Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
File:                     ccZPWbtr45jRfw--bFw8IxxOFXg.mft (raw, json)
Hash identifier:          mEnWNdQuQafCtImyjpOaMkspNy9IznOmdRlWcSSuyCU=
Subject key identifier:   56:6A:51:23:D9:62:86:11:85:E5:12:E6:A0:84:0F:A3:D3:98:56:E5
Authority key identifier: 71:C6:4F:59:BB:6B:E3:98:D1:7F:0F:BE:6C:5C:3C:23:1C:4E:15:78
Certificate issuer:       /CN=F369E201AF/serialNumber=71C64F59BB6BE398D17F0FBE6C5C3C231C4E1578
Certificate serial:       012E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
Manifest number:          012D
Signing time:             Sun 27 Jul 2025 05:02:00 +0000
Manifest this update:     Sun 27 Jul 2025 05:02:00 +0000
Manifest next update:     Tue 29 Jul 2025 05:02:00 +0000
Files and hashes:         1: ccZPWbtr45jRfw--bFw8IxxOFXg.crl (hash: S2Lm6fVA1U1Oiez1mb0HMa7DvqeycmZFXzaMUt3aIYs=)
                          2: E469911A873811EF820368B1762E951A.roa (hash: qS04r/6eawg5wkoo0hUF/y/Lc2S12pQmIndE2YUbUMw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E201AF, serialNumber=71C64F59BB6BE398D17F0FBE6C5C3C231C4E1578
        Validity
            Not Before: Jul 27 05:02:00 2025 GMT
            Not After : Jul 29 05:02:00 2025 GMT
        Subject: CN=6885b2c8-bacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d9:a7:5e:02:a3:dc:47:55:d8:1f:de:e4:97:
                    d3:90:d6:e9:b7:d8:bc:38:47:b8:32:ec:e1:9e:d4:
                    65:f7:34:fb:51:45:e9:d7:f4:02:25:5e:d2:3f:89:
                    41:66:31:60:7f:13:75:1d:04:1f:28:ed:5b:60:20:
                    38:4d:cb:ea:ee:49:3c:fc:f4:4c:f5:3b:54:8d:3a:
                    b0:cb:74:bb:fe:6d:58:9c:fc:92:4b:ed:db:aa:16:
                    fc:c6:3e:8a:15:7f:6a:86:7a:d7:ce:88:a7:7b:2b:
                    49:96:89:46:53:12:83:66:98:21:c9:fa:c0:83:d5:
                    80:0b:1c:8d:f3:87:93:5b:3e:5f:f0:b9:ad:ba:19:
                    12:a4:17:44:ce:4a:4a:48:52:da:d3:46:2a:81:ab:
                    72:b2:e2:3b:cf:e8:0c:c6:4b:cc:bd:36:1f:3b:9f:
                    fe:d3:25:64:fe:2f:17:b6:36:9b:52:70:db:4c:30:
                    23:70:8e:6f:51:1a:42:04:ef:74:c1:41:f0:52:82:
                    a0:78:9b:7c:43:62:a2:34:d0:dc:ce:bc:29:d8:f5:
                    cb:c8:f7:94:04:23:13:e9:4c:f2:e8:29:f2:1e:f3:
                    ba:ce:47:46:bb:51:97:26:ed:1f:10:79:a6:8d:42:
                    9f:20:79:6a:90:d9:46:1e:41:49:d9:49:1b:44:56:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6A:51:23:D9:62:86:11:85:E5:12:E6:A0:84:0F:A3:D3:98:56:E5
            X509v3 Authority Key Identifier:
                keyid:71:C6:4F:59:BB:6B:E3:98:D1:7F:0F:BE:6C:5C:3C:23:1C:4E:15:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:40:69:45:0f:9b:d8:34:39:c6:96:2c:f2:07:e7:72:aa:66:
         02:84:8a:98:79:14:3a:65:e7:4d:15:0b:98:ab:36:39:03:8c:
         29:c8:68:86:42:a7:44:7d:7e:19:3f:a2:72:82:48:49:62:39:
         81:09:ff:b8:5c:14:f2:f1:a1:a9:a6:b6:90:8f:fa:a6:8c:10:
         67:da:f9:f8:b0:f5:13:b6:11:1c:8d:8d:41:4d:ce:72:e5:f8:
         ac:48:a0:85:1f:3e:44:37:a2:42:82:b7:a0:33:12:7a:f8:65:
         81:41:80:33:93:e6:39:61:3e:e4:22:1d:47:c5:2f:c0:32:6b:
         92:83:36:c9:d2:a2:49:8e:23:97:69:15:18:e9:17:0f:ad:26:
         db:0a:57:2f:7a:99:3d:38:f2:ce:c3:40:89:56:64:55:d6:2f:
         23:e3:a4:ff:88:63:1c:cb:9b:b5:42:f4:98:10:6a:84:3b:33:
         96:7e:45:69:7a:7e:6a:24:13:7b:f9:58:9b:df:6f:73:56:1c:
         94:95:41:69:bd:82:6f:e8:f9:e8:2f:95:d1:ea:7f:6a:68:24:
         83:fb:64:4b:08:c3:9f:f0:26:b9:ff:09:84:38:2d:ac:01:ab:
         e7:3d:b0:fb:df:2b:00:ae:e6:81:aa:b0:17:76:e6:dc:dc:98:
         41:a5:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:51 2025 by rpki-client