Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          kG/MUW0Fk9csS3MZyyZG4EW77zpNmgmWymCesT2xTw4=
Subject key identifier:   48:68:86:C6:A6:01:A8:B4:7D:1B:3E:5B:DB:15:86:53:3C:8D:29:10
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          27
Signing time:             Fri 06 Jun 2025 05:17:37 +0000
Manifest this update:     Fri 06 Jun 2025 05:17:36 +0000
Manifest next update:     Sun 08 Jun 2025 05:17:36 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: MFApwe5H4fvvV585w/o0J+MBvC9c/+2pSTMUkkS45j8=)
                          2: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (hash: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: Jun  6 05:17:36 2025 GMT
            Not After : Jun  8 05:17:36 2025 GMT
        Subject: CN=684279f1-d144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:e1:ca:cb:59:14:69:94:d6:7a:b1:e2:7a:
                    a5:85:f8:43:93:05:3c:a7:b5:be:b1:54:f4:42:b5:
                    dc:d9:f8:9b:a3:02:da:f1:85:7d:a0:bb:81:6c:85:
                    ee:05:9b:c3:9d:74:c9:87:0c:04:33:18:0f:18:18:
                    9d:1e:99:6b:d8:97:62:bc:82:7b:b4:cb:78:b3:f9:
                    4c:31:02:6b:68:fd:08:9b:ee:8e:71:20:62:91:b0:
                    45:c7:ed:b8:5b:fc:c5:4a:52:a9:b6:71:47:64:c7:
                    b4:8f:f6:59:0e:aa:ac:7b:bc:21:63:f3:75:b4:21:
                    38:70:47:67:d6:ac:16:ad:59:a0:1b:6f:9c:72:be:
                    48:1c:f3:09:16:ba:ee:b6:26:9f:c6:fd:73:9b:80:
                    01:f1:d0:9c:18:c8:1e:0e:b4:58:c4:ae:07:82:02:
                    54:b2:f4:cd:9d:b1:ac:97:e8:92:20:86:93:c4:56:
                    4e:75:2b:b7:95:ab:bd:73:72:24:c4:c9:a9:9e:60:
                    8c:b6:32:f1:8c:0a:44:84:b9:86:4c:06:81:75:66:
                    9b:61:45:c9:d1:42:42:05:67:ab:17:92:8a:b0:cf:
                    ce:8f:e1:49:d9:3f:cb:b8:5d:bc:d6:01:89:44:bb:
                    97:29:7a:5d:e2:d5:5a:f8:b5:53:4c:3f:b5:f5:08:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:68:86:C6:A6:01:A8:B4:7D:1B:3E:5B:DB:15:86:53:3C:8D:29:10
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:62:0d:af:f1:80:7d:fb:89:f4:3c:75:fa:b5:b4:2c:bf:34:
         af:f8:22:71:06:5b:a6:17:65:9a:f0:01:d0:69:d3:b9:8f:d9:
         c1:84:aa:98:83:98:2a:6b:30:43:0e:50:a2:25:35:60:4e:ea:
         50:df:64:f1:79:66:61:7b:7b:02:dd:df:ef:97:52:8f:9a:ac:
         c5:f8:be:73:d4:14:6d:9f:30:0f:50:ff:09:d2:ac:c6:ce:71:
         9c:bf:c5:c0:ef:07:90:21:77:88:3f:f0:19:75:18:36:56:05:
         93:ba:b0:86:0f:dd:ff:28:ec:15:e1:5d:71:38:bd:f3:a1:b5:
         29:43:10:b8:61:a8:ad:5d:26:0a:8d:5b:9a:d4:6a:c0:f7:5d:
         16:3f:7b:ad:9a:61:14:a0:4a:5f:be:c9:11:62:61:14:10:76:
         a9:78:75:c2:d4:e2:5c:62:b3:9c:43:2a:a5:ea:eb:6f:6c:93:
         c2:90:07:1b:d6:18:56:e6:c2:44:26:6f:63:67:d2:b7:e7:32:
         79:7a:a3:c3:b5:b2:a9:c9:ea:cf:cd:3d:51:59:87:3a:95:e2:
         02:33:e9:48:9e:fe:13:5b:3e:9d:ff:fb:fe:f3:ff:cb:bb:8e:
         96:7d:b3:91:17:89:0d:0f:d9:32:d6:a1:e3:e6:92:86:3d:83:
         ae:b5:ec:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:49:37 2025 by rpki-client