Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File:                     ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier:          9iWq5HsqmI5yWDRbPurjc7rySED6klqiW/1GjTPL7Ek=
Subject key identifier:   17:15:01:75:D2:22:05:C4:2E:2F:B7:A7:BD:52:92:B2:0A:B4:77:46
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer:       /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial:       0135
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number:          0134
Signing time:             Fri 06 Jun 2025 04:46:04 +0000
Manifest this update:     Fri 06 Jun 2025 04:46:03 +0000
Manifest next update:     Sun 08 Jun 2025 04:46:03 +0000
Files and hashes:         1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: Z13ebIJC3cdYEhgVvrdM8uL4vym7bIOV0zYbdUx3bvE=)
                          2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
        Validity
            Not Before: Jun  6 04:46:03 2025 GMT
            Not After : Jun  8 04:46:03 2025 GMT
        Subject: CN=6842728c-fd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:18:fb:1a:47:24:43:5a:3f:5c:6e:90:42:
                    e2:7f:e6:22:05:ab:a2:f8:e3:a1:b7:8d:f7:af:2f:
                    7a:bf:c0:e9:73:2c:28:a1:dd:16:89:a7:a1:49:3c:
                    c1:47:f3:22:a0:86:14:87:24:79:b0:ea:d5:43:5f:
                    7b:9f:da:7c:e3:40:e4:66:4a:5c:03:a8:24:15:a7:
                    57:5e:00:45:d3:c1:cc:2a:ef:21:f9:01:2d:cb:dd:
                    e0:c7:e0:0b:4e:43:a6:d8:7a:0f:82:7a:d1:d6:00:
                    15:5e:c7:da:9c:a3:8e:b0:7f:c7:a8:7b:8c:75:ad:
                    89:98:28:06:69:47:4f:c5:61:33:b2:a3:ee:09:e2:
                    6b:91:2b:ff:7c:0e:83:33:41:4c:0e:b2:df:ff:a9:
                    09:54:65:1f:14:0a:40:2f:ae:4f:10:cb:e1:5f:1e:
                    a8:5e:ef:bd:6a:25:0d:b1:61:a6:7d:e4:ac:c8:7f:
                    d5:35:88:bd:79:ec:51:9c:5b:85:40:25:b5:71:78:
                    20:05:f5:a3:fc:f6:36:ba:80:b0:fe:bb:e7:64:81:
                    fd:37:30:ed:f0:0d:71:fd:e9:b8:6f:9a:07:a1:10:
                    10:38:bd:d2:8d:3e:e9:52:75:09:5b:90:c5:db:16:
                    67:93:fa:4d:b6:c4:14:b1:de:b0:f9:9e:29:88:b8:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:01:75:D2:22:05:C4:2E:2F:B7:A7:BD:52:92:B2:0A:B4:77:46
            X509v3 Authority Key Identifier:
                keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:8f:4b:e5:f2:da:e3:a6:ce:3f:eb:49:d5:29:55:38:b5:
         7c:7f:dc:dc:5e:7a:9d:a6:cb:13:ac:1e:84:31:7f:5d:07:e9:
         06:8f:d9:ff:8f:39:ef:68:8c:96:91:d8:ad:94:3f:08:66:30:
         32:11:28:da:80:ea:f4:cb:41:98:6b:74:fc:a2:9e:42:ad:87:
         80:02:50:79:cb:f9:e8:eb:14:f5:2a:54:71:57:cc:80:a0:be:
         53:b2:54:9e:f9:27:38:79:e2:42:7c:56:72:75:8c:84:ce:ea:
         8d:71:28:73:a0:e5:5c:e0:b0:63:b8:51:e7:c1:d6:b7:63:31:
         d5:60:52:39:d4:4a:56:be:ca:ac:d9:28:58:45:37:5b:12:fb:
         e6:02:4e:a1:80:57:f6:b6:52:de:a8:b2:8e:9a:05:7b:07:0e:
         bb:ec:dc:65:ee:1d:09:4f:96:82:03:6e:ef:72:df:39:d5:15:
         69:47:d3:b9:33:48:3f:ad:59:8c:ae:c5:2f:6a:4e:4f:83:b0:
         6f:91:64:46:a4:33:de:e8:db:fa:76:61:8e:98:62:73:44:44:
         2d:f3:08:d5:a9:53:1a:66:45:22:9c:63:98:f7:b9:77:b7:2a:
         89:a2:59:b3:1d:65:71:e4:67:2e:20:07:a6:c1:e3:ff:dc:2b:
         06:18:21:fb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REYyQzBBRjExMC8GA1UEBRMoOTJDMEREMDBENTcwMkUzOTBFRDI3OEYyQTZGREM3
NzlFQUI3QkE4QTAeFw0yNTA2MDYwNDQ2MDNaFw0yNTA2MDgwNDQ2MDNaMBgxFjAU
BgNVBAMTDTY4NDI3MjhjLWZkMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC88Bj7GkckQ1o/XG6QQuJ/5iIFq6L446G3jfevL3q/wOlzLCih3RaJp6FJ
PMFH8yKghhSHJHmw6tVDX3uf2nzjQORmSlwDqCQVp1deAEXTwcwq7yH5AS3L3eDH
4AtOQ6bYeg+CetHWABVex9qco46wf8eoe4x1rYmYKAZpR0/FYTOyo+4J4muRK/98
DoMzQUwOst//qQlUZR8UCkAvrk8Qy+FfHqhe771qJQ2xYaZ95KzIf9U1iL157FGc
W4VAJbVxeCAF9aP89ja6gLD+u+dkgf03MO3wDXH96bhvmgehEBA4vdKNPulSdQlb
kMXbFmeT+k22xBSx3rD5nimIuNWXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFxUB
ddIiBcQuL7envVKSsgq0d0YwHwYDVR0jBBgwFoAUksDdANVwLjkO0njypv3Heeq3
uoowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRGMkMwL0Q1MEQ3RjBFNUEwMzExRUZBQkQyNDc3QTc2MkU5NTFBL2tzRGRB
TlZ3TGprTzBuanlwdjNIZWVxM3Vvby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tzRGRBTlZ3TGprTzBuanlwdjNIZWVxM3Vvby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REYyQzAvRDUwRDdGMEU1QTAzMTFFRkFCRDI0NzdBNzYy
RTk1MUEva3NEZEFOVndMamtPMG5qeXB2M0hlZXEzdW9vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeeY9L5fLa46bOP+tJ1SlVOLV8f9zc
XnqdpssTrB6EMX9dB+kGj9n/jznvaIyWkditlD8IZjAyESjagOr0y0GYa3T8op5C
rYeAAlB5y/no6xT1KlRxV8yAoL5TslSe+Sc4eeJCfFZydYyEzuqNcShzoOVc4LBj
uFHnwda3YzHVYFI51EpWvsqs2ShYRTdbEvvmAk6hgFf2tlLeqLKOmgV7Bw677Nxl
7h0JT5aCA27vct851RVpR9O5M0g/rVmMrsUvak5Pg7BvkWRGpDPe6Nv6dmGOmGJz
REQt8wjVqVMaZkUinGOY97l3tyqJolmzHWVx5GcuIAemweP/3CsGGCH7
-----END CERTIFICATE-----
Generated at Fri Jun 6 18:24:57 2025 by rpki-client