Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          7syg+2yCsnWCBwKkvvrEuYzV+nN0+iTYcGjKrrGKyIY=
Subject key identifier:   81:EA:A2:ED:7F:CD:F7:AA:95:96:3A:C0:84:30:48:4D:41:C0:9A:AD
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0D36
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0D36
Signing time:             Sat 14 Jun 2025 01:02:21 +0000
Manifest this update:     Sat 14 Jun 2025 01:02:20 +0000
Manifest next update:     Mon 16 Jun 2025 01:02:20 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: H324pEv3YJ9xDarP5uhpVkZTP7fPEXSyIABKmuCjxhg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3382 (0xd36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Jun 14 01:02:20 2025 GMT
            Not After : Jun 16 01:02:20 2025 GMT
        Subject: CN=684cca1d-4188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:1f:f8:62:cb:b7:e3:a7:c3:51:43:9a:c9:
                    75:90:79:9e:8d:ed:f7:03:e2:2c:55:ed:0d:87:93:
                    ba:ae:d1:cf:22:79:22:9d:5e:bc:cb:81:af:5d:e3:
                    a7:aa:8b:7e:9c:c7:49:f4:26:39:4e:44:3c:4d:69:
                    b1:f8:4a:50:8a:41:54:7d:b0:54:86:ad:d8:5e:9b:
                    41:3f:78:5c:7c:63:f0:b6:97:c9:1d:fa:6a:01:dd:
                    03:50:58:bb:75:59:16:85:a6:29:1c:aa:bc:a5:b5:
                    a0:6d:e4:c1:a9:2b:b0:40:a5:81:b1:ca:30:79:43:
                    e1:8d:f1:a7:53:9f:a8:37:df:56:dc:ef:f7:97:13:
                    ed:31:95:28:1a:dc:6d:61:7b:de:5e:1b:c2:c3:32:
                    c4:24:2a:e0:1a:ca:28:70:46:64:72:c1:c7:de:89:
                    9d:a4:1a:0b:62:1f:f7:7d:91:d6:cc:f6:5a:19:21:
                    31:df:a4:c0:5e:7b:dc:03:80:38:46:14:ac:d2:02:
                    d6:9f:07:e6:a7:3a:89:88:a2:e3:cf:a2:98:6a:87:
                    d0:40:45:26:00:f8:b9:c9:2c:6a:7b:17:39:21:30:
                    2f:7e:ec:8a:1d:fd:a8:f2:ad:15:44:6c:bc:7c:f9:
                    48:5c:e8:ed:df:33:8c:21:02:08:95:d6:e2:66:6f:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EA:A2:ED:7F:CD:F7:AA:95:96:3A:C0:84:30:48:4D:41:C0:9A:AD
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:16:49:5e:0a:26:60:c6:d1:4c:49:4a:22:21:ef:91:db:0a:
         1a:9f:ed:66:e8:89:c4:8e:eb:a2:9f:75:e4:d2:61:af:69:1c:
         c1:bb:4f:7a:b0:89:cf:e9:44:94:55:cb:ec:78:f4:be:ec:ea:
         a6:06:bc:f5:7d:c2:8c:e3:16:b1:25:01:5b:65:f7:24:e9:ad:
         a9:04:52:6c:09:d4:a4:26:ce:fd:17:af:bc:2b:1a:e8:d5:c3:
         bb:f9:1a:62:b1:0e:6d:7c:c5:a5:a7:28:0a:c2:7c:93:90:19:
         b8:3f:b1:62:f3:fd:b5:44:94:05:18:c4:ac:7b:82:47:0f:9b:
         4a:ba:b1:87:c0:5c:33:ef:7f:73:bc:62:a2:71:fe:91:52:b1:
         a4:b0:82:e2:89:fa:7b:7d:ab:47:3d:70:01:20:79:35:a0:ce:
         f3:6e:ab:a6:39:d3:de:27:4a:a5:c4:6a:68:aa:ba:90:18:73:
         a6:02:6d:c9:ed:e3:81:33:da:ce:a6:b4:9e:d9:30:3d:53:74:
         1b:21:8a:c3:3a:59:25:a3:7c:6e:ef:79:5b:6b:9d:73:a1:a2:
         7f:c9:7f:52:a4:64:9d:3b:d3:d4:c6:bf:18:11:6e:06:d3:08:
         bf:ff:35:ff:69:a6:1e:a1:0a:2f:5f:91:e7:91:35:f3:ed:5d:
         07:0e:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:16:23 2025 by rpki-client