Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
File:                     Peh56gnhe4ORxyjbem-nsnOQS3o.mft (raw, json)
Hash identifier:          ak6pkyisuWeAKs9V+o1Hd1ZELIC/3FT4PhQCm8QQdhA=
Subject key identifier:   1B:D1:B6:04:0E:AE:74:AD:5B:7E:E8:AD:6E:C7:D6:24:DA:8E:BF:C5
Authority key identifier: 3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A
Certificate issuer:       /CN=F36E6D28AF/serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
Certificate serial:       05AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
Manifest number:          05AE
Signing time:             Wed 04 Jun 2025 02:24:44 +0000
Manifest this update:     Wed 04 Jun 2025 02:24:43 +0000
Manifest next update:     Fri 06 Jun 2025 02:24:43 +0000
Files and hashes:         1: Peh56gnhe4ORxyjbem-nsnOQS3o.crl (hash: jT/9HP87Ts/RXUEbifjUvn9aFO5m9sszzjN53d8c4DQ=)
                          2: 4CA13A74EA1D11EBAEB1FE0BD8A014CE.roa (hash: sIG4V1gL0C8GEyce4Zp/c68CcXuUBRgl5avwx6jTy/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455 (0x5af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6D28AF, serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
        Validity
            Not Before: Jun  4 02:24:43 2025 GMT
            Not After : Jun  6 02:24:43 2025 GMT
        Subject: CN=683fae6c-49fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:eb:02:c3:e3:40:53:7f:99:7c:07:ed:da:
                    67:95:63:31:ee:39:75:81:8c:6e:d5:c2:06:64:87:
                    69:4a:b8:e2:0d:3c:16:01:9e:21:09:12:0c:08:c8:
                    ab:a4:6b:0b:34:4b:02:5d:08:a0:a9:3f:a7:3f:6f:
                    9e:31:8b:03:f2:47:d9:b2:1b:3e:ae:d8:94:7b:af:
                    39:84:65:47:b9:a3:cf:f4:12:76:5c:59:7b:5e:3c:
                    11:56:83:88:dd:59:2d:e9:56:9e:91:fd:a1:7f:77:
                    ec:4a:15:4b:d4:2a:07:73:8c:10:ff:04:c2:d3:6a:
                    38:7c:54:2b:a0:9f:03:e3:71:ec:d4:74:93:94:f2:
                    7f:5b:0a:c8:52:c2:16:f9:86:19:9e:cc:99:20:27:
                    c1:45:c2:c1:94:69:4c:e7:eb:b1:23:f4:8e:f2:b2:
                    e0:bf:7b:6d:8e:32:5c:7a:25:2e:33:80:92:a5:b7:
                    51:2f:7f:6d:b2:b0:cf:93:72:35:b6:ed:79:bb:eb:
                    af:43:94:0f:95:7a:4b:3c:34:36:d8:09:c9:80:09:
                    8d:b2:79:4e:57:3b:27:87:bf:a6:4f:28:ea:f1:96:
                    d7:09:70:6f:74:45:ca:c4:c3:de:6b:5b:c6:56:23:
                    14:a1:90:7c:3d:59:40:cb:3b:d6:af:b0:7b:25:6a:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D1:B6:04:0E:AE:74:AD:5B:7E:E8:AD:6E:C7:D6:24:DA:8E:BF:C5
            X509v3 Authority Key Identifier:
                keyid:3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6e:0a:10:6e:c1:1f:f3:24:c0:36:4f:cb:34:f7:95:b1:cd:
         09:ac:78:00:54:cd:94:db:ba:ff:42:13:0b:a0:c3:b2:d9:c5:
         62:ad:85:d2:13:69:a5:9d:8d:67:23:48:6c:3f:72:31:51:c5:
         dc:e6:3c:b0:24:9b:a9:bd:5d:8e:c3:0d:1b:c2:36:54:ae:57:
         b0:64:c0:26:a1:92:de:b0:8f:97:96:26:58:07:49:b5:aa:ab:
         3c:84:16:d1:b1:5d:a8:d3:27:25:13:6f:ff:b6:86:0f:74:b7:
         39:4a:1e:33:69:b5:a2:a9:04:75:33:e5:84:fd:4b:5d:f0:72:
         8b:27:44:fe:bb:bc:5a:27:7d:f0:29:cb:7c:c5:3a:42:ce:95:
         b5:63:d3:62:a3:0e:b4:d5:9d:84:2a:8d:41:6d:60:39:47:10:
         a2:96:4f:17:93:44:d3:63:a5:0a:df:65:38:27:01:e5:2e:c2:
         c0:21:74:dd:02:e0:98:ac:eb:fb:1e:7e:55:3c:cc:27:72:2e:
         64:3b:cc:c3:5c:c1:b7:71:00:07:e2:9a:9c:1e:dd:f7:1d:ac:
         2b:29:39:d6:58:2e:2d:01:7b:fd:10:20:e2:93:83:57:cc:a8:
         67:ae:39:ac:b0:4f:bc:84:a8:b4:98:f2:45:0b:87:ab:6a:94:
         28:a9:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:29:05 2025 by rpki-client