Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
File:                     -ardXUWuw8xVsfhJ4vzOB289bjQ.mft (raw, json)
Hash identifier:          jU+24mnjITqjVvOwybrGdvxHop1AS+qdNbeshv2Q5sQ=
Subject key identifier:   B8:69:3A:02:F4:5E:B5:96:AD:88:D5:5D:45:7B:6C:0C:BC:D7:1C:A0
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Certificate issuer:       /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial:       0F14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
Manifest number:          0EFB
Signing time:             Thu 31 Jul 2025 00:51:16 +0000
Manifest this update:     Thu 31 Jul 2025 00:51:15 +0000
Manifest next update:     Sat 02 Aug 2025 00:51:15 +0000
Files and hashes:         1: -ardXUWuw8xVsfhJ4vzOB289bjQ.crl (hash: Ds5YNLQHq8qahLnbundw3INRAQlyhP5WswZDb5w+d1E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3860 (0xf14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AF9EEAF, serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
        Validity
            Not Before: Jul 31 00:51:15 2025 GMT
            Not After : Aug  2 00:51:15 2025 GMT
        Subject: CN=688abe04-390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:f0:63:ed:8f:83:96:af:db:2a:bd:15:64:
                    f4:05:6f:2e:99:36:0c:7d:de:7d:d7:8e:6a:80:0b:
                    f8:20:2e:14:8f:ea:11:4b:25:25:2e:a4:e3:83:47:
                    03:c1:1c:48:b8:e2:3d:c0:06:2f:d5:b3:11:03:eb:
                    f3:b9:e5:39:a4:92:c1:27:13:c7:d9:9f:0b:ed:82:
                    72:ad:a6:27:03:f4:00:a2:6a:fd:4c:dd:9f:f9:84:
                    9c:7a:55:c6:b9:92:b2:43:f3:01:c2:6f:92:46:7f:
                    54:ee:27:a8:23:d1:e1:db:32:59:0a:ae:bf:ec:99:
                    11:aa:75:8c:64:73:ae:2d:b8:cf:5d:05:7f:39:d2:
                    9a:d7:7c:9b:df:cb:c6:2f:1e:b2:4a:e3:40:55:1e:
                    43:d1:47:47:5a:4b:04:9d:96:ee:ee:41:05:c7:64:
                    f1:e2:4b:95:a6:8a:d6:98:2d:87:67:a1:a6:97:ca:
                    bf:ba:45:a2:b0:aa:43:d4:d1:94:2c:8d:05:ad:22:
                    8c:0c:0a:1a:cf:e2:96:b8:23:d5:b5:63:32:fb:01:
                    2a:8d:57:19:0c:81:6f:f9:3c:a0:a8:39:ce:e6:f5:
                    bb:e6:20:9f:92:82:ce:e3:e7:c1:81:c8:6a:51:c0:
                    68:f0:df:f9:37:ed:a2:89:9e:e4:a0:ba:85:06:ce:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:69:3A:02:F4:5E:B5:96:AD:88:D5:5D:45:7B:6C:0C:BC:D7:1C:A0
            X509v3 Authority Key Identifier:
                keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:79:10:9f:ef:01:d5:df:67:4a:1d:26:75:c0:29:f9:d1:65:
         89:0c:d2:a6:71:e0:dc:7b:ba:b4:af:b0:1f:ed:33:4f:66:2c:
         8b:d3:59:09:b7:74:49:8d:44:1a:b0:5c:4f:35:23:19:ba:49:
         10:81:12:9e:8e:17:28:2b:47:5c:f9:bd:81:68:86:21:1c:57:
         d5:c9:14:d6:ad:d0:6b:12:7c:54:a5:f9:4c:3a:25:5a:0c:b0:
         9e:59:aa:09:6c:05:44:80:13:ee:1e:2b:47:f0:1d:86:10:0c:
         63:66:5d:3b:eb:ca:b7:a1:83:d4:23:f6:37:46:22:96:a6:d3:
         d3:53:a4:1f:b6:32:6e:a8:cd:bd:67:86:53:2c:7f:94:93:45:
         53:cf:cf:b2:69:2c:a6:be:ff:7e:f5:f8:eb:77:7d:d0:19:6f:
         5e:fc:6e:94:3c:8c:73:d7:32:4d:7a:4e:67:b5:d1:9b:0b:ce:
         5b:d0:40:9c:1c:09:46:9d:c3:e8:aa:5d:cb:c9:65:c2:66:bb:
         36:5a:92:63:d1:d5:43:6c:f9:07:10:f4:3e:2e:62:49:0a:a8:
         4f:50:67:6d:82:32:71:4a:5a:a9:0c:15:46:fc:27:a6:d9:25:
         46:f4:da:ef:43:d5:68:44:89:cf:7b:93:27:a0:f7:35:11:1f:
         0c:6c:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:22:20 2025 by rpki-client