Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
File:                     jLiroOzpR3OblerbiB6h0NL_09A.mft (raw, json)
Hash identifier:          L/2CrG+gnmXwu0d+vm+IbaEQ3mcCaRSqAkej06sBgJ8=
Subject key identifier:   74:33:41:8E:76:C9:8B:B2:FD:AA:75:F8:A2:FE:56:F2:6B:7C:BE:F7
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Certificate issuer:       /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial:       0647
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
Manifest number:          0641
Signing time:             Sun 27 Jul 2025 02:16:04 +0000
Manifest this update:     Sun 27 Jul 2025 02:16:03 +0000
Manifest next update:     Tue 29 Jul 2025 02:16:03 +0000
Files and hashes:         1: jLiroOzpR3OblerbiB6h0NL_09A.crl (hash: z+JD/vLoV35tAsE2yI2JzR/CM6zLrPcPYqDw+1Eu2U0=)
                          2: 06B9D42AF61611ECAF0145A7F1222468.roa (hash: ZkZi5c3qAfrGNQ9aUVW0NJoTh+2Y56khQsoX1Uod1CU=)
                          3: 38F20E1CF61611EC85A7D7A7F1222468.roa (hash: J5ZwYpd8zpJJL+YkWJs1rcfStoOYvR7BeBiXX5uQj5U=)
                          4: C90FF62AA8CA11EBBB067F7DF8AEA228.roa (hash: 7gE3ZmR31Vf8XT8pHiCTn2tBLPm5HPmYasDasMsyy0g=)
                          5: EBABDFC0F61511ECA6D8D2A6F1222468.roa (hash: +w3GhW+G1ceqVePvkDmbwEPcqcRRKwBS3GxP2vD4dHk=)
                          6: B74802AEB6EC11EBA8259758F8AEA228.roa (hash: APjLaXV6AoRKGJ3Woce92XxXLC4ufsyIkSG6DvxDn0M=)
                          7: 21659E62F61611EC8A629FA7F1222468.roa (hash: K3H0Xpb9HfTwe5/8TDcO+IS8XACso1/jjmZZmVkGtBc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36997F0AF, serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
        Validity
            Not Before: Jul 27 02:16:03 2025 GMT
            Not After : Jul 29 02:16:03 2025 GMT
        Subject: CN=68858be3-49da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:89:41:47:14:e6:b4:88:35:1d:32:60:d8:
                    f3:e6:8d:50:c5:24:b2:13:ed:3a:e4:1e:ab:17:5b:
                    1d:ba:53:2b:45:d5:84:91:24:84:fa:54:d6:59:db:
                    bf:a0:da:d8:59:31:fa:4d:52:51:53:fe:1e:34:7b:
                    65:6c:18:2a:85:cb:71:54:43:37:30:f2:16:14:c7:
                    d2:50:96:a8:75:7d:b5:c3:ac:31:6f:d6:ad:ac:b3:
                    45:99:60:cc:90:39:37:40:59:4b:fc:04:cd:72:88:
                    22:e1:e8:51:22:f7:18:3a:3c:03:54:4b:6e:f1:11:
                    dd:15:d4:70:1e:36:62:b8:a0:b3:2a:62:e2:2e:97:
                    41:bb:c8:78:ce:08:2c:22:1f:66:db:b6:49:05:3a:
                    d7:3e:87:df:33:e1:2b:e1:c1:38:36:b3:d9:d4:48:
                    7b:7e:d0:7b:2f:43:7a:19:80:d2:ae:55:df:93:5e:
                    78:d5:b3:55:86:22:69:3c:f6:f7:7b:45:72:07:c2:
                    09:59:e5:08:bd:00:69:d8:92:99:2d:8e:be:58:3d:
                    0b:a5:82:87:22:c9:13:19:c8:5c:6b:46:e5:e6:4f:
                    d0:ce:a5:da:de:8e:08:33:78:58:e1:08:85:26:9d:
                    5c:49:61:c3:78:ab:72:fc:e3:b6:23:33:00:15:59:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:33:41:8E:76:C9:8B:B2:FD:AA:75:F8:A2:FE:56:F2:6B:7C:BE:F7
            X509v3 Authority Key Identifier:
                keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:07:f0:11:51:3b:2d:8a:10:b4:4f:3b:89:e3:ec:f6:c9:25:
         6c:af:60:be:7b:e4:32:d3:85:3d:a5:c2:5b:ce:20:c5:f9:df:
         96:c7:9a:0c:e1:5a:31:5f:56:e8:7a:fb:7e:4d:aa:5e:13:0a:
         8c:97:a5:30:d6:8e:ac:72:e8:da:75:6c:ab:17:31:2d:8b:cd:
         d2:18:a0:a3:6d:5e:2f:18:a9:23:c8:94:fe:b7:5d:06:fa:e0:
         7b:6c:c2:b5:7c:e7:52:33:5c:28:7d:e9:a9:a2:f7:37:71:ed:
         d5:98:e7:65:69:c7:23:30:0d:35:ba:5d:84:07:3e:24:57:8b:
         4a:10:e2:fc:85:e9:f7:09:e2:ae:6a:aa:40:ea:c1:39:1e:b9:
         bb:bc:61:aa:f5:78:18:4b:01:ce:17:16:3f:93:05:00:fd:1b:
         93:b4:e5:a0:de:f6:f0:6f:34:37:5e:98:1e:a1:e9:f9:01:34:
         1b:dd:c0:7c:c4:9e:42:d7:f3:56:52:b7:b2:a8:c3:0c:6f:8c:
         b8:ea:4f:49:13:60:85:ac:0c:b5:fe:8c:0d:d5:e5:73:18:fc:
         eb:eb:68:c6:e6:d0:79:99:24:8f:04:fb:18:fa:8b:8a:12:32:
         2c:06:aa:c0:1a:76:01:31:ba:1f:b4:67:d3:20:8b:ca:8c:e8:
         dd:73:5a:ee
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk3RjBBRjExMC8GA1UEBRMoOENCOEFCQTBFQ0U5NDc3MzlCOTVFQURCODgxRUEx
RDBEMkZGRDNEMDAeFw0yNTA3MjcwMjE2MDNaFw0yNTA3MjkwMjE2MDNaMBgxFjAU
BgNVBAMTDTY4ODU4YmUzLTQ5ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOUIlBRxTmtIg1HTJg2PPmjVDFJLIT7TrkHqsXWx26UytF1YSRJIT6VNZZ
27+g2thZMfpNUlFT/h40e2VsGCqFy3FUQzcw8hYUx9JQlqh1fbXDrDFv1q2ss0WZ
YMyQOTdAWUv8BM1yiCLh6FEi9xg6PANUS27xEd0V1HAeNmK4oLMqYuIul0G7yHjO
CCwiH2bbtkkFOtc+h98z4SvhwTg2s9nUSHt+0HsvQ3oZgNKuVd+TXnjVs1WGImk8
9vd7RXIHwglZ5Qi9AGnYkpktjr5YPQulgociyRMZyFxrRuXmT9DOpdrejggzeFjh
CIUmnVxJYcN4q3L847YjMwAVWbS1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdDNB
jnbJi7L9qnX4ov5W8mt8vvcwHwYDVR0jBBgwFoAUjLiroOzpR3OblerbiB6h0NL/
09AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5N0YwLzQyODU3RjA4QThDQTExRUI4NzdGRDA3Q0Y4QUVBMjI4L2pMaXJv
T3pwUjNPYmxlcmJpQjZoME5MXzA5QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pMaXJvT3pwUjNPYmxlcmJpQjZoME5MXzA5QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTk3RjAvNDI4NTdGMDhBOENBMTFFQjg3N0ZEMDdDRjhB
RUEyMjgvakxpcm9PenBSM09ibGVyYmlCNmgwTkxfMDlBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEB/ARUTstihC0TzuJ4+z2ySVsr2C+
e+Qy04U9pcJbziDF+d+Wx5oM4VoxX1boevt+TapeEwqMl6Uw1o6scujadWyrFzEt
i83SGKCjbV4vGKkjyJT+t10G+uB7bMK1fOdSM1wofempovc3ce3VmOdlaccjMA01
ul2EBz4kV4tKEOL8hen3CeKuaqpA6sE5Hrm7vGGq9XgYSwHOFxY/kwUA/RuTtOWg
3vbwbzQ3Xpgeoen5ATQb3cB8xJ5C1/NWUreyqMMMb4y46k9JE2CFrAy1/owN1eVz
GPzr62jG5tB5mSSPBPsY+ouKEjIsBqrAGnYBMboftGfTIIvKjOjdc1ru
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:43 2025 by rpki-client