Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          ICpvFKQLdOALbaFVKOHfXRnutC3U78vNl2TISzKrc7U=
Subject key identifier:   15:6C:B3:F2:CF:8F:A8:91:A2:CC:AD:F3:50:97:CA:DA:73:9E:87:A6
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       0550
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          054E
Signing time:             Wed 04 Jun 2025 02:39:41 +0000
Manifest this update:     Wed 04 Jun 2025 02:39:40 +0000
Manifest next update:     Fri 06 Jun 2025 02:39:40 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: qMcf4ucW+1cd9EWbRhtoVqeJ8eZ54elEhscQz92Pa5Q=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Jun  4 02:39:40 2025 GMT
            Not After : Jun  6 02:39:40 2025 GMT
        Subject: CN=683fb1ed-a5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3b:1e:df:c4:54:16:c1:f5:33:29:3f:31:e4:
                    5f:ca:a8:72:bb:f5:71:c2:f9:26:d5:8f:be:43:99:
                    e7:08:d3:c5:5d:6c:95:18:26:c8:e7:94:0c:92:a0:
                    8a:5d:1b:ee:e0:44:19:f2:c9:9b:19:4c:74:7a:d4:
                    51:32:b6:f2:e6:f4:6e:45:bf:95:58:50:94:be:c4:
                    c3:03:95:f9:6d:2b:d9:f7:43:a5:19:f1:60:a5:a2:
                    14:c9:10:71:34:49:c8:63:b5:c4:55:a6:3c:d6:80:
                    79:6e:6e:19:ea:5a:f0:df:0e:76:3c:e2:11:2b:4b:
                    e4:78:d4:9d:fa:12:95:d4:8f:64:ce:66:da:b2:29:
                    e7:86:2f:f3:78:d9:63:92:b0:59:c0:e2:3e:82:17:
                    46:59:23:82:93:1f:80:94:51:8c:8a:41:9a:ba:04:
                    80:f8:23:d4:7a:2d:f9:22:eb:a8:51:71:ab:11:bc:
                    c4:6b:74:65:c9:85:dc:75:b3:f6:e3:89:ff:34:25:
                    6a:04:ea:01:64:b0:a5:08:be:c1:fe:ef:b5:58:e7:
                    73:6b:ba:68:86:a4:54:d7:51:b2:12:03:c9:08:fb:
                    f9:d3:c8:11:d2:2a:b1:2d:0b:a6:78:5c:eb:0f:04:
                    51:78:21:79:6e:91:7d:3b:ae:ee:79:49:ca:8d:a6:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6C:B3:F2:CF:8F:A8:91:A2:CC:AD:F3:50:97:CA:DA:73:9E:87:A6
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ae:9e:42:16:a3:19:83:f7:92:e1:4d:0b:53:08:d1:6b:5c:
         8e:26:72:65:91:54:64:87:b0:8f:ab:56:fe:43:dd:77:0b:6c:
         d0:40:b5:59:83:2c:33:6b:ca:12:e3:c4:b7:d3:9c:1d:87:db:
         b3:26:c0:39:aa:1c:68:54:4e:25:56:6a:a4:f3:fe:fb:14:09:
         35:8a:3a:fa:0f:08:76:3c:a8:30:46:a3:be:90:7e:e6:42:d0:
         cd:86:77:82:6b:b4:ef:c1:a8:f7:0f:bf:aa:16:5a:b1:42:eb:
         51:dc:0b:48:f1:3e:40:e1:4c:59:76:cb:29:a4:67:e2:5e:74:
         e1:3c:b6:73:b9:c6:2d:5b:43:2a:84:f9:70:94:25:4e:a0:dd:
         16:00:4a:54:13:34:5a:02:4b:19:b0:fc:f1:7d:f7:3e:f0:c5:
         c0:3f:3b:d7:85:23:41:a0:dd:33:fb:1f:d9:95:c6:14:6b:e6:
         fc:09:3c:4b:a7:95:d0:dc:36:5d:50:46:11:7d:1b:e7:9a:a7:
         77:60:cf:10:ea:49:76:38:09:7b:b0:06:ca:1c:7b:2c:7b:88:
         eb:69:f0:4d:3c:e9:c7:0b:90:31:50:d7:10:c9:8e:83:4f:17:
         00:8f:b9:b8:d9:aa:49:55:2d:82:35:65:9b:b1:e6:b2:94:2a:
         7d:55:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:49:17 2025 by rpki-client