Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
File:                     x2kBfEr3fF65-LyEaI2IawFQMjo.mft (raw, json)
Hash identifier:          vd1MAyWkkvkUY6QaqtmHlsxh6X90wwN1t1mx4sKI7JQ=
Subject key identifier:   7C:40:FB:26:C0:09:17:B7:A7:AF:3C:95:F3:20:93:82:31:71:52:70
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Certificate issuer:       /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial:       03BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
Manifest number:          03B6
Signing time:             Sat 07 Jun 2025 03:23:27 +0000
Manifest this update:     Sat 07 Jun 2025 03:23:26 +0000
Manifest next update:     Mon 09 Jun 2025 03:23:26 +0000
Files and hashes:         1: x2kBfEr3fF65-LyEaI2IawFQMjo.crl (hash: OpPZ/xxyTaNLe55Sa6YmkuqpaUHZNNcqj1yT0o+xh4o=)
                          2: 72225BFEA05C11EFA3BA68B5762E951A.roa (hash: ptoIi4ERlN82BasAiG/RRS1jzH5R046ZZLHto70J/kQ=)
                          3: B6F83C207D4111ED99A5A8DEF1222468.roa (hash: Z4JFecH0Pxw3ortmqmh93AEMH7ET0Xm0pVB1yg4vYI0=)
                          4: 6F61D56CD3F011EF874D80BD762E951A.roa (hash: aQ5eotveqGJrhssXyUfqPg5E0r4EtEOvK2qBBQ8Oc9Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 03:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
        Validity
            Not Before: Jun  7 03:23:26 2025 GMT
            Not After : Jun  9 03:23:26 2025 GMT
        Subject: CN=6843b0af-1ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:5f:09:b0:ea:f4:c2:df:12:83:2e:a3:fe:
                    05:43:96:de:16:86:4a:f6:f3:8b:9d:28:88:02:77:
                    f9:10:ae:18:8e:e5:08:e5:0c:ff:ec:ab:d0:44:18:
                    b2:d6:71:ce:ef:47:a7:b0:dc:4e:61:0f:8f:6f:b9:
                    70:b7:a1:30:c1:5a:ce:e2:1f:db:dc:f2:d2:42:13:
                    a8:f1:d1:6c:30:ee:32:da:9e:83:ac:ca:b7:7d:e5:
                    b6:e2:b5:83:c5:35:07:e3:0f:d6:be:7d:13:44:9a:
                    40:c3:ce:d6:c6:79:36:8e:d0:9e:77:76:e6:b4:3e:
                    27:28:ab:8c:da:69:75:ef:d7:e9:3d:49:3f:c7:d8:
                    89:07:2c:ac:b1:43:8c:e3:df:b5:40:ef:e5:4f:15:
                    f7:e0:bf:3c:26:20:56:07:4a:35:ee:a0:08:a1:75:
                    0a:e8:ac:1c:ec:e3:e1:bb:9b:1a:9e:03:23:b0:74:
                    bd:30:1c:73:f3:69:79:bd:3d:d8:12:d2:0f:3d:aa:
                    be:61:2d:04:04:e3:07:b6:3a:2d:01:6e:27:02:e3:
                    35:58:a1:78:a5:d3:c7:c2:8f:39:d4:8f:a5:7d:fb:
                    16:c2:9a:ce:c3:a8:be:63:eb:f8:94:5f:c4:db:f5:
                    55:c0:fc:b8:4a:f5:1b:ce:9e:f4:8e:33:9b:42:62:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:FB:26:C0:09:17:B7:A7:AF:3C:95:F3:20:93:82:31:71:52:70
            X509v3 Authority Key Identifier:
                keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:84:d5:ba:9b:94:d0:c1:9c:67:0a:91:76:18:34:9e:cd:5e:
         2a:84:4e:d1:e8:59:36:f9:05:af:cb:d5:ae:e9:f6:72:de:19:
         cb:b0:24:86:ea:4a:ed:f4:ff:c2:53:5e:65:f6:31:87:a8:6a:
         ff:17:48:5c:96:df:3d:0d:23:c4:8b:8e:a6:0f:ae:18:db:76:
         91:57:e9:ee:09:f7:d8:2d:ee:30:d0:5d:8b:c6:ef:4a:7b:14:
         63:fd:22:28:73:73:2c:f2:46:fe:1f:bf:d9:9d:52:73:17:f4:
         e4:f7:de:20:ea:ec:ec:c0:64:7d:ff:47:f1:6a:92:9a:9c:db:
         e0:2a:b7:56:b2:07:9c:80:0a:a0:51:ff:99:6d:e1:b4:37:93:
         0a:65:e6:18:be:59:32:67:8f:8d:12:f6:39:01:03:33:39:44:
         3f:0c:ca:aa:16:13:88:bc:2d:4a:89:fd:50:e7:8c:5b:aa:c4:
         bb:a9:4e:9a:e7:40:56:22:3f:8a:69:d7:44:d6:0e:2d:1d:55:
         4c:b6:d8:ef:b4:5b:cd:c3:07:a6:5b:4b:3e:ce:5f:7f:f4:1a:
         30:55:ce:92:19:ff:12:19:ed:95:bc:9e:b3:04:6a:2e:86:83:
         2e:95:42:f5:b0:b5:02:cd:38:fb:27:61:75:f5:10:73:7b:19:
         c7:dc:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:47 2025 by rpki-client