Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
File:                     DgQKv0-UXzDXfaKLvwKLasSdBCw.mft (raw, json)
Hash identifier:          Lh8KdXJZNo2H3km+dgqWmU+CF8aKYcwZ7Ma2ptpto8M=
Subject key identifier:   0F:6A:A7:A6:A6:1F:74:10:4A:DC:1D:23:7F:67:AF:D6:EB:17:16:B8
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0904
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
Manifest number:          08FA
Signing time:             Thu 31 Jul 2025 01:36:48 +0000
Manifest this update:     Thu 31 Jul 2025 01:36:47 +0000
Manifest next update:     Sat 02 Aug 2025 01:36:47 +0000
Files and hashes:         1: DgQKv0-UXzDXfaKLvwKLasSdBCw.crl (hash: Cq5Xsb6IWRoI6Gh3hmzB4CRrgTGs1lQmcPqtlMRccg0=)
                          2: 82A311068E9D11EA936A3D74F8AEA228.roa (hash: 2fJIX7cXKI9q+Xtr5M7y3JF2k9yaJVXpVCcsMHvm1sY=)
                          3: 25FEFCBCDF7011E997CFF03AF8AEA228.roa (hash: NtIZQtczAvdXKaNMIz0m1Q59Z9nMLMNC/p7wM9puv2w=)
                          4: EAE45BCCDF6F11E9826AA83AF8AEA228.roa (hash: pbv4p9icCN4O4WG3leeCL1EpjVjH0clUw2cLgw9t0TQ=)
                          5: 9F906EFADF6E11E99541B739F8AEA228.roa (hash: hCPkplK+hVP9DlTjTX9JwAshQG3hKSM8ZsAigNstAOM=)
                          6: 57B1CD5CDF7011E994C8153BF8AEA228.roa (hash: zjnpjvYJ2wSjAd/hAZmaBFc5QxQdM4l8os6iExNvOEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Jul 31 01:36:47 2025 GMT
            Not After : Aug  2 01:36:47 2025 GMT
        Subject: CN=688ac8b0-6173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:06:03:36:4b:c1:a3:02:a8:a7:c6:8e:48:
                    57:a9:54:90:8f:22:fd:f8:ec:e4:ed:59:b3:2c:83:
                    7d:73:bd:f5:2e:99:95:47:0f:7e:2f:ae:d0:4d:ba:
                    73:1d:31:85:1e:0b:31:7d:f0:9f:ee:d3:ec:21:7b:
                    fd:6d:36:59:0a:b0:d8:93:d0:0b:9d:5e:94:b4:a3:
                    1d:8f:a1:d6:2d:04:a2:b5:da:64:40:4f:88:80:bf:
                    6b:0e:18:30:ba:ed:e5:c5:88:89:43:82:7a:bc:3f:
                    0d:3b:95:fa:7f:7b:2e:be:af:d3:96:5f:05:99:ee:
                    ca:03:14:23:57:74:25:d2:8a:21:10:5b:52:97:29:
                    40:55:68:6d:53:6c:a1:59:6a:f0:40:9d:0f:5b:1a:
                    1d:93:12:86:2d:9a:f5:6f:bb:cb:e8:0a:c7:da:c2:
                    0c:c4:e8:61:4d:3a:ed:b7:c0:3e:17:84:b3:af:d9:
                    27:39:f0:0b:c1:dd:c6:12:78:c8:ce:41:d1:d9:1f:
                    88:9e:99:2b:cc:f9:d3:85:83:75:b8:e6:88:93:28:
                    02:ac:de:2a:9c:11:db:99:f2:04:6f:7e:05:dc:a1:
                    00:c9:71:c3:67:b4:2e:c7:af:94:d7:7f:6e:8e:91:
                    e0:45:9a:97:bb:ab:27:d1:72:c6:af:3c:85:23:74:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6A:A7:A6:A6:1F:74:10:4A:DC:1D:23:7F:67:AF:D6:EB:17:16:B8
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:77:dc:24:c7:81:84:99:07:df:e5:69:0b:9e:48:4f:98:
         66:da:bd:c7:d8:03:5a:38:bc:34:80:3d:31:37:28:c1:2e:c9:
         f1:0f:3c:6f:de:2a:2b:56:cf:a1:b9:6d:50:08:94:dd:0f:fc:
         c7:5c:b8:f4:a9:6e:fb:d0:1d:fd:a4:69:c2:52:94:c8:16:6e:
         33:3c:fd:72:67:bc:ba:22:c5:f5:b3:0e:8d:52:c2:28:12:d3:
         da:7c:09:5c:68:4a:6a:4e:b8:95:ad:9e:d2:2a:f4:bc:fd:34:
         ca:f8:60:4a:fd:6e:aa:47:f6:dd:63:fc:57:3d:1b:4c:68:81:
         2c:75:7b:81:06:99:b1:f5:7f:d4:60:d1:a8:a4:33:33:e2:e8:
         4e:7d:fc:40:3d:ae:07:f9:4d:ce:1e:ee:cb:1c:ae:50:76:ab:
         0d:59:13:9c:00:bb:fb:50:5a:41:bb:4e:14:fa:56:7b:5a:da:
         70:96:9e:09:15:91:eb:b7:b5:32:2f:9d:b2:c7:39:fb:a1:d8:
         cd:7f:90:ca:ca:eb:d4:d6:67:6b:ee:bc:7e:b2:c3:d5:57:34:
         7f:e8:da:4a:f7:f9:c4:47:35:11:57:dd:f0:40:7e:bf:6b:15:
         3f:38:13:81:94:d5:37:bd:ac:33:81:0d:74:e4:df:bc:a9:27:
         54:f0:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:33 2025 by rpki-client