Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          0xwbKy8smFgGQqdmsfBLDWz1pYZdowjxnguTORTjeTs=
Subject key identifier:   33:61:1E:FB:C5:68:D8:5F:CB:32:55:3F:94:AC:2B:80:7B:30:BF:2E
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0D31
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0D31
Signing time:             Mon 09 Jun 2025 01:02:23 +0000
Manifest this update:     Mon 09 Jun 2025 01:02:23 +0000
Manifest next update:     Wed 11 Jun 2025 01:02:23 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: l8sP26FsSdDXia1LAiB3ikh2YFOxtxdXQZmtdzbafwg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Jun 2025 00:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Jun  9 01:02:23 2025 GMT
            Not After : Jun 11 01:02:23 2025 GMT
        Subject: CN=6846329f-d63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:7e:59:63:33:d4:63:0a:7f:7e:92:88:7c:
                    11:a0:ba:8a:da:34:56:c3:d2:56:be:00:bb:0e:5b:
                    ed:aa:64:c6:ba:2b:1a:7a:a5:55:7e:9f:b5:80:35:
                    a1:29:67:d1:32:01:77:e6:ff:37:2b:ab:9d:ec:27:
                    37:0d:47:2c:ae:55:3b:6a:71:38:ad:2c:0f:d8:94:
                    2a:cb:8a:c9:8d:ac:ef:6f:4c:bf:fe:18:22:53:9b:
                    6c:c7:29:05:be:b1:2d:dd:d4:8c:4e:5a:6d:27:25:
                    8d:8a:d5:26:07:ea:54:d1:e9:a5:d8:57:66:65:55:
                    af:cf:cb:90:cd:f9:54:48:fc:27:95:0b:3b:34:7b:
                    03:d4:d9:3d:1f:aa:9b:44:d1:9f:87:11:02:64:a2:
                    13:20:00:02:d3:11:1d:1a:8d:cd:1a:92:90:5d:8e:
                    9a:27:b8:36:64:ed:27:28:d4:87:d0:f3:11:9f:23:
                    73:a5:fb:58:8c:46:4a:0a:57:b6:bc:ce:96:9a:76:
                    c9:3a:31:4d:31:ac:7e:a8:82:4e:9f:0c:90:9f:4f:
                    4c:97:b7:68:72:44:c4:ce:0e:02:db:89:3a:60:e7:
                    c2:82:c5:66:e2:fd:64:94:86:ca:36:98:ff:fb:6d:
                    44:6a:c8:fb:3b:9e:d8:6e:87:24:b4:f4:97:32:ab:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:61:1E:FB:C5:68:D8:5F:CB:32:55:3F:94:AC:2B:80:7B:30:BF:2E
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d5:ff:8c:02:54:b8:8e:f1:0b:31:d6:29:0c:ec:0f:96:37:
         ee:08:df:bd:15:f1:c3:b1:91:a6:57:d1:53:51:eb:a2:27:d7:
         fc:22:c4:a2:39:57:e8:67:bb:96:6a:05:30:c3:ae:2d:35:56:
         27:16:f2:96:7c:cb:52:30:85:ba:7d:81:bb:27:1c:88:80:2c:
         0d:a6:3f:83:fc:f2:12:80:9e:b5:b5:c8:9d:a3:bf:3e:73:6d:
         0e:a9:bb:8a:c5:86:63:ed:22:5f:0e:81:2a:36:11:2a:29:d6:
         8b:26:00:40:10:a4:a8:cf:52:6a:f7:f6:19:9c:e4:41:09:45:
         56:44:cc:98:ae:a8:ae:51:6a:57:32:f6:cf:52:d9:f5:89:fe:
         ed:10:6c:4a:0a:50:53:1f:26:9b:84:bb:2d:9b:02:be:1f:35:
         26:c7:30:a4:d4:4c:b7:67:83:18:be:32:65:ae:e0:5c:57:a1:
         5d:ae:f2:5e:1a:55:5b:d9:6e:5c:1b:f3:15:cb:38:2c:e1:9c:
         22:65:be:99:d5:28:29:7b:d6:d0:53:af:88:75:fa:80:1e:c4:
         c5:c3:23:dd:9f:a9:a9:b5:67:2d:8a:08:2b:b5:4b:6c:c3:6e:
         ca:f4:eb:2e:b8:ea:10:f1:89:50:40:28:1f:4c:17:52:0e:07:
         d1:c5:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:44:58 2025 by rpki-client