Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
File:                     wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft (raw, json)
Hash identifier:          QroESQrK2Sjucc68Mjd4nz9jqNnjUwFjfn514styuD0=
Subject key identifier:   D0:30:AA:C6:80:2C:03:75:87:33:40:1C:71:5E:25:FA:83:D2:53:52
Authority key identifier: C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB
Certificate issuer:       /CN=F36C10D8AF/serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
Certificate serial:       0346
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
Manifest number:          0343
Signing time:             Fri 18 Apr 2025 08:31:09 +0000
Manifest this update:     Fri 18 Apr 2025 08:31:08 +0000
Manifest next update:     Sun 20 Apr 2025 08:31:08 +0000
Files and hashes:         1: wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl (hash: 5PwFp1x3KU45J1bteR8Oc+yX9/fC4yxat0jJXPaKuoc=)
                          2: 3F8E935AA61311EDBFCFB3D4F1222468.roa (hash: 33rmpZ6jAdIVqLdS11HAE3Yq5xllMzQt+c6T/OCJsiA=)
                          3: 81387E54007811EF99B9F139017001B1.roa (hash: 5WAmHZAoZlINNKx4PNswtykKpm0E6nuOZQfU//JL8dM=)
                          4: 0391042A007911EFAE93753B017001B1.roa (hash: ROy7IXIOSH9P9duj13zOuIMfsAHkd1TqIfObC5Gq/2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Apr 2025 08:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C10D8AF, serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
        Validity
            Not Before: Apr 18 08:31:08 2025 GMT
            Not After : Apr 20 08:31:08 2025 GMT
        Subject: CN=68020dcd-fcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:72:19:8a:eb:bd:e6:68:f7:c8:7f:23:80:
                    31:07:5f:70:d2:8b:7d:59:37:de:42:7a:d7:b8:9b:
                    54:73:1a:c4:96:6d:69:c8:d7:a6:c7:de:53:3c:e4:
                    20:92:24:23:7e:12:db:d2:32:1b:66:c1:96:19:4f:
                    e2:64:21:ba:da:cc:8a:df:0d:ff:94:2f:44:18:8a:
                    9a:2a:96:a2:90:7c:41:55:41:80:5b:5b:72:63:16:
                    44:ad:60:e0:db:ba:71:f9:50:38:24:50:fe:57:47:
                    92:e4:e4:ad:b6:1d:b6:5c:5c:b5:01:cf:5e:93:04:
                    44:c3:60:97:42:05:6f:72:34:7d:7f:9c:e1:02:2a:
                    c1:a5:44:9f:09:af:35:4d:b2:9a:39:6e:3a:2e:b6:
                    29:c9:28:c4:b5:5c:39:07:b1:3f:1a:1c:91:32:70:
                    2d:94:53:00:b6:33:14:47:86:17:92:f7:a0:f6:f5:
                    4f:ec:24:bc:c0:f5:39:2d:ed:24:ab:7e:34:ea:d8:
                    e8:40:e5:a0:44:d5:ea:13:d3:bb:d6:49:61:29:26:
                    08:54:ff:41:38:8b:ee:a3:04:91:3c:9f:23:1c:c3:
                    5b:ab:28:8b:2b:cb:7b:6d:b4:4b:2c:e9:52:25:b7:
                    90:e3:67:aa:b1:5b:14:d5:b6:6e:1b:50:a8:3d:1f:
                    fe:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:30:AA:C6:80:2C:03:75:87:33:40:1C:71:5E:25:FA:83:D2:53:52
            X509v3 Authority Key Identifier:
                keyid:C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1d:5f:0f:33:c8:b1:f5:8b:ca:3d:b2:fb:50:eb:d5:78:48:
         53:b3:fe:7c:b6:31:c4:43:81:7a:61:fc:e6:0f:bd:51:d3:08:
         bd:cf:21:4c:aa:36:b8:41:ef:dc:70:98:c0:a2:97:33:38:69:
         45:16:a4:79:4d:a9:f4:b9:b2:d1:3c:03:bf:be:54:5a:91:ca:
         71:03:62:49:42:65:1f:21:93:3c:c6:e9:2a:63:4f:0f:f6:7b:
         96:8b:e2:10:2d:93:8d:40:29:0d:e0:0a:2f:14:12:2b:fb:b9:
         e6:cc:12:71:e4:9d:55:9a:e3:26:c6:ae:ed:6c:57:a0:ba:ba:
         f0:53:b7:f6:68:ed:38:98:d4:79:fc:ee:08:80:99:e8:d6:3b:
         bb:54:aa:d7:35:fd:ca:85:f2:c7:55:f3:8a:73:4e:66:2d:7b:
         f9:be:6c:da:a8:90:16:d7:c0:78:a4:c9:43:e4:17:03:99:a5:
         1e:79:b1:3b:59:9f:58:f4:d6:b3:2e:7c:60:0a:04:ad:28:53:
         d7:e8:51:4c:15:53:ba:36:2e:77:a7:ee:2b:98:5e:e4:7e:f4:
         a9:71:31:90:d3:ac:b9:4a:bd:52:87:0c:3e:b5:83:c2:58:28:
         b1:eb:6c:39:7f:07:c3:f7:26:16:73:32:1e:8f:e9:f2:ed:c9:
         b2:24:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:01:43 2025 by rpki-client