Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
File:                     CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft (raw, json)
Hash identifier:          PSAeV4HP9pFDKapCDnDJaKMVk8RJICo/njQ2lkfzZ8I=
Subject key identifier:   07:51:9B:5A:9E:0E:FB:2B:D2:9D:D4:D2:CC:94:C3:3F:3D:BC:38:77
Authority key identifier: 08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
Certificate issuer:       /CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Certificate serial:       091E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
Manifest number:          0918
Signing time:             Thu 31 Jul 2025 01:27:18 +0000
Manifest this update:     Thu 31 Jul 2025 01:27:17 +0000
Manifest next update:     Sat 02 Aug 2025 01:27:17 +0000
Files and hashes:         1: CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl (hash: oc0E6I9f3A7pGg/1hTcDavi3/znn2h6G4I6JQuiCe94=)
                          2: 7E88370E7D5F11E993BB1E7FF8AEA228.roa (hash: am92gfMFQqWByXCSl8p9EO6PUlEqWuTUeM+DI4nReL0=)
                          3: 5E76ED3C623911F09FE19597DAE4EC9C.roa (hash: l4ecDIraqY10TSmQyQbSow1V/demlZg058HXYFXg3hA=)
                          4: 1963512C623911F09F861D97DAE4EC9C.roa (hash: 4aZy3ZXYskyRarEP/OWaGENB6KUMQOh7UNemMxR0fpU=)
                          5: 2A3ED73014EE11EA8694372AF8AEA228.roa (hash: FBxa8Lun9k2Hzq6Q2hfcEGXCZPwxZGKNJqxPvNPWs2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334 (0x91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA693AF, serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
        Validity
            Not Before: Jul 31 01:27:17 2025 GMT
            Not After : Aug  2 01:27:17 2025 GMT
        Subject: CN=688ac676-66f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:03:d6:96:28:35:a6:85:ec:df:15:e7:49:
                    d1:1a:55:08:b3:53:01:e1:5c:93:d3:a1:bd:16:2c:
                    6c:e8:67:31:52:96:bb:8b:d1:13:4d:b5:17:49:35:
                    32:6c:81:00:5a:21:ad:39:58:0e:45:94:f2:4d:33:
                    ba:fd:d1:48:5c:63:2f:c5:d8:ca:ad:51:d2:b9:71:
                    1f:06:c5:0d:59:9c:fb:c2:0c:1e:96:39:e6:61:cb:
                    cb:be:0b:f8:30:3d:fd:d1:9c:b9:6f:a5:a1:19:b0:
                    48:9e:48:d8:61:65:a1:50:ae:f7:28:25:f3:7f:77:
                    95:6b:a6:f8:cf:87:8d:96:05:a6:8b:20:b3:23:d5:
                    01:12:ff:60:a8:e0:97:46:d4:2b:65:90:3f:d5:22:
                    0f:9e:1b:ed:8e:90:8c:e0:1e:9e:00:f7:01:59:68:
                    2e:e3:0d:3b:d3:2e:27:f3:93:db:87:47:9e:a3:85:
                    5a:9a:00:89:d3:9c:c7:27:af:7d:d0:1b:23:2e:a0:
                    71:6d:8b:ac:c9:d4:f7:a6:a6:76:54:10:fd:04:ba:
                    b6:80:78:6e:fb:0f:ae:c4:b3:14:3a:e9:44:23:49:
                    36:90:79:26:30:29:ad:12:22:bc:33:31:27:a0:92:
                    f9:1d:92:7f:41:99:5e:d9:35:ac:83:83:82:d1:6f:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:9B:5A:9E:0E:FB:2B:D2:9D:D4:D2:CC:94:C3:3F:3D:BC:38:77
            X509v3 Authority Key Identifier:
                keyid:08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:1a:8a:42:ff:51:8d:be:eb:35:b2:c5:44:ed:e2:b4:c3:
         b9:1d:81:00:2b:37:9a:20:e2:4d:4e:37:f7:94:e0:33:21:44:
         6a:3f:78:6d:71:e0:c9:ec:fd:77:40:b2:4f:4d:f2:dd:2d:99:
         44:ac:3b:1f:08:ee:fb:3d:81:3a:a6:0e:77:13:8a:80:99:58:
         96:29:f5:78:6e:f4:26:b3:16:be:58:83:67:1e:9c:4c:c0:1c:
         f0:bc:42:87:33:c5:71:52:bf:a4:db:6d:63:1a:41:cf:02:cc:
         f2:81:2e:d2:f8:3d:5a:67:c3:5c:93:1c:d5:4a:39:a2:a7:ce:
         03:13:9a:66:44:46:18:95:ed:bc:78:6c:7e:3e:51:ab:f5:cb:
         ca:d5:06:34:e3:36:3c:c3:a0:43:e0:a8:68:1f:0f:94:f9:fc:
         70:e2:8b:d5:0f:4f:2d:a6:ea:f8:32:d3:10:58:00:9d:a8:f1:
         f7:4f:5b:27:f7:17:00:98:0b:fb:ea:41:36:b0:54:f2:93:ea:
         97:49:a9:0f:75:a0:d5:5f:fc:4e:2c:06:5f:26:ca:65:d5:89:
         50:67:c1:7d:d8:af:1e:7e:e1:e7:89:77:0a:1a:8a:2e:f2:aa:
         da:6a:21:32:53:2f:11:ba:6d:c0:eb:42:72:90:e3:e4:34:8e:
         fc:7a:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:19:23 2025 by rpki-client