Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File:                     JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier:          0act2XQRb+vC6HmJNqfAtuj0GBNuJkjDYYctzxHxZXs=
Subject key identifier:   8C:E5:78:CF:96:FA:FA:19:E4:72:9E:18:7D:C2:64:B6:91:73:19:93
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer:       /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial:       04AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number:          04AD
Signing time:             Sat 07 Jun 2025 02:54:19 +0000
Manifest this update:     Sat 07 Jun 2025 02:54:18 +0000
Manifest next update:     Mon 09 Jun 2025 02:54:18 +0000
Files and hashes:         1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: Tj88k8JhKlVQXiT8lNCSg+QZxTfzO6M393NlTTRBSMc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFD9AF, serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
        Validity
            Not Before: Jun  7 02:54:18 2025 GMT
            Not After : Jun  9 02:54:18 2025 GMT
        Subject: CN=6843a9db-65aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:af:06:a7:a8:e0:4e:5c:46:eb:2c:96:e7:
                    fa:bd:78:61:c9:76:d6:0c:5e:a4:44:42:c2:37:1b:
                    e3:79:c9:e2:f8:b0:c4:ae:93:31:e2:60:99:7b:56:
                    88:ad:39:63:29:62:58:40:94:bf:0a:ef:ee:74:31:
                    2f:08:18:a4:d1:56:67:c1:59:d5:00:a5:a5:0d:85:
                    f2:dd:84:1f:85:07:a9:d5:01:a9:e8:40:de:be:0e:
                    4e:7b:18:62:d4:e7:bb:9b:1e:dd:e4:98:57:98:42:
                    61:fd:ba:95:dc:c5:66:46:2b:13:52:21:ac:c1:d0:
                    45:66:74:dc:cc:88:77:70:1d:ac:3b:27:98:69:ea:
                    74:f2:b2:a9:01:a7:c3:3f:b3:03:06:40:92:87:e0:
                    97:aa:11:0d:6a:d0:c6:38:07:5d:df:fd:9d:c4:7f:
                    15:6b:d8:5b:70:9a:98:73:e1:f9:75:e8:66:a7:29:
                    64:90:01:32:30:e5:0d:a2:96:0f:f8:58:10:3e:3e:
                    97:67:33:78:e0:ec:b5:7b:b7:38:2b:98:3a:f5:d9:
                    12:69:f5:f3:fd:0b:8d:ff:c8:43:e6:86:61:a6:12:
                    cf:16:87:0a:50:4c:3a:74:28:b7:d6:20:77:ce:da:
                    79:c0:e8:29:3c:bd:0b:64:8e:e6:32:f4:c6:11:a0:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E5:78:CF:96:FA:FA:19:E4:72:9E:18:7D:C2:64:B6:91:73:19:93
            X509v3 Authority Key Identifier:
                keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:91:1e:84:3c:88:5b:d9:2c:d1:f6:0b:61:d6:ec:28:67:ae:
         d9:c2:19:a1:48:04:37:d3:5b:a7:57:0e:10:53:fd:3e:42:94:
         47:1f:1a:42:87:2d:19:68:a7:6d:bc:07:db:0d:7d:2f:ea:4a:
         02:1c:48:d4:2d:c9:8e:d9:6b:f2:d9:bf:d7:20:d5:1f:23:f1:
         8b:76:bf:e9:87:99:d1:4e:50:a5:b6:2e:24:53:41:ff:a1:3a:
         9a:97:2d:35:c1:ff:5a:ba:15:ef:97:2a:eb:e1:e2:3e:0d:93:
         34:fe:00:d5:b6:42:5c:95:ac:e8:38:bb:1d:66:c2:1f:e3:1b:
         64:da:c2:c2:a4:c3:b6:eb:e2:fb:6e:3c:c4:30:df:02:3b:b8:
         f2:7a:42:61:66:01:cd:00:7a:23:ad:c5:08:44:e2:76:c8:3f:
         33:ac:c2:e3:70:2f:4b:3c:a5:4d:53:fb:35:3b:6c:5f:60:ab:
         c0:7c:85:89:de:1e:8f:a9:bf:de:db:94:eb:c8:40:4f:f1:8a:
         74:40:ea:42:85:8e:75:62:66:76:50:b3:18:b7:f2:87:7a:8d:
         a7:dd:f2:fd:ec:f7:1c:49:e1:c7:6e:4d:e1:94:e2:61:ed:e9:
         0a:e2:9d:77:ce:22:f1:0d:93:86:a4:3a:30:41:f3:5f:16:f8:
         1d:a8:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:22:58 2025 by rpki-client