Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
File:                     DgQKv0-UXzDXfaKLvwKLasSdBCw.mft (raw, json)
Hash identifier:          kqY4PtBEMT6O3TYVVH9N5Nx4hcpKQeyF4LCf2eV310Q=
Subject key identifier:   40:5C:BD:AB:37:66:A3:A0:53:37:E6:3E:77:C4:00:2B:14:66:17:CA
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       08CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
Manifest number:          08C3
Signing time:             Sat 07 Jun 2025 01:36:09 +0000
Manifest this update:     Sat 07 Jun 2025 01:36:08 +0000
Manifest next update:     Mon 09 Jun 2025 01:36:08 +0000
Files and hashes:         1: DgQKv0-UXzDXfaKLvwKLasSdBCw.crl (hash: kijnhilX37kFDBkOr3qMS6kTsf+Z0MNBVUJKPgM6dCM=)
                          2: 82A311068E9D11EA936A3D74F8AEA228.roa (hash: 2fJIX7cXKI9q+Xtr5M7y3JF2k9yaJVXpVCcsMHvm1sY=)
                          3: 25FEFCBCDF7011E997CFF03AF8AEA228.roa (hash: NtIZQtczAvdXKaNMIz0m1Q59Z9nMLMNC/p7wM9puv2w=)
                          4: EAE45BCCDF6F11E9826AA83AF8AEA228.roa (hash: pbv4p9icCN4O4WG3leeCL1EpjVjH0clUw2cLgw9t0TQ=)
                          5: 9F906EFADF6E11E99541B739F8AEA228.roa (hash: hCPkplK+hVP9DlTjTX9JwAshQG3hKSM8ZsAigNstAOM=)
                          6: 57B1CD5CDF7011E994C8153BF8AEA228.roa (hash: zjnpjvYJ2wSjAd/hAZmaBFc5QxQdM4l8os6iExNvOEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 01:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253 (0x8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Jun  7 01:36:08 2025 GMT
            Not After : Jun  9 01:36:08 2025 GMT
        Subject: CN=68439789-fae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:b4:67:f0:5e:1a:88:5f:85:0d:3b:45:79:
                    85:f6:fb:66:34:f4:5c:61:fe:2e:a9:68:5a:86:e4:
                    97:25:5d:5c:9e:da:7a:ea:55:a5:b8:39:39:78:2c:
                    58:29:70:9d:d3:41:fd:e4:a5:d9:b4:77:c9:5e:07:
                    15:48:a9:4c:cb:ac:7c:ea:f9:e1:39:9e:53:da:9e:
                    65:ef:d3:eb:ac:7e:18:87:06:cc:f9:19:11:23:4d:
                    2b:40:9f:7d:38:ee:22:2d:69:3e:cc:5c:cb:72:15:
                    59:e7:f2:d3:f3:97:6f:45:91:29:fd:25:00:a0:8e:
                    65:0a:75:c6:7c:1c:c7:49:bf:32:0a:bd:cc:30:97:
                    44:33:ad:ff:08:a2:74:fe:97:8a:20:3b:58:dd:a2:
                    d6:9a:38:35:a1:2a:01:2e:ff:9a:97:ca:2b:c9:43:
                    b4:2e:fd:86:60:b0:e0:85:86:d1:38:74:24:10:54:
                    76:28:98:78:3f:a1:07:c2:e8:0c:70:c1:fa:03:5c:
                    dd:43:37:10:62:01:08:5b:51:3a:4a:91:88:19:9b:
                    94:d0:eb:a2:1b:b7:70:65:a1:f5:22:b3:49:42:72:
                    b0:d7:b0:9e:84:7d:b4:f1:5a:09:d4:cc:ef:93:f9:
                    05:a6:f4:9f:2d:36:09:b6:d0:95:b5:64:91:a6:ca:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5C:BD:AB:37:66:A3:A0:53:37:E6:3E:77:C4:00:2B:14:66:17:CA
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:d3:62:e5:54:28:86:92:3a:15:5b:15:48:47:1e:ab:77:
         fd:f1:97:69:0f:3f:e1:6e:86:f6:76:a8:a5:1c:a6:7a:25:ee:
         02:f1:fa:9d:22:3b:07:01:3d:e1:2c:18:8f:d2:bc:a2:a7:71:
         c8:cf:83:41:c3:27:17:d6:4e:10:3a:79:17:75:67:9c:aa:5d:
         45:6b:9d:b1:c3:bb:8e:8f:4c:98:d4:73:50:9c:55:b1:bf:8e:
         44:70:ef:72:92:9b:9b:7b:d8:43:f8:39:24:66:7d:8a:50:d8:
         54:39:99:ba:9a:42:4f:fe:e7:05:79:83:31:ea:e2:f3:f1:6c:
         ed:eb:25:51:91:9d:c2:8a:54:bc:38:f7:e7:a4:b9:90:1a:11:
         78:41:95:ed:d5:ac:1b:74:75:13:9b:75:b0:86:12:31:19:4c:
         e8:88:b9:e2:68:7e:53:c1:fe:4d:03:d3:57:81:85:e2:e1:f1:
         37:06:10:7e:88:d7:ee:12:0d:ac:d5:69:c0:83:46:62:42:30:
         34:a4:9e:5e:b2:3a:68:d5:6f:30:89:bc:1f:56:9c:93:87:a0:
         ef:9d:44:58:d6:39:07:a3:fe:25:25:da:3b:d3:a3:69:bd:5c:
         39:8d:64:2d:1c:f0:33:9a:ed:94:d0:58:26:b0:ab:80:c3:cf:
         e9:92:19:ad
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUM3Q0VBRjExMC8GA1UEBRMoMEUwNDBBQkY0Rjk0NUYzMEQ3N0RBMjhCQkYwMjhC
NkFDNDlEMDQyQzAeFw0yNTA2MDcwMTM2MDhaFw0yNTA2MDkwMTM2MDhaMBgxFjAU
BgNVBAMTDTY4NDM5Nzg5LWZhZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSnbRn8F4aiF+FDTtFeYX2+2Y09Fxh/i6paFqG5JclXVye2nrqVaW4OTl4
LFgpcJ3TQf3kpdm0d8leBxVIqUzLrHzq+eE5nlPanmXv0+usfhiHBsz5GREjTStA
n3047iItaT7MXMtyFVnn8tPzl29FkSn9JQCgjmUKdcZ8HMdJvzIKvcwwl0Qzrf8I
onT+l4ogO1jdotaaODWhKgEu/5qXyivJQ7Qu/YZgsOCFhtE4dCQQVHYomHg/oQfC
6AxwwfoDXN1DNxBiAQhbUTpKkYgZm5TQ66Ibt3BlofUis0lCcrDXsJ6EfbTxWgnU
zO+T+QWm9J8tNgm20JW1ZJGmyssZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQFy9
qzdmo6BTN+Y+d8QAKxRmF8owHwYDVR0jBBgwFoAUDgQKv0+UXzDXfaKLvwKLasSd
BCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDN0NFLzgyMDE0QTEwOTg5OTExRTlCNzM5NkEzM0Y4QUVBMjI4L0RnUUt2
MC1VWHpEWGZhS0x2d0tMYXNTZEJDdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RnUUt2MC1VWHpEWGZhS0x2d0tMYXNTZEJDdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUM3Q0UvODIwMTRBMTA5ODk5MTFFOUI3Mzk2QTMzRjhB
RUEyMjgvRGdRS3YwLVVYekRYZmFLTHZ3S0xhc1NkQkN3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChx9Ni5VQohpI6FVsVSEceq3f98Zdp
Dz/hbob2dqilHKZ6Je4C8fqdIjsHAT3hLBiP0ryip3HIz4NBwycX1k4QOnkXdWec
ql1Fa52xw7uOj0yY1HNQnFWxv45EcO9ykpube9hD+DkkZn2KUNhUOZm6mkJP/ucF
eYMx6uLz8Wzt6yVRkZ3CilS8OPfnpLmQGhF4QZXt1awbdHUTm3WwhhIxGUzoiLni
aH5Twf5NA9NXgYXi4fE3BhB+iNfuEg2s1WnAg0ZiQjA0pJ5esjpo1W8wibwfVpyT
h6DvnURY1jkHo/4lJdo706NpvVw5jWQtHPAzmu2U0FgmsKuAw8/pkhmt
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:14 2025 by rpki-client