAqPFQPickwU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698401AF
        Validity
            Not Before: Apr  3 02:26:36 2025 GMT
            Not After : Apr  5 02:26:36 2025 GMT
        Subject: CN=67edf1dc-7107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:7c:4a:f9:d9:8f:9f:0e:fb:dc:da:30:2d:
                    7b:bb:c5:3c:77:5a:57:ac:c4:53:05:7d:15:fb:34:
                    95:ef:09:86:4d:4b:88:b6:75:07:d0:a9:58:40:f0:
                    5b:6b:5b:1b:2e:ec:93:3c:ce:8f:fa:2c:4d:94:ab:
                    e3:49:15:56:d0:4c:3c:dc:ca:3e:1e:4c:cc:07:4b:
                    ad:04:33:3d:2b:34:4b:0c:14:b4:84:32:fb:c2:d8:
                    20:51:3c:7f:d7:b0:2d:22:96:42:4e:a3:54:8a:00:
                    f6:f7:b9:a2:2a:15:41:f7:e7:7c:62:95:1f:c1:5c:
                    79:9f:15:8d:b1:10:03:97:66:f5:85:5b:ae:7d:a1:
                    fe:1c:7e:8d:06:3d:9f:6e:dd:8d:b6:c0:b3:5b:0c:
                    f4:7c:8d:3b:e7:74:87:8a:b6:28:ef:92:3b:7f:a3:
                    e3:bf:17:92:46:c9:be:54:36:bb:c4:38:8f:7a:86:
                    2f:7e:e6:80:b2:22:4b:2e:4b:fa:57:7a:1a:7e:d3:
                    aa:1d:49:e0:ec:d5:31:e8:6d:00:14:72:69:85:6f:
                    42:d5:1b:94:ed:84:ab:c7:52:b1:0a:90:95:fe:a5:
                    7a:bc:8c:ac:80:61:6b:93:69:d0:91:d1:3a:a1:03:
                    9a:43:c9:fd:e4:28:da:3d:24:6a:d5:9e:f7:f7:af:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:18:04:37:C9:37:C4:20:5E:B3:4D:C6:1A:01:91:1A:8E:90:6A:B6
            X509v3 Authority Key Identifier:
                keyid:27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d5:bf:60:e8:c2:a0:e5:46:fd:0e:5d:0e:3a:d1:fb:19:92:
         3f:f5:fe:19:e7:b2:7c:15:33:04:6c:88:61:80:7d:53:e7:64:
         0a:70:c1:d9:ef:66:da:d6:1e:26:00:f9:6c:54:91:b9:e8:e0:
         f3:f1:f9:36:04:b2:4c:d1:27:fb:0f:d8:bd:98:d1:6f:a0:6a:
         77:a6:89:ae:91:cc:4a:7d:08:90:ca:3e:77:5f:ad:09:b3:d1:
         73:fa:49:74:87:62:f6:25:eb:02:f2:e7:06:e2:fa:b7:c1:a9:
         5d:72:97:67:a6:8b:ff:f6:b1:3e:5e:83:6e:b3:6d:cc:eb:eb:
         63:e2:e8:44:69:02:6d:29:a3:84:d3:01:2a:2b:50:77:1a:86:
         48:c6:f6:c2:77:58:87:c6:20:23:1e:10:23:a4:ae:a2:e7:81:
         53:cf:ef:0d:95:e0:97:df:c8:8c:43:6e:4f:ef:d6:41:05:aa:
         44:b1:d6:77:00:79:5c:b9:78:75:e1:22:9e:de:36:13:d3:86:
         8f:87:81:ce:53:80:e9:91:6d:c6:63:89:b6:2b:18:5a:69:a4:
         26:60:7a:29:fe:14:38:49:6c:81:2d:13:f2:c6:3f:de:42:84:
         3a:1a:12:05:42:e4:d3:d7:43:2d:e1:39:74:94:ac:cd:6e:75:
         6d:b3:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:42:34 2025 by rpki-client