Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File:                     ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier:          E38PV/wKioBtvcZpwEt+YC7g2htcuJ//1vfcyNyXSzg=
Subject key identifier:   0B:89:F9:DE:4C:1A:6A:B0:02:FB:D8:BA:7F:48:DA:A7:45:E6:9E:35
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer:       /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial:       0450
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number:          044F
Signing time:             Mon 09 Jun 2025 03:04:10 +0000
Manifest this update:     Mon 09 Jun 2025 03:04:09 +0000
Manifest next update:     Wed 11 Jun 2025 03:04:09 +0000
Files and hashes:         1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: Ss93gPobu/8WmD406o0ew46t4ZNSLWm5H+U2NaZanDw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Jun 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
        Validity
            Not Before: Jun  9 03:04:09 2025 GMT
            Not After : Jun 11 03:04:09 2025 GMT
        Subject: CN=68464f29-4a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:17:cf:4a:21:e7:2b:48:9a:5a:e6:4c:5d:
                    7c:be:8b:81:41:4c:06:ac:66:8c:bf:85:da:bf:9e:
                    e5:37:af:40:99:fc:10:ed:37:dd:58:31:0a:e6:fa:
                    21:c1:2a:e5:1f:8a:97:46:51:aa:e7:15:66:46:cd:
                    b3:1f:2c:9c:f3:e8:24:7e:32:cd:11:92:c2:38:2d:
                    eb:da:7d:06:0c:1f:cf:ea:78:aa:c0:b4:c9:4f:31:
                    b9:5c:ef:14:ea:49:25:9e:9e:71:f6:f1:3b:b4:df:
                    32:f3:f0:5f:02:ee:6b:80:57:39:02:c2:a3:e8:c3:
                    ef:d2:ea:b3:12:7f:a8:a8:a3:ab:37:4f:12:67:4d:
                    c9:01:3e:7e:2a:83:af:06:49:a0:12:c1:d9:58:d3:
                    5b:02:70:5d:82:cc:8a:c3:44:ac:f1:27:cf:25:fc:
                    38:59:65:d8:e2:f9:63:c9:53:94:95:c5:53:ac:c3:
                    d9:45:69:cd:0f:02:45:9e:b9:b0:2e:8e:ad:a4:80:
                    39:ba:38:2d:51:6e:78:cd:5c:ed:e7:79:30:b3:ff:
                    c4:f6:bd:24:7d:97:e3:df:23:54:2f:c5:92:bc:1c:
                    4d:0a:8f:ad:4d:26:21:cc:ac:a1:c7:ce:79:77:25:
                    dd:ed:dc:62:26:cc:ae:76:eb:86:e7:bd:e6:59:33:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:F9:DE:4C:1A:6A:B0:02:FB:D8:BA:7F:48:DA:A7:45:E6:9E:35
            X509v3 Authority Key Identifier:
                keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:9a:b3:72:74:90:73:58:87:70:42:54:e1:fd:4e:84:8b:
         5e:84:9e:5c:9f:f4:06:2c:ce:b5:67:56:b1:0d:51:10:27:de:
         4b:e4:0e:c7:d5:9f:61:6c:8b:69:3f:76:0d:18:bb:59:c7:a0:
         08:b1:76:b6:49:c4:98:f0:0d:e3:a4:ee:2e:43:96:13:e3:fd:
         76:3e:2d:41:00:52:b0:92:c5:fb:da:e8:f5:9b:9a:76:a5:96:
         5c:91:8e:10:d9:30:de:9f:87:42:c2:fd:9e:76:5c:53:ca:6a:
         51:27:f9:d2:08:84:5d:c1:b7:ab:1e:b6:ca:e2:c9:f7:0d:24:
         34:10:ba:98:a9:e5:46:c0:b2:3a:85:1a:62:57:c2:b7:ff:87:
         0f:e4:ce:b4:a0:3e:f4:75:3f:0c:7e:d2:ec:e2:82:6d:37:6d:
         4f:1d:57:f5:b1:e8:20:4f:f7:2f:f3:c0:32:14:22:d6:ca:6c:
         2e:69:41:b8:fe:1d:ae:3b:78:f9:2c:a9:5c:3f:cf:de:8d:e5:
         ac:d2:b0:19:c9:3a:be:8e:03:a5:b1:2a:af:81:2c:46:74:a2:
         73:6d:16:b6:1f:05:5b:35:ed:62:a9:f2:b1:73:89:e8:a7:70:
         23:4d:9e:26:43:9f:05:ea:21:f8:b1:39:6f:9d:a1:24:9a:39:
         a2:40:bc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:37:54 2025 by rpki-client