Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
File:                     mWvkN8G_DqgPwtdP55XVl9183_Y.mft (raw, json)
Hash identifier:          fGwmQd+clPiryklXVCWjdJ9jCDhoqD4kMw9j1d2f1RQ=
Subject key identifier:   89:35:D1:92:A1:6A:FD:B2:27:19:D2:96:39:B6:E4:AA:BE:A5:4A:B2
Authority key identifier: 99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6
Certificate issuer:       /CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
Certificate serial:       08BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
Manifest number:          08BA
Signing time:             Wed 04 Jun 2025 01:34:43 +0000
Manifest this update:     Wed 04 Jun 2025 01:34:42 +0000
Manifest next update:     Fri 06 Jun 2025 01:34:42 +0000
Files and hashes:         1: mWvkN8G_DqgPwtdP55XVl9183_Y.crl (hash: 6zSXG7c4q6H8w4fpxtXRuV9tpG6TtZC0szAintE/a1U=)
                          2: 457616CC92AC11E9AA1A230CF8AEA228.roa (hash: a111sZs2PjYe+Z7xTRVrDgikHwjH0gy6/kJWglkiGK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9EC5AF, serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
        Validity
            Not Before: Jun  4 01:34:42 2025 GMT
            Not After : Jun  6 01:34:42 2025 GMT
        Subject: CN=683fa2b3-30a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:86:ad:7d:a4:07:8f:e4:aa:44:b7:df:9a:
                    73:38:58:74:42:fc:18:af:9e:9c:75:03:2f:db:4f:
                    b4:08:a1:46:ba:7d:b1:a6:9a:06:10:84:71:48:c7:
                    6e:55:d0:ff:4b:af:2b:45:2b:40:c6:b8:f8:84:16:
                    88:2e:1f:74:5d:4f:3a:cd:6d:d5:e2:48:a3:6e:4c:
                    76:a5:95:86:cd:29:d7:7b:74:ab:5f:05:dc:8d:c4:
                    f8:e8:71:06:ca:f9:c4:9b:92:17:e1:8b:c6:54:51:
                    31:65:71:9c:5b:9a:19:3d:0d:9d:cc:34:4c:99:98:
                    96:93:00:ff:5d:2c:88:c6:2f:a9:f1:a4:6b:4e:7c:
                    ab:6b:d8:8f:c2:0f:5a:c5:ad:e3:90:b2:17:28:6c:
                    3b:b2:ed:5f:d5:fb:0d:ca:e3:5c:af:1c:7e:1f:e3:
                    9f:23:d3:56:1f:2c:28:27:e0:24:7a:13:5a:6b:78:
                    09:f8:f5:09:dc:42:c3:30:18:09:f0:b7:5b:fd:9e:
                    e1:f1:06:f1:21:04:c2:52:7b:33:3e:cc:68:b5:88:
                    a6:a3:b8:88:6d:2b:7b:02:13:60:ad:6f:22:78:20:
                    26:70:e7:4a:1f:fa:e1:53:05:e2:93:77:87:e7:91:
                    57:5b:3a:ef:15:84:9f:b0:59:a6:ed:9f:e0:de:62:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:D1:92:A1:6A:FD:B2:27:19:D2:96:39:B6:E4:AA:BE:A5:4A:B2
            X509v3 Authority Key Identifier:
                keyid:99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:f1:9a:f9:90:07:cb:73:82:93:d1:36:ec:c0:a9:c5:7f:
         82:67:b4:24:58:b0:53:2d:a0:82:e1:a7:9e:c9:fd:41:3d:86:
         63:2c:78:77:f9:d6:a7:f0:e7:a3:fe:8d:e5:c1:e4:92:81:a8:
         01:08:83:04:3f:6c:31:a9:52:ec:6b:ed:b7:55:0a:37:43:95:
         44:e9:9b:c1:85:d7:a8:48:27:72:dc:6f:a5:12:6f:06:ff:71:
         f3:f4:41:42:5d:f7:f6:e9:c0:1a:f7:66:84:d6:89:11:47:d9:
         83:6f:cf:7a:77:80:67:0e:77:fb:0a:8e:87:7a:4e:ab:4f:0c:
         40:84:fa:df:53:cd:25:bd:ce:f9:ce:19:cf:3e:02:e1:f4:19:
         78:3c:cd:9f:4d:46:b6:fc:21:36:7f:24:4b:d6:ab:67:0c:01:
         b3:d4:b9:9e:90:9f:44:6f:07:97:27:4a:04:9d:c3:b3:d0:4b:
         c7:21:2f:59:f0:76:9f:d4:03:01:ee:f0:5b:cd:50:3e:82:61:
         2f:7e:e0:05:6c:00:e1:14:10:36:23:17:8b:b6:a8:04:11:0f:
         30:f8:0f:29:17:ab:dd:95:e5:63:3e:eb:18:bb:d1:bb:fc:ba:
         b2:8a:7e:0f:5e:59:93:8f:23:f1:b5:4b:9e:1c:f2:5d:29:68:
         3e:a6:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:27:33 2025 by rpki-client