Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
File:                     XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft (raw, json)
Hash identifier:          e16jG58r5qAurVlD4F7dUct6F+IwfULZpjM2kckCLa8=
Subject key identifier:   7F:E4:F0:8E:33:DE:23:30:C8:09:B9:4A:C0:55:C1:37:D5:83:88:CD
Authority key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
Certificate issuer:       /CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Certificate serial:       02C0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
Manifest number:          02BF
Signing time:             Sun 16 Feb 2025 02:29:15 +0000
Manifest this update:     Sun 16 Feb 2025 02:29:14 +0000
Manifest next update:     Tue 18 Feb 2025 02:29:14 +0000
Files and hashes:         1: XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl (hash: VSbHF2Wf8rZ6yUYKGgZ7SlQQjZKSBQAlgDCkC1vMxlg=)
                          2: 9BC3F98C6BB811EFBD7EDC40762E951A.roa (hash: oM2MhvhIjECKQQKviSvKd0xtECqaKzO3eY40jsGYaaQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                          rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAR
        Validity
            Not Before: Feb 16 02:29:14 2025 GMT
            Not After : Feb 18 02:29:14 2025 GMT
        Subject: CN=67b14d7b-c4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:d8:62:69:a0:81:08:48:43:ba:f9:e2:04:
                    e8:4c:5e:77:d7:e1:00:7e:9e:20:bd:ac:8d:5e:96:
                    c2:d1:b3:92:65:97:8b:be:b0:2f:05:80:16:86:69:
                    83:68:af:2d:e1:42:79:79:a2:ef:56:6f:70:13:cf:
                    06:e5:a4:41:30:a4:e2:45:f0:dc:21:b7:84:c9:21:
                    1f:2c:b1:45:9c:eb:48:0f:d7:a2:ce:82:42:0a:97:
                    c5:50:f2:37:15:a6:c5:9e:08:32:66:56:85:31:71:
                    3a:1c:ee:32:f6:ce:49:d3:34:ac:08:3a:66:d7:f7:
                    02:2b:a9:ae:b7:b4:82:72:b6:90:48:79:39:3d:38:
                    1f:a9:8c:48:dd:6e:31:16:92:b0:36:af:41:07:c0:
                    7c:58:a6:a4:e0:00:d1:56:f8:62:16:6f:7f:65:e7:
                    e0:3d:e9:d8:c1:8b:e4:e9:3e:d0:f8:1f:5a:64:b7:
                    cc:6d:8c:3c:6f:5f:37:ae:c6:b7:57:14:93:ec:26:
                    64:53:f3:a8:30:1b:7d:56:a4:af:a7:85:f3:e5:93:
                    33:8b:68:a1:24:49:f0:a6:a5:4d:e3:b3:07:ff:0a:
                    04:88:1b:01:0c:f1:e8:36:70:4e:1b:00:34:e2:79:
                    c4:d4:a2:7e:f2:1d:9c:46:db:93:b6:3d:b6:c4:bb:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E4:F0:8E:33:DE:23:30:C8:09:B9:4A:C0:55:C1:37:D5:83:88:CD
            X509v3 Authority Key Identifier:
                keyid:5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cb:91:11:f6:a8:2a:f3:45:2c:2e:80:34:5e:a3:7b:69:71:
         4f:9e:5e:4a:e3:72:10:f7:4f:20:ec:63:2e:9c:84:08:b5:b2:
         c8:e2:49:c6:18:4e:e4:5c:45:6c:31:fc:c0:ee:d4:2c:65:12:
         e9:e4:c8:c5:da:35:5f:40:16:1f:af:5c:0c:11:d3:94:86:b7:
         4f:02:4e:2c:3e:51:f5:3c:92:39:64:81:8d:97:ff:c3:3c:94:
         b4:bd:f7:95:67:30:38:76:d7:50:50:41:54:9a:8c:72:03:56:
         4a:24:0f:2f:29:c4:3d:9b:06:c4:c8:28:9a:62:0a:05:c7:9b:
         ab:b9:f1:37:23:9d:90:01:e9:30:36:57:4f:31:8f:a9:11:0d:
         87:12:e6:66:d2:8e:ef:89:1f:54:03:13:49:5b:b6:2d:15:b3:
         d5:83:b6:46:71:c0:7b:04:7a:41:40:2b:a1:e1:a1:35:75:cd:
         ce:cd:ff:cc:34:54:21:79:82:de:08:c7:16:fc:e7:99:ec:07:
         d9:d2:d5:3f:2b:da:f9:d3:75:00:2c:97:b3:f1:d9:40:1a:d2:
         6f:55:3b:c4:db:14:23:1c:37:ef:c4:d0:31:89:57:e5:78:fe:
         d2:d6:aa:2c:d8:f5:ae:2a:6f:ec:4b:0e:20:98:29:f3:08:b0:
         a3:50:44:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:41 2025 by rpki-client