Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          6Yx3FSI/6L4FWYvd9rqkz7mm8QFzWbP/T14idpbXerc=
Subject key identifier:   C3:B4:78:53:80:37:1E:F9:92:D2:FF:86:53:61:A3:A3:24:9F:96:31
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0D75
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0D72
Signing time:             Thu 03 Apr 2025 00:56:22 +0000
Manifest this update:     Thu 03 Apr 2025 00:56:22 +0000
Manifest next update:     Sat 05 Apr 2025 00:56:22 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: sodaXnPLa3ZjggvXyh0rN+tXj+s86EIyExSs+Gj+Kdo=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3445 (0xd75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF
        Validity
            Not Before: Apr  3 00:56:22 2025 GMT
            Not After : Apr  5 00:56:22 2025 GMT
        Subject: CN=67eddcb6-65a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:d3:22:38:6e:cc:08:76:de:06:47:f3:03:
                    1b:fa:a0:86:ca:af:ed:db:a1:5c:ca:76:07:45:33:
                    c1:7c:27:d8:bb:2b:28:a7:18:79:13:7d:cf:6e:75:
                    2a:27:f4:e1:7f:49:1b:16:f9:c5:cc:26:cb:b8:b1:
                    a0:f9:8d:77:3e:fa:4c:a2:58:54:08:8f:22:4a:cd:
                    af:e9:2e:ca:ed:22:b9:3f:2b:6d:13:78:37:55:d9:
                    16:1b:72:19:23:79:93:3b:9b:e7:85:f4:42:f3:56:
                    63:43:17:44:15:56:b9:9f:af:b6:db:2f:7b:3d:0d:
                    e8:b2:67:31:3d:22:fc:fa:c3:2d:58:ce:94:25:37:
                    70:2d:6a:f5:ba:c6:cd:3e:0f:da:30:d3:27:a7:16:
                    db:79:62:f3:87:6c:4d:f8:b6:88:df:4d:0a:d4:9e:
                    80:86:19:13:fc:9b:5e:45:87:07:db:fb:66:c5:4a:
                    3b:ca:ed:48:7e:f2:47:e8:7f:70:0b:23:f8:39:af:
                    16:f4:87:2d:3a:fd:d6:a0:f9:0b:ca:ce:8f:17:5d:
                    ae:08:ca:cb:d2:43:ea:3f:b0:46:c9:3a:00:96:10:
                    2e:95:6c:26:de:e6:f7:5f:17:ed:8b:32:30:c6:09:
                    fe:31:e5:2b:56:f7:9c:20:27:bf:75:0a:d8:e2:f0:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B4:78:53:80:37:1E:F9:92:D2:FF:86:53:61:A3:A3:24:9F:96:31
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:5b:bb:72:db:df:89:97:b2:34:a8:e8:ff:46:c0:bc:0f:
         92:34:22:5a:b5:0e:aa:8d:73:ae:dd:7f:1d:43:32:de:28:bd:
         23:e1:67:fd:57:3d:0c:0d:42:4f:16:59:3b:dd:59:27:91:6d:
         ce:68:8f:47:60:b0:4b:fe:cf:73:fa:df:f8:87:fd:d6:8f:b6:
         73:c9:0d:d8:63:5a:8b:4e:fb:25:69:e6:41:3f:8e:d3:f8:43:
         a3:b0:23:6c:76:76:65:2d:c1:71:50:9a:ee:57:b8:c9:31:5e:
         49:5a:93:ee:ba:52:66:4b:e6:64:9d:09:d3:1f:a9:3e:b4:35:
         1e:d2:5e:9c:f4:1f:ae:90:d5:53:f9:4c:12:70:98:5a:04:88:
         ff:8e:06:41:fd:db:f1:21:f0:ea:f7:56:b7:e6:3d:08:69:09:
         51:45:36:e3:6d:29:0f:17:2f:d3:da:22:6c:f9:dc:77:2c:90:
         2e:6f:96:23:a0:56:5f:1f:0e:b3:4d:3f:b2:91:ef:b9:16:41:
         79:43:5d:5a:42:f1:79:0b:dc:57:c8:73:74:14:fa:d0:ed:91:
         77:62:f4:01:51:11:3c:35:15:67:e0:c7:da:bb:db:7f:cf:23:
         00:44:17:56:99:f6:2c:d7:f0:6b:21:39:04:8c:99:f8:35:58:
         02:4b:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:49:04 2025 by rpki-client