Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          Cza/anU4FWhZqMsCcdUjt0NDEXh3G6VPIR3Knr0jcaY=
Subject key identifier:   9A:A5:7D:73:5C:D5:ED:9C:7D:AF:30:A5:29:07:1E:7F:06:AE:F0:7D
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       015F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          015E
Signing time:             Mon 09 Jun 2025 04:41:10 +0000
Manifest this update:     Mon 09 Jun 2025 04:41:10 +0000
Manifest next update:     Wed 11 Jun 2025 04:41:10 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: OWh5RX6P+NTqcOOPC/zPm5gvRr1wzgkKyCvOHx6GwfM=)
                          2: C398885E3AC311EF90F6DF67762E951A.roa (hash: ul3nn21hDO7UgXCYkLGPryVSInddXUiuHuE7QBhZSgU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Jun 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF, serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Jun  9 04:41:10 2025 GMT
            Not After : Jun 11 04:41:10 2025 GMT
        Subject: CN=684665e6-0f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:4c:24:43:f0:0f:fa:a9:75:22:1f:d5:ab:
                    c0:e4:14:55:a6:0c:39:06:9d:8b:10:dd:1c:82:32:
                    4f:b4:da:9c:8e:33:ac:5b:c5:52:08:35:33:68:1b:
                    70:c5:df:4a:cb:7c:05:e9:de:6b:4f:f3:33:a1:35:
                    ca:4f:70:08:34:7f:81:0c:c6:ff:1e:ee:4f:15:a4:
                    80:53:5e:01:da:2e:11:21:94:71:d8:f5:32:59:79:
                    ff:33:b2:ff:a2:bf:9e:54:96:ce:4c:7a:3a:82:23:
                    93:fb:a3:b5:17:05:93:35:a4:6a:aa:2c:f6:ac:e9:
                    50:c5:28:ee:64:46:7e:94:b6:e0:4a:5f:75:2c:f1:
                    d7:8d:df:00:8f:ad:a7:c1:91:ab:a6:b7:1a:4e:4e:
                    0b:71:87:7f:70:93:2b:2e:80:68:54:5a:64:d8:45:
                    ff:f0:74:57:c2:5a:6e:0f:ef:d7:97:35:5a:f9:2c:
                    e2:0e:fd:93:fd:83:d5:ea:cd:80:9d:e6:58:be:a3:
                    e9:fc:52:65:03:b3:b1:9e:d7:c6:bc:0e:ff:db:cb:
                    3b:be:bb:c8:de:2d:fc:74:ba:b4:85:ce:54:f4:8a:
                    55:6d:a3:c1:b1:3a:8a:ad:e6:39:24:f2:60:dd:a2:
                    ce:fb:55:27:b1:f4:bf:fc:19:ae:25:43:3d:d6:21:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A5:7D:73:5C:D5:ED:9C:7D:AF:30:A5:29:07:1E:7F:06:AE:F0:7D
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:15:7d:4a:44:be:03:7a:3f:98:1e:3e:6f:b2:a0:00:45:
         c2:e3:a3:3e:2e:e3:30:06:de:c3:47:5f:b7:7e:14:f6:45:be:
         e1:8e:ac:47:e9:8f:d6:42:f2:bf:61:63:6f:04:a1:e6:02:a1:
         cb:fd:1d:7e:06:84:91:33:6d:6a:e8:50:b0:12:e6:86:9e:f7:
         79:49:1f:e5:ce:e8:e7:68:42:35:80:aa:9f:e0:76:5e:72:c9:
         f8:f7:d2:a8:df:d1:c2:d5:31:7e:1c:cd:cb:4b:c2:b2:81:81:
         a7:3f:76:51:43:b0:bc:4c:4e:9b:31:c2:7b:d6:19:5c:f3:2e:
         29:cd:dd:98:15:e9:f6:67:7e:50:cc:6f:1b:14:e5:30:fc:2f:
         9c:e3:5b:7a:32:af:45:9f:3c:f1:8f:3a:e5:b4:fe:0f:d7:c7:
         fe:ff:6f:d2:2b:86:5b:5b:89:0c:46:b5:b3:b1:c0:21:c1:a7:
         e7:d7:5c:bd:66:c6:52:39:00:05:db:5d:af:c5:b5:76:23:ec:
         99:06:de:75:fb:16:27:33:36:3a:17:00:3f:0e:64:63:9a:9b:
         cd:e0:77:b0:d8:88:04:bd:f5:ae:4e:de:f7:51:6a:fd:fd:2b:
         df:6f:7c:98:cd:49:1e:92:f7:e6:29:cc:65:50:53:ba:ad:69:
         81:70:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:52:36 2025 by rpki-client