Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
File:                     Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft (raw, json)
Hash identifier:          eICrrrcAZXQ6Efcgvs+v/lGQtnpyZfPIq4AAwd4Zh/s=
Subject key identifier:   B1:DE:55:4E:FF:E8:5B:20:7C:BD:97:AB:F5:95:ED:D7:40:4C:12:D1
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Certificate issuer:       /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial:       01DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
Manifest number:          01DE
Signing time:             Thu 31 Jul 2025 04:37:52 +0000
Manifest this update:     Thu 31 Jul 2025 04:37:51 +0000
Manifest next update:     Sat 02 Aug 2025 04:37:51 +0000
Files and hashes:         1: Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl (hash: vKa26rI8WrViXO1hSiKKeEodREL3tbLDov+5A7eOnXQ=)
                          2: 3F101946015F11EFB16E3011017001B1.roa (hash: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C49AAF, serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
        Validity
            Not Before: Jul 31 04:37:51 2025 GMT
            Not After : Aug  2 04:37:51 2025 GMT
        Subject: CN=688af320-a9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:ee:66:e3:4c:63:22:c3:6d:30:26:bf:62:
                    b2:4b:07:8e:ba:8a:07:c6:39:20:66:47:6b:c2:22:
                    2d:0e:89:a3:54:df:dc:fe:4a:ac:ee:58:a0:53:6e:
                    ed:f5:8d:79:f4:d7:19:0b:29:61:98:09:6e:1e:75:
                    6e:07:ab:0d:43:f0:36:62:42:50:be:c5:d2:83:19:
                    d1:05:23:8e:28:ec:02:c0:f9:48:a6:55:04:a3:9d:
                    0e:3c:92:34:a5:32:74:22:12:fa:ef:09:5f:49:61:
                    4b:5f:a1:3e:8b:05:be:31:cf:3a:09:05:ab:29:7e:
                    52:e1:f7:dd:bc:f7:2e:b6:76:b5:60:ff:38:85:8f:
                    46:7c:ba:6f:79:41:08:37:64:05:8f:26:01:7a:6d:
                    4e:d3:c2:6e:83:84:5e:e9:ae:66:b1:82:bf:4f:0a:
                    da:94:2a:48:29:ae:6e:40:46:88:c5:39:94:8b:cc:
                    7c:fc:bd:db:43:43:22:38:27:54:f5:2f:d7:74:e9:
                    7a:5d:f4:0b:0f:c2:17:41:f6:a9:e3:13:1f:36:0f:
                    ed:de:78:a9:9b:6a:7e:de:bd:c9:04:83:de:d8:db:
                    bd:ff:5f:4e:4a:a2:09:4e:09:b3:d0:0a:2e:a9:15:
                    eb:88:57:b7:4a:10:66:09:c9:de:b8:40:7a:12:64:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DE:55:4E:FF:E8:5B:20:7C:BD:97:AB:F5:95:ED:D7:40:4C:12:D1
            X509v3 Authority Key Identifier:
                keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f7:e9:22:2a:c1:68:eb:92:98:dc:c3:e4:2b:0e:18:11:fd:
         65:46:11:41:8f:7d:93:48:9e:2a:c6:e4:81:a1:cb:11:d4:7e:
         08:28:80:c0:54:2b:c3:bf:24:97:d8:d2:a6:1d:38:f7:02:39:
         83:55:f1:fb:67:ce:54:ef:4f:a0:0c:68:4f:12:10:f7:bf:a0:
         d7:15:b6:fd:b6:77:a0:a4:62:0c:de:da:84:a2:e3:1e:0a:1b:
         ff:e0:ab:a3:b3:7f:30:01:16:d0:2d:bd:7c:5b:59:3f:26:55:
         6c:1d:35:67:2f:8c:c4:ea:de:b1:08:8c:ed:d1:62:d4:63:2e:
         54:7c:ef:ef:dc:fe:1d:86:7d:8b:4e:b9:e1:c1:63:0f:51:f3:
         51:76:88:5a:e6:83:60:fc:0f:55:3a:cc:7f:c7:bf:80:b4:77:
         34:12:7f:ce:59:0a:2e:b3:0b:a0:29:84:a1:8f:02:4c:a3:53:
         65:5d:6c:80:d6:94:69:fb:c5:ba:ab:c8:bc:5b:c5:b4:8e:e9:
         20:90:af:26:28:13:23:0a:d8:07:ea:c1:39:1d:e9:c5:da:0a:
         4d:7f:c7:1a:85:28:70:f9:19:97:3a:36:ad:10:4e:10:0b:5d:
         91:02:10:0c:8d:39:13:2d:72:fb:a0:aa:a0:25:ad:a9:dd:2e:
         1d:9b:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:21:55 2025 by rpki-client