Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
File:                     0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft (raw, json)
Hash identifier:          4tABLGKA/ZjSO4YPZwCDaIrpDJkeR+y4piJ9NKv2b2A=
Subject key identifier:   21:99:FC:CC:EF:29:D2:4C:1B:C6:8D:3D:77:08:DE:F0:DE:77:D9:81
Authority key identifier: D1:0D:52:E9:5E:CD:FF:A0:B1:39:46:92:58:80:3D:4A:62:FB:13:EF
Certificate issuer:       /CN=F36B89F3AF/serialNumber=D10D52E95ECDFFA0B139469258803D4A62FB13EF
Certificate serial:       035C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
Manifest number:          035B
Signing time:             Thu 12 Jun 2025 03:34:24 +0000
Manifest this update:     Thu 12 Jun 2025 03:34:24 +0000
Manifest next update:     Sat 14 Jun 2025 03:34:24 +0000
Files and hashes:         1: 0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl (hash: gYYUvlnZpqK9hpZb+GZOIsem1gCyppGlHzM5bf0irKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Jun 2025 03:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B89F3AF, serialNumber=D10D52E95ECDFFA0B139469258803D4A62FB13EF
        Validity
            Not Before: Jun 12 03:34:24 2025 GMT
            Not After : Jun 14 03:34:24 2025 GMT
        Subject: CN=684a4ac0-6dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:f1:2b:65:91:ab:1b:37:28:d6:68:13:d7:
                    fd:11:76:9c:cf:fd:9d:22:6d:a6:90:2c:0b:ff:5d:
                    62:3e:ba:70:ac:e0:60:34:08:a5:a7:0b:00:c4:da:
                    e2:34:20:d0:fe:ef:46:ff:52:90:02:b9:5b:59:3b:
                    39:fc:a2:db:d4:d4:20:64:5d:2b:87:21:23:83:0e:
                    b0:e2:89:6d:33:a8:24:55:3d:0a:e2:0f:72:1b:58:
                    07:21:17:3f:d6:af:b0:a2:d7:1c:f1:6b:b0:28:3b:
                    85:e1:be:e5:d6:1d:d9:4a:74:cb:41:33:21:13:4e:
                    dc:ab:8c:17:ae:07:70:c2:00:13:9d:76:2f:5a:ef:
                    b3:55:e3:14:52:84:11:ef:c5:af:71:50:06:3b:83:
                    13:e2:fc:1f:06:8d:5f:b2:a0:a6:8f:5c:cf:cb:4e:
                    47:45:8c:d5:aa:5c:d9:49:2c:1d:15:94:0d:f9:2e:
                    4f:16:ce:95:9e:05:27:30:eb:e0:4a:46:73:73:ef:
                    cb:3c:98:ce:26:70:68:03:18:1b:d4:47:69:a2:22:
                    44:8e:07:47:c6:34:95:cb:06:73:fe:fc:42:bc:01:
                    fa:55:fd:d6:62:c5:45:41:2d:2b:cb:a4:41:da:99:
                    cd:29:cf:02:bc:2b:76:0c:4d:80:4b:b7:04:b8:f1:
                    c5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:99:FC:CC:EF:29:D2:4C:1B:C6:8D:3D:77:08:DE:F0:DE:77:D9:81
            X509v3 Authority Key Identifier:
                keyid:D1:0D:52:E9:5E:CD:FF:A0:B1:39:46:92:58:80:3D:4A:62:FB:13:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f2:00:e2:48:80:e9:c4:bf:e6:ee:b7:05:1d:a0:6e:59:5e:
         e3:dd:13:83:e3:01:aa:7e:34:35:af:c3:4b:e1:97:3f:b7:19:
         dd:f9:cf:38:3c:e0:7c:78:c7:74:68:39:79:da:32:4f:43:ba:
         53:c9:fe:19:29:e3:12:10:af:2e:5e:eb:0e:1f:d1:6a:c8:c4:
         56:38:4e:ee:a3:cb:97:57:d4:a1:d9:49:b2:74:70:7f:c1:ed:
         a4:3e:2c:19:0d:32:18:af:2d:e4:29:96:df:e8:4b:85:f1:05:
         1f:ac:b4:af:39:2a:92:17:b5:4d:88:e9:1d:77:29:b9:42:a8:
         03:3c:26:74:c1:3f:27:ba:ee:f0:ba:ff:fa:53:cc:be:c5:04:
         e8:64:76:b0:0f:52:92:a4:7f:3b:d5:84:cd:d5:a7:55:ab:30:
         c2:b9:23:ba:64:09:dd:8f:44:d4:d4:b3:9e:b1:be:81:b3:7d:
         ff:0e:70:de:38:04:ff:7b:aa:c7:5d:05:06:99:10:c1:fc:78:
         7b:6e:35:a0:17:95:b0:f9:57:63:a6:ee:71:56:b4:9c:62:cd:
         61:a8:8d:01:f3:4f:08:5b:39:04:46:de:14:9b:75:29:fb:2e:
         97:b4:e8:59:e3:95:17:eb:23:02:4c:b6:73:f9:d4:45:9c:11:
         63:41:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:30:21 2025 by rpki-client