Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft (raw, json)
Hash identifier:          wrA8IN6+sLuqmJRdwAtFaC0YZVydZEluWkPO8OA3C/U=
Subject key identifier:   DC:83:B7:4A:E5:43:AB:76:63:CA:33:BA:B5:A6:CD:AB:CC:70:C4:9E
Authority key identifier: E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Certificate issuer:       /CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
Certificate serial:       04D3
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
Manifest number:          04D2
Signing time:             Fri 11 Jul 2025 03:09:55 +0000
Manifest this update:     Fri 11 Jul 2025 03:09:54 +0000
Manifest next update:     Sun 13 Jul 2025 03:09:54 +0000
Files and hashes:         1: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl (hash: ksC3JRbXv5tzLgDrl/p4u+zzLmzA+rMx6P9r40Rb5dk=)
                          2: A971279EB0EE11EC8D6592845A40D577.roa (hash: 0T+GuWqC72/c81r19BWbq4EQ4yHRxHBnW02fRB1Ftrs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                          rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Jul 2025 00:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Validity
            Not Before: Jul 11 03:09:54 2025 GMT
            Not After : Jul 13 03:09:54 2025 GMT
        Subject: CN=68708083-a9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:22:74:ff:c2:db:07:2c:12:d0:7c:bc:e1:
                    a6:c3:01:18:e1:9b:a8:f4:db:8a:ad:e2:7e:03:10:
                    19:50:19:c7:8c:1f:a9:4d:19:0f:29:cd:27:1c:bd:
                    bd:94:23:48:50:68:9a:72:e3:ac:76:38:48:45:ef:
                    81:93:bb:3b:a3:4e:d9:d8:6c:65:69:e6:c8:0b:63:
                    c2:4a:d2:b0:93:66:94:3c:0e:6b:ac:d9:bf:bf:a1:
                    58:35:eb:e8:8d:0e:38:db:59:45:c3:50:82:58:2a:
                    a2:3e:f6:44:da:cd:12:04:f1:9a:57:55:31:c5:8e:
                    80:fc:e2:8d:d9:3b:11:a5:62:a7:e0:40:dc:47:74:
                    be:7b:2d:dc:7a:07:3a:72:b9:3d:49:3f:9c:05:40:
                    77:c9:6f:f2:cd:a5:b8:e0:e3:df:9a:3a:97:14:7d:
                    d8:56:46:b5:a7:f1:56:d6:87:19:4b:36:48:57:db:
                    ba:7e:1e:1d:9a:20:4e:b5:b5:54:ce:01:33:ea:7b:
                    69:e4:70:4e:74:06:9a:a8:31:a2:dd:db:ea:ce:21:
                    36:c1:cd:34:69:ad:33:22:f5:07:0d:e0:82:a0:aa:
                    63:7f:fd:bd:ef:cd:70:b4:67:3e:31:75:f7:b0:b4:
                    02:3b:80:51:74:5d:c4:bc:4a:82:90:fd:cd:b7:48:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:83:B7:4A:E5:43:AB:76:63:CA:33:BA:B5:A6:CD:AB:CC:70:C4:9E
            X509v3 Authority Key Identifier:
                keyid:E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:15:ff:1d:db:71:3f:9a:5f:64:82:65:2d:b9:95:94:df:
         81:ea:65:a5:a0:fd:64:83:30:9e:c4:76:e9:1b:c0:aa:5b:27:
         d2:48:99:a1:24:6d:cc:4e:55:e8:b8:57:68:2f:66:88:46:22:
         25:2e:f6:d5:81:e5:cb:80:22:12:5e:18:38:a5:ac:d4:b4:cd:
         5a:3c:bc:85:a5:9c:59:44:b5:4e:29:17:a7:6b:00:b9:ad:7c:
         25:40:c1:9c:1f:90:fb:d0:22:da:e2:d9:86:a9:bd:c6:7c:a6:
         36:66:6c:c1:f0:bb:e6:de:b5:de:ca:6e:72:f6:5f:54:fc:ec:
         ad:4c:cd:ed:d3:79:34:e2:4a:9f:5e:60:ba:c8:81:6f:13:9e:
         73:3f:dd:4c:42:d3:fa:b9:8c:f6:dc:89:69:88:9b:28:c4:ae:
         46:aa:78:d5:cb:d3:e8:ec:57:a8:7d:b9:65:29:8d:54:46:62:
         10:dd:04:7a:aa:6e:57:12:b0:10:db:4c:23:22:b0:ed:ec:7d:
         16:c7:a8:6b:94:c8:10:e8:f5:ed:6f:01:c5:ea:39:14:3f:7a:
         cd:46:84:a0:ce:8a:43:be:c0:d9:75:ae:32:69:44:c7:db:32:
         83:3c:7e:9c:9a:8c:40:c3:c9:50:fb:fb:9f:89:4a:d8:c7:c2:
         bd:4c:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 06:28:11 2025 by rpki-client