Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
File:                     bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft (raw, json)
Hash identifier:          KyWASHwj+PwD7k+D5C5XOfEpKZ/o2aqc2Bi8aNwn9/A=
Subject key identifier:   70:F1:71:10:CF:70:54:A3:79:C4:85:95:6A:22:F4:39:2B:55:B8:28
Authority key identifier: 6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
Certificate issuer:       /CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
Certificate serial:       063D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
Manifest number:          063C
Signing time:             Thu 03 Apr 2025 01:33:12 +0000
Manifest this update:     Thu 03 Apr 2025 01:33:11 +0000
Manifest next update:     Sat 05 Apr 2025 01:33:11 +0000
Files and hashes:         1: bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl (hash: bJGtcgOTeyQ8NqWCQc+rbFD6rKpl7Vd1Idf1euxwewk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B918AF
        Validity
            Not Before: Apr  3 01:33:11 2025 GMT
            Not After : Apr  5 01:33:11 2025 GMT
        Subject: CN=67ede558-fa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:9e:cd:a8:a2:a8:d8:9a:cd:7b:96:61:4c:
                    76:02:2b:fc:d3:16:41:93:25:c9:2c:95:21:1e:85:
                    d8:f5:63:e5:7f:28:67:15:dc:7f:55:57:4b:21:84:
                    cb:00:cb:7f:c3:e2:5a:e6:1d:f2:17:0f:07:a1:b9:
                    c0:f0:e4:b3:5a:c0:75:c7:1c:87:13:92:4d:30:6b:
                    5f:14:41:c0:59:c4:a8:21:f7:69:09:11:fc:dc:91:
                    0e:a4:68:d5:6f:49:d6:86:ef:c7:7a:d3:87:68:7a:
                    67:07:99:7b:d4:2d:ba:86:30:8a:81:34:55:f8:f9:
                    7b:12:39:13:3e:55:e8:ae:93:9a:55:66:f2:e4:62:
                    ef:ee:6e:b6:0c:f3:73:f6:a5:21:c1:fc:85:8c:b0:
                    57:7d:fe:95:f5:0b:58:74:80:c0:67:8c:00:78:83:
                    81:2f:e2:00:dd:f4:10:dd:e5:d7:06:40:44:d5:56:
                    33:45:c4:48:66:93:84:b6:41:80:92:30:3f:0e:25:
                    3b:2d:03:fe:de:87:46:03:a3:1e:13:52:68:3a:94:
                    c7:07:c7:d3:f5:b5:ee:91:69:d8:02:9e:9a:2d:25:
                    f1:79:f9:ef:8a:c6:62:d9:95:c1:4e:48:4c:e7:de:
                    73:8e:fa:8a:0e:ca:28:31:00:81:e6:d1:c7:51:21:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:71:10:CF:70:54:A3:79:C4:85:95:6A:22:F4:39:2B:55:B8:28
            X509v3 Authority Key Identifier:
                keyid:6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:52:27:93:15:b5:9f:73:86:5d:96:2f:94:2c:d8:25:ff:
         f2:fc:e8:3e:72:9a:8d:29:39:eb:56:c6:1e:d7:84:99:0e:36:
         56:01:d5:e9:29:df:40:f2:66:da:d3:63:15:dc:a7:8d:b9:68:
         04:ef:3a:73:b5:04:49:ff:50:13:30:cb:e3:46:ae:5e:37:e7:
         4d:70:2d:04:58:8f:ea:25:01:c5:cf:93:bf:a8:19:00:74:6a:
         8f:c2:d5:46:1b:7b:6f:e4:64:2a:5c:8c:7c:eb:b8:92:fa:79:
         c7:59:f1:f3:64:3b:1d:b1:f5:16:8c:d1:f5:23:56:9a:b1:e0:
         32:43:b7:94:ea:bf:53:a7:e1:be:41:97:63:1d:23:ab:83:a5:
         ae:f5:cf:73:4b:b6:73:71:31:7c:63:ba:3c:a8:c7:2b:f7:ce:
         fb:eb:ab:cd:95:00:07:e0:2f:b9:59:dc:23:5a:5d:f2:0d:f8:
         b8:e8:ef:06:2e:b8:70:51:1e:1a:46:a6:e0:b0:62:b7:3d:4c:
         eb:03:99:c7:8e:21:1f:3d:4a:b9:fc:4e:23:2b:78:06:ee:8d:
         6a:e6:07:88:85:a1:3f:a5:2b:9b:58:b9:fb:0f:40:aa:51:2a:
         f1:dd:b1:e5:7c:2f:13:6a:04:09:0f:42:09:99:8c:97:1a:78:
         51:b4:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:14:36 2025 by rpki-client