Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          vaDP2mxQnclYKF70TFHGFmDeG8zJRedVpzlBD/sK4Dk=
Subject key identifier:   50:47:C5:E5:C2:2F:B8:80:6A:AB:37:4A:43:28:0E:FC:99:DB:86:AF
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       0128
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          0127
Signing time:             Sun 08 Jun 2025 04:48:28 +0000
Manifest this update:     Sun 08 Jun 2025 04:48:27 +0000
Manifest next update:     Tue 10 Jun 2025 04:48:27 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: SbaTJ3Laj5EktgSM/mXAPD51P06e9XiNBzobfYnHVoI=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 04:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: Jun  8 04:48:27 2025 GMT
            Not After : Jun 10 04:48:27 2025 GMT
        Subject: CN=6845161c-e4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:79:1c:3c:1e:e7:ac:57:88:4c:5c:d4:13:
                    e9:86:26:50:79:43:ba:3a:60:fd:6b:b8:2d:b0:f3:
                    c4:07:82:10:95:04:22:63:68:28:a7:b4:ad:39:4b:
                    00:4b:92:e9:23:79:ab:5d:e6:c6:85:16:1c:c6:8a:
                    57:f2:d7:dc:f9:9e:13:1c:0d:59:35:08:32:21:2d:
                    3d:72:8e:2d:1d:6e:2e:9e:eb:e5:44:99:73:e5:51:
                    af:46:c2:f9:06:82:15:16:c1:41:c3:f8:49:8b:1e:
                    c9:59:bb:25:65:ca:33:c5:83:90:af:f5:5f:f0:fc:
                    f2:b3:e4:c9:4d:09:d9:84:b6:bd:74:bc:a3:74:a6:
                    7a:bf:ea:90:92:69:52:bb:28:78:86:c8:e6:73:2a:
                    ed:a1:1d:d6:78:b9:ba:79:f4:bc:4b:1b:83:36:c8:
                    75:5b:9e:68:d5:24:c0:12:64:cc:5a:9d:3e:ab:be:
                    3d:f1:8b:a1:b0:c4:c2:7b:9a:12:77:bf:86:23:00:
                    d8:d3:b2:94:8b:17:e5:7d:6e:05:c6:8e:fe:98:52:
                    08:e7:fa:78:78:19:91:0f:fd:a3:8f:33:da:7c:88:
                    37:e1:55:1a:a6:1d:8e:a4:4d:f7:7e:2d:92:67:b8:
                    92:84:1a:45:af:62:2a:dc:0f:1c:40:25:b0:01:b2:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:C5:E5:C2:2F:B8:80:6A:AB:37:4A:43:28:0E:FC:99:DB:86:AF
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:42:4e:6e:09:77:a7:38:e7:e9:34:f1:cf:ba:a5:7b:3a:
         e3:67:ba:86:10:62:01:f6:b7:e8:88:c2:ff:0b:42:de:38:03:
         e8:ee:33:07:de:ac:61:22:d4:17:2c:4f:ad:72:82:4f:7b:64:
         b5:14:93:7b:49:3f:1d:72:b5:17:56:18:64:4e:3c:90:ed:88:
         08:c9:52:81:53:b1:52:d1:e9:9a:48:53:2e:45:62:86:0f:69:
         75:b6:5a:6b:aa:36:32:82:5e:a0:c6:48:39:b4:83:8b:f6:ba:
         df:d0:24:55:b3:63:04:f0:1f:90:32:06:09:98:1e:a8:b5:c4:
         2d:6e:f1:6b:a6:09:39:fa:fa:49:bc:dd:a3:ee:30:2d:e9:23:
         40:cf:8c:34:92:47:88:a2:b5:14:42:0b:21:00:b6:c4:2e:cf:
         47:7c:fe:b1:32:f7:cb:4a:1c:71:a7:8e:e6:be:b8:dc:86:f6:
         43:a5:82:b3:31:30:0f:4d:f4:e7:13:ca:c9:a3:e1:8a:8a:9f:
         2e:51:4b:33:ea:8c:cc:86:ea:7f:65:51:49:fb:7b:16:0b:9c:
         26:b4:d5:55:95:52:f0:24:f9:ba:26:d9:ea:05:1d:a2:f8:7b:
         fb:f6:ec:d5:d0:c1:e2:33:fd:8e:49:4a:81:b6:fc:2a:2b:c2:
         48:ae:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:57 2025 by rpki-client