Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
File:                     F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft (raw, json)
Hash identifier:          NFdig52CStvzFtB31tf/xcsl0pETb9dOltsnnBBhcPo=
Subject key identifier:   7E:EE:DC:23:F2:4C:1D:FB:16:A2:5D:5A:84:C7:D5:AC:DF:4E:E3:3C
Authority key identifier: 17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
Certificate issuer:       /CN=F36BB12FAF/serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
Certificate serial:       D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
Manifest number:          D0
Signing time:             Wed 04 Jun 2025 05:03:10 +0000
Manifest this update:     Wed 04 Jun 2025 05:03:09 +0000
Manifest next update:     Fri 06 Jun 2025 05:03:09 +0000
Files and hashes:         1: F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl (hash: hmqVgtsNHqWG+RrRDEsLVuXGh7deMrJvd4V2R8Wih6s=)
                          2: 2AF19AACA99D11EF9770FA9D762E951A.roa (hash: 8M8qeh2c4jU96jCRf8I7t2WItg43FZr+wCVd7xVx4+A=)
                          3: 65EE6608A93411EF8563F881762E951A.roa (hash: XRj1rCaLDHj9RuND/dNnP241OC1a/Tkrtdg/iPOM2xc=)
                          4: 3F1DD4FEA93011EFB957CF66762E951A.roa (hash: mf8in6dN/rBkyYBFBPJrqKH3gZCm9Dld1VfS1yx67mU=)
                          5: ACD5EF52A92D11EFB660CA57762E951A.roa (hash: x+lXF/o9k7izJiAJeM43TTxxkhFqOAoIEnFPFeHdVRM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BB12FAF, serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
        Validity
            Not Before: Jun  4 05:03:09 2025 GMT
            Not After : Jun  6 05:03:09 2025 GMT
        Subject: CN=683fd38e-efdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:22:ed:28:0e:57:59:21:c6:09:27:bc:3b:
                    03:b8:07:f7:83:30:22:03:b7:d8:b8:d3:1b:a0:f3:
                    18:c9:a4:5a:60:1b:ca:8a:f9:55:8f:07:50:f1:51:
                    80:30:ee:ea:bf:2e:ae:1a:e3:cb:c0:59:fa:84:33:
                    53:5c:1a:54:7b:9d:ff:94:1d:28:d0:f2:bb:91:14:
                    62:42:e2:10:82:7c:94:ca:ab:fd:92:37:e8:6b:71:
                    49:cb:6c:73:60:ba:3a:7e:8f:c5:b0:7f:ef:12:42:
                    a3:af:bd:6f:21:4c:56:6e:09:9c:1b:e6:03:17:76:
                    9c:85:2a:58:ea:d1:55:41:ac:26:40:0d:da:14:08:
                    33:06:c0:f2:26:f2:ec:dc:1d:ca:f2:1b:79:3d:94:
                    3b:28:68:dd:55:37:93:20:18:cd:66:31:5b:c3:54:
                    31:d2:b8:d3:a9:cf:8d:4e:e1:3d:45:09:6e:43:78:
                    65:33:1e:5f:ef:c4:33:8d:27:8b:e9:17:5e:2b:5b:
                    be:c4:ef:3b:ac:4f:12:0e:59:d9:44:68:bb:33:45:
                    7d:1a:f8:55:b1:1a:e5:b0:18:11:97:6e:4d:99:8c:
                    26:c0:6a:44:d2:7e:79:59:a4:7b:b2:80:01:6f:13:
                    90:1f:79:c5:1a:af:35:02:2c:45:12:be:04:ba:88:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EE:DC:23:F2:4C:1D:FB:16:A2:5D:5A:84:C7:D5:AC:DF:4E:E3:3C
            X509v3 Authority Key Identifier:
                keyid:17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b1:89:c2:5c:93:9d:76:4c:55:f8:4d:75:2b:75:a3:7b:c0:
         cd:c7:81:d8:c4:a2:25:d9:ec:ca:aa:11:fa:9f:e8:79:71:fe:
         1c:c5:b7:7b:ef:ef:ba:55:13:6a:3c:da:78:79:a1:d7:80:6b:
         4a:0b:ce:b6:68:0a:ef:92:6c:9d:ac:d7:f9:bd:62:24:03:d7:
         31:0a:bd:dc:cc:a0:98:4c:39:99:4d:bd:42:90:b9:5c:3d:a2:
         64:1c:86:08:6c:32:01:1d:30:a4:a8:75:ef:a0:53:6c:dc:a2:
         81:d3:a3:fa:62:e7:bd:c4:f9:8b:6f:4d:6a:21:d4:dd:0f:ed:
         3c:3e:e8:32:ea:3c:a0:9b:35:af:d8:5f:b1:ec:07:06:17:fd:
         4b:6f:56:03:72:32:fa:57:7f:7e:1f:93:39:44:46:5b:f3:71:
         50:20:5b:80:dd:cf:79:34:84:99:4d:cd:bd:3e:95:99:6d:1b:
         61:9d:73:fd:23:a4:01:25:55:e8:09:d0:75:a7:84:2a:6d:f8:
         53:7a:9a:fb:7b:4c:c6:2f:ff:4c:81:11:f0:d4:83:0a:81:06:
         cd:2a:5f:5e:fc:40:9d:75:15:90:65:38:f8:dd:b6:74:5a:34:
         41:89:75:c7:c3:f9:54:c9:db:60:78:d5:1f:d0:e4:19:64:f8:
         38:5d:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:23:34 2025 by rpki-client