Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
File:                     Ty5dBoUPqUuSIs9__nb4svMBISU.mft (raw, json)
Hash identifier:          FJfzUlCu+anlXjKZzKh3tCPHVLRLF4ssuCP0zEDCx30=
Subject key identifier:   7D:45:42:22:AE:DE:AB:AC:30:8E:1A:9F:87:87:93:1A:D4:E3:A7:40
Authority key identifier: 4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25
Certificate issuer:       /CN=F36E570FAF/serialNumber=4F2E5D06850FA94B9222CF7FFE76F8B2F3012125
Certificate serial:       4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
Manifest number:          4A
Signing time:             Wed 05 Feb 2025 03:21:17 +0000
Manifest this update:     Wed 05 Feb 2025 03:21:17 +0000
Manifest next update:     Fri 07 Feb 2025 03:21:17 +0000
Files and hashes:         1: Ty5dBoUPqUuSIs9__nb4svMBISU.crl (hash: JnLUOzjsS/McbiRXYcdV1kVZzq48u90dHbiKPHFSunk=)
                          2: FAB09A2AAF2B11EFBDDD2D9D762E951A.roa (hash: pXJWIZdalTimXX6hDNwirsv+KOa5aQ9rGKxIX49vIsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E570FAF
        Validity
            Not Before: Feb  5 03:21:17 2025 GMT
            Not After : Feb  7 03:21:17 2025 GMT
        Subject: CN=67a2d92d-1e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:8a:7f:4a:b1:27:00:c4:8f:18:ee:82:9a:
                    81:2f:7d:08:65:08:ca:56:95:e6:08:52:51:e2:95:
                    e9:09:f5:f9:dc:60:b2:08:89:31:b8:70:b7:2e:44:
                    b5:d9:ac:6d:98:dd:5b:49:71:ce:24:f2:2d:f7:72:
                    74:24:51:a9:af:b7:28:f7:9c:2e:55:e3:63:a3:37:
                    ea:78:58:d0:09:3d:2b:03:b6:55:a8:5c:79:c2:2e:
                    30:cc:b3:aa:4a:74:2d:e0:a8:75:61:8b:57:c2:3b:
                    34:4f:6f:94:97:77:4e:4c:12:f1:1b:16:df:4e:5b:
                    a3:01:7b:d7:90:83:1e:61:f1:88:4a:d6:c8:45:4d:
                    d7:13:e7:5e:e5:e2:3b:46:81:07:74:e4:64:74:0b:
                    94:76:1f:1e:87:03:97:3d:e1:73:89:9d:d8:c5:06:
                    81:51:e9:75:6e:59:94:3e:2c:b2:33:22:2c:e9:09:
                    98:d9:37:60:e6:e7:10:97:6a:63:d9:03:f4:1f:14:
                    67:de:13:df:20:0b:82:1c:b7:a0:93:3c:29:9a:95:
                    b5:94:f2:95:08:31:d1:bf:90:8c:d3:80:d0:c2:db:
                    74:04:da:d8:54:c4:cb:5c:00:5a:14:83:38:b7:28:
                    9e:e1:32:89:35:65:10:52:a2:de:a5:00:e9:0b:2d:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:45:42:22:AE:DE:AB:AC:30:8E:1A:9F:87:87:93:1A:D4:E3:A7:40
            X509v3 Authority Key Identifier:
                keyid:4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:67:84:ef:8e:84:4c:6a:b8:f7:79:38:74:21:da:4d:e3:6a:
         f3:ce:33:ed:61:81:37:70:72:73:89:82:a3:e1:80:c4:0e:b0:
         2d:a7:2f:44:73:62:fe:11:02:53:ed:f2:48:66:73:c2:de:79:
         b8:17:a7:74:59:07:2e:e5:aa:50:10:64:10:a3:ce:d1:54:a0:
         95:6b:d9:eb:0c:77:d5:17:01:34:ba:67:5a:2b:80:6c:b1:41:
         04:e9:83:7f:67:cf:74:b8:23:94:d5:d4:47:8e:78:8e:89:f1:
         ca:10:91:cb:3e:44:57:f5:58:ab:39:7a:4e:3d:f0:b1:6f:ba:
         e1:03:ff:2f:9b:5d:cf:8e:00:f3:68:80:c8:b3:4b:d4:fd:59:
         67:90:42:e0:2c:36:3d:4a:55:da:e9:05:19:40:e5:66:03:fe:
         12:64:61:9a:2d:ef:ab:15:ad:6d:00:11:85:f4:48:64:26:5c:
         cd:9c:b5:9c:83:00:58:97:59:17:5f:fd:a6:84:26:b3:c4:6e:
         b6:70:6f:49:6b:31:2e:02:22:4d:9e:e1:fd:4b:14:76:b3:bf:
         9f:01:9b:ab:ea:65:56:5e:ab:7b:29:d5:97:e7:2e:16:ee:80:
         ef:f1:96:63:86:67:79:62:89:66:4f:bc:c1:37:c1:97:b3:3e:
         0a:4b:97:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:47:19 2025 by rpki-client