Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
File:                     yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft (raw, json)
Hash identifier:          Yd1U2fwRZ7rMbPBZZsSBGibXH3QwSripn9G3HP0gJMk=
Subject key identifier:   13:5F:EA:53:89:10:F6:A3:87:DF:AC:93:35:81:71:F6:31:6B:26:C7
Authority key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Certificate issuer:       /CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Certificate serial:       023B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
Manifest number:          0238
Signing time:             Thu 03 Apr 2025 02:40:20 +0000
Manifest this update:     Thu 03 Apr 2025 02:40:20 +0000
Manifest next update:     Sat 05 Apr 2025 02:40:20 +0000
Files and hashes:         1: yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl (hash: 8PekVPgrC89WgWdkgeBMzOfX5eqX0mpjj2sqbNuqoTE=)
                          2: 04EB056A6ABE11EE9E4243804AD9E6FC.roa (hash: EyVlkSGybf5bnAy71sGPmJ47rqIPQfEXtljbaai4c88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C38D9AF
        Validity
            Not Before: Apr  3 02:40:20 2025 GMT
            Not After : Apr  5 02:40:20 2025 GMT
        Subject: CN=67edf514-8570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:ee:1c:ba:57:f2:69:5c:67:2a:e1:07:e9:
                    e9:1d:06:5f:c2:b0:da:9c:0b:75:ae:43:e9:5e:8f:
                    c4:18:f3:39:02:7a:7a:02:98:ad:17:2b:4e:de:6d:
                    85:d1:e0:b1:63:d4:c3:c8:eb:7a:1b:d9:58:c1:48:
                    8c:80:b5:29:7c:ed:35:db:f9:37:0c:45:34:8e:44:
                    f5:ff:09:5e:0b:39:9d:12:61:57:b9:47:ee:54:16:
                    1a:30:43:73:b7:ae:5b:cc:6c:4f:af:58:62:62:3e:
                    be:76:4a:25:79:dd:12:70:8c:24:46:07:e0:5e:0f:
                    40:72:d0:85:0d:83:2a:9c:b1:fe:47:3b:ff:32:5d:
                    82:9e:a9:43:2c:d7:75:56:09:12:56:a1:e3:c9:28:
                    f3:a0:27:53:9a:54:6e:25:d0:81:c7:a1:86:49:c6:
                    0c:21:44:17:37:89:5b:10:b6:3e:1b:ad:e9:d8:a8:
                    d6:13:00:4f:f4:a0:d7:8f:f5:d8:16:a6:39:54:1e:
                    58:4a:27:c8:a8:de:f6:a5:a7:94:bb:71:cf:d3:5b:
                    df:2f:8e:79:e6:ff:c3:b0:21:7d:4f:98:15:15:70:
                    d8:bf:e2:45:f0:e1:d9:38:e0:9d:b1:51:6f:a2:2d:
                    a3:23:1d:2b:6c:0a:4c:40:5f:81:a1:16:f8:3a:57:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:EA:53:89:10:F6:A3:87:DF:AC:93:35:81:71:F6:31:6B:26:C7
            X509v3 Authority Key Identifier:
                keyid:C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:b2:2a:5f:6e:7d:33:3e:f7:8b:f3:03:db:32:f5:af:21:
         47:f7:0e:e7:54:b3:6c:49:a6:5d:30:f2:e7:13:5c:ab:8d:eb:
         68:94:ca:12:3f:f7:ff:bb:cb:4a:09:45:7b:3c:26:9f:cc:d3:
         d0:08:ec:b7:71:23:88:f7:e7:4e:d7:f5:42:66:42:2b:21:80:
         40:9d:d6:3c:8c:39:33:82:8b:08:d3:78:95:44:b7:62:0e:e6:
         d2:89:c5:b0:31:a3:b5:19:9b:ea:3e:a8:24:6b:1c:59:14:6b:
         66:f7:a1:86:99:0c:1a:9e:a8:8a:bd:f1:7f:23:c4:b6:2b:fb:
         f4:7b:82:9d:58:c9:76:6f:b8:e6:93:78:94:01:6b:37:34:9c:
         34:f8:6a:c4:ee:61:4e:15:ad:18:2d:43:bd:dc:65:1a:5e:2b:
         01:84:02:4c:32:37:1b:ee:06:aa:3a:cf:56:ce:48:24:84:45:
         ce:76:fc:42:bc:b3:0f:72:57:3a:f0:90:48:9e:b7:f9:22:67:
         86:0b:f8:06:4d:a4:de:95:b7:41:78:ff:d3:09:80:1b:c6:23:
         77:59:82:ac:ac:40:47:59:96:b1:19:ad:5e:07:13:cf:61:63:
         b2:5b:1e:2d:74:94:7e:2f:c1:b5:a4:60:39:59:8d:82:4d:19:
         a5:b8:c6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:34:18 2025 by rpki-client