Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File:                     IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier:          N/MtINCXDN+HIb6anmxAEdirK8qjHmSXhxd3aPf+EYY=
Subject key identifier:   61:80:DB:0F:02:9C:B9:2E:1A:FE:ED:51:CF:DF:46:CE:5E:81:9E:54
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer:       /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial:       B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number:          AF
Signing time:             Sun 16 Feb 2025 03:13:40 +0000
Manifest this update:     Sun 16 Feb 2025 03:13:39 +0000
Manifest next update:     Tue 18 Feb 2025 03:13:39 +0000
Files and hashes:         1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: UowsHfsQgKKJ0/JuR81udQS9bDN6+PGx/bCnBeR9RqU=)
                          2: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C3F1AF
        Validity
            Not Before: Feb 16 03:13:39 2025 GMT
            Not After : Feb 18 03:13:39 2025 GMT
        Subject: CN=67b157e4-6571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:20:62:9b:40:9f:c5:c6:1f:b1:c7:11:4b:
                    82:66:5d:6d:ba:6a:87:74:9d:97:04:57:44:37:e1:
                    ea:ac:41:e0:18:e3:40:a0:5a:c1:9f:07:3e:55:f3:
                    5e:17:34:a8:a0:6e:9a:38:f2:c2:8f:41:ec:12:4d:
                    bb:b3:f0:f3:f1:1e:37:a3:5c:b3:c2:e5:23:44:d5:
                    d3:bb:e0:b2:2f:51:13:87:f9:9b:47:ec:07:2c:1d:
                    74:b4:89:03:e7:21:82:93:9f:4b:52:37:57:36:40:
                    57:a6:01:89:9a:01:6d:89:aa:af:a0:ea:5d:ea:17:
                    71:48:de:33:a0:e6:7c:58:8f:d7:a4:ac:db:64:0d:
                    af:17:f4:bd:8c:0a:37:44:ba:8a:28:20:23:d8:22:
                    7a:47:6b:ba:10:14:a2:e1:02:f1:08:c3:14:33:ee:
                    05:49:a3:f3:71:81:11:97:fb:93:cc:2e:22:e3:58:
                    d0:94:d2:e6:46:f3:5a:6f:4e:11:e7:b1:97:66:1e:
                    65:d0:9f:c1:fe:ac:bc:f1:24:c4:56:6b:7c:05:b2:
                    77:92:bb:77:14:0d:fa:e1:c9:78:20:ad:77:e5:45:
                    a6:5f:86:aa:e5:07:84:9f:f7:c3:35:cf:e0:f7:c0:
                    cb:de:53:bb:27:a2:ee:71:75:66:e1:84:52:98:a7:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:DB:0F:02:9C:B9:2E:1A:FE:ED:51:CF:DF:46:CE:5E:81:9E:54
            X509v3 Authority Key Identifier:
                keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:67:cd:ec:87:7d:ce:a2:bf:e4:03:f3:19:b1:42:e0:39:c9:
         78:3e:cf:9e:b6:70:97:bc:67:fc:ab:1a:83:70:05:54:53:8b:
         6c:f5:1d:f3:1a:0b:ab:45:4c:ac:fe:ce:a2:98:db:2d:97:5b:
         97:3a:10:d1:0f:f4:72:08:02:6c:88:4e:c5:5f:5a:ec:de:0f:
         0e:0a:86:f2:c3:f0:3e:30:b9:43:f1:d9:f0:db:19:7c:ee:f0:
         a4:62:ad:50:ce:26:d2:01:6f:82:dc:ec:52:85:17:77:cd:d5:
         05:c4:0c:e7:aa:12:64:7a:0e:72:ba:9b:82:71:1e:d3:18:99:
         0d:68:0d:e3:75:44:35:33:a3:7d:95:2a:68:f3:7a:d9:d2:0b:
         b2:8c:27:70:29:42:81:ce:bc:1e:8a:03:8e:b8:e7:55:b7:b2:
         1b:d5:a5:d1:98:01:36:af:9c:ab:75:af:29:7a:ba:6e:8c:dc:
         68:eb:c6:7b:d8:a8:7c:61:f0:d0:dc:c6:e8:27:17:e4:c6:ae:
         5e:4e:f1:8f:bf:fc:52:3e:26:60:22:fb:bb:ed:5f:b6:40:0b:
         2d:94:ff:76:30:9a:16:70:c9:a3:e2:45:0a:5f:cb:17:f7:8b:
         f1:d8:43:45:f0:c2:58:49:2e:e3:7b:9c:7c:74:f4:a3:f7:18:
         40:aa:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:30 2025 by rpki-client