Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
File:                     2dbgTePDYTvOHbKdd8ahOIrEIj0.mft (raw, json)
Hash identifier:          /VsOuC//voqQQsFLJ91X7jV8yHNYpvQzJx5JYIIafzk=
Subject key identifier:   A8:1B:9D:57:CE:20:18:B9:7C:EB:3F:C1:2C:D7:08:72:76:77:DA:5B
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Certificate issuer:       /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial:       02CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
Manifest number:          02C8
Signing time:             Tue 16 Sep 2025 03:50:37 +0000
Manifest this update:     Tue 16 Sep 2025 03:50:36 +0000
Manifest next update:     Thu 18 Sep 2025 03:50:36 +0000
Files and hashes:         1: 2dbgTePDYTvOHbKdd8ahOIrEIj0.crl (hash: aoweqJH3ALYQ03LGFLosPI3h02s//06VtYeNkDUjPbg=)
                          2: B56502AE36B211EFAA421B5E762E951A.roa (hash: pW3bMqz4FHfQnjso9ES+xBDe7OZbTMlRNhZcJvVAqsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AF, serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
        Validity
            Not Before: Sep 16 03:50:36 2025 GMT
            Not After : Sep 18 03:50:36 2025 GMT
        Subject: CN=68c8de8d-7e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:39:f0:21:33:d3:6c:bc:e4:b6:9b:eb:e3:
                    35:ed:f6:8c:1b:7b:d4:75:94:45:db:ed:b6:d7:79:
                    b8:14:bd:05:82:70:ed:38:0d:9f:6a:5f:fc:5c:74:
                    fc:04:dd:cf:89:ea:fa:00:8e:07:50:b0:31:48:c7:
                    34:0f:7a:23:e2:90:78:1e:09:84:b1:28:41:19:84:
                    4c:46:ff:45:d9:57:0c:3c:f2:d8:41:1f:ed:27:4d:
                    11:8b:74:68:c5:fe:d5:73:05:b1:37:33:e7:ee:9c:
                    d8:05:3e:a5:ff:50:b0:28:17:cd:c2:59:10:da:3c:
                    85:59:8a:7a:fe:63:2a:03:24:0f:e7:1c:ad:8f:23:
                    07:ef:03:88:ec:8a:5c:3d:87:f3:f3:ca:e2:14:c1:
                    64:20:00:85:14:3f:d6:86:49:8f:01:e6:e6:0d:fa:
                    49:82:91:f4:9e:91:ea:af:c2:98:7f:90:53:05:cc:
                    19:6e:e1:b1:b1:d0:89:e6:09:a9:39:88:5a:d1:ac:
                    01:93:11:b3:d3:32:cb:0e:0b:49:89:93:bc:61:f5:
                    b6:c4:0e:16:66:f7:b7:a3:1b:2c:97:d4:fd:7b:36:
                    c2:f2:40:fd:76:0a:6d:c4:49:5d:46:74:17:6f:af:
                    fe:0b:be:60:d2:87:82:dd:ed:20:16:8c:3e:ec:06:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1B:9D:57:CE:20:18:B9:7C:EB:3F:C1:2C:D7:08:72:76:77:DA:5B
            X509v3 Authority Key Identifier:
                keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:47:19:03:f4:0e:37:6d:d8:5d:0f:a2:2d:67:dc:04:15:a4:
         87:29:93:d6:0f:17:3d:fc:9b:db:24:db:55:d8:4b:01:78:d4:
         d0:e0:19:86:7c:33:cc:31:1b:50:78:46:2a:b5:4a:61:ff:09:
         9d:c9:cd:95:ba:7a:7a:37:60:48:4e:c3:8c:32:3e:ec:fe:10:
         84:19:fa:8b:4c:4b:2f:e1:62:6d:4c:51:6d:eb:1b:aa:43:5b:
         83:85:8f:b1:4f:10:9d:40:7a:ba:a4:e2:f9:03:db:23:12:3f:
         fb:e0:e0:26:ef:c8:90:09:e5:8d:e6:a2:3b:69:51:82:fd:98:
         ed:7c:65:4d:f9:23:91:0f:2b:29:d4:7a:c4:0d:2a:1c:48:50:
         33:93:33:95:e0:63:d9:1d:0e:aa:e6:89:ea:2f:01:2f:6c:6b:
         2d:57:44:cb:c6:94:97:2c:4e:82:b7:e9:d0:64:7c:bb:6d:b6:
         8a:d2:d2:ab:1b:8a:e6:ff:a5:54:e9:f8:1c:84:44:fd:23:50:
         34:69:de:02:1d:4a:95:41:ac:46:58:0e:f5:8f:df:72:02:c9:
         28:fe:98:78:2c:0f:9c:11:89:b3:83:98:28:19:4f:af:76:dc:
         e0:3d:6a:69:81:0c:df:a9:e3:49:cc:ae:d1:9a:a1:c8:59:68:
         a4:13:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:48:14 2025 by rpki-client