Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
File:                     4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft (raw, json)
Hash identifier:          R3KhN7UYOWtBVaKUtmOD1IFWR+J5x90/WHEh2T48Zls=
Subject key identifier:   C4:21:B0:1C:02:E8:E8:8B:69:0E:0A:1B:5A:92:7E:CE:07:63:E3:07
Authority key identifier: E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30
Certificate issuer:       /CN=F36EEB6BAF/serialNumber=E16533BAF90FDFE61F88207EDAE004FDCB52FA30
Certificate serial:       BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
Manifest number:          BB
Signing time:             Sun 27 Jul 2025 05:14:07 +0000
Manifest this update:     Sun 27 Jul 2025 05:14:06 +0000
Manifest next update:     Tue 29 Jul 2025 05:14:06 +0000
Files and hashes:         1: 4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl (hash: VVZPMlBvJxQ834sC3NWlQKa1M+fOng0CFdtS4e295TI=)
                          2: 70FA4310DCE111EF90F8E0A3762E951A.roa (hash: qc0AnixuJmucaaftQ/LyI87IbNHlxudRS98tlTGyyas=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EEB6BAF, serialNumber=E16533BAF90FDFE61F88207EDAE004FDCB52FA30
        Validity
            Not Before: Jul 27 05:14:06 2025 GMT
            Not After : Jul 29 05:14:06 2025 GMT
        Subject: CN=6885b59f-040a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:78:99:8b:1a:52:cb:dd:2f:12:bf:94:f6:
                    1f:bb:0f:56:a5:40:81:21:f6:20:a1:f0:3d:37:75:
                    9a:fc:44:ba:37:4d:18:89:c4:af:95:85:3d:20:e9:
                    67:5d:4b:48:33:24:fe:49:2a:33:78:4d:59:17:69:
                    9b:b9:a6:26:e5:d4:7c:78:a9:19:ef:9d:15:26:25:
                    49:12:55:25:0f:4e:34:29:09:5f:85:27:68:82:36:
                    6c:14:9c:db:e9:8d:26:44:cb:19:70:b0:b9:9b:d0:
                    73:ea:a8:f0:20:ce:b0:96:f9:4f:f3:24:c9:86:21:
                    c4:a2:98:b5:12:df:b5:27:7c:4d:91:62:18:5a:60:
                    7a:7d:bd:42:2b:00:2d:fe:f4:40:61:ca:43:47:db:
                    5f:37:ff:f5:98:61:c9:68:af:16:cd:ff:5f:82:6a:
                    4c:ff:21:77:47:a7:e5:eb:fb:46:4e:31:6c:45:bf:
                    ba:c7:e9:88:ce:4d:a3:c0:0d:fa:af:24:6a:6f:49:
                    0e:2c:60:3e:b9:3f:91:ba:1d:aa:36:ed:57:bb:f1:
                    ec:a0:4c:b3:17:38:21:35:8d:8d:1a:82:03:c3:bd:
                    9d:72:99:f4:66:9a:48:e1:a1:ba:08:d3:4e:25:bc:
                    b2:3d:64:dc:a3:7e:c7:a1:fb:3b:0b:f6:16:ee:15:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:21:B0:1C:02:E8:E8:8B:69:0E:0A:1B:5A:92:7E:CE:07:63:E3:07
            X509v3 Authority Key Identifier:
                keyid:E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ed:5a:e1:80:79:bb:3c:26:a9:75:99:b0:c6:a8:05:a5:6e:
         57:ec:4c:cb:26:21:97:dc:65:5d:aa:fb:07:6d:7f:29:ab:13:
         6e:a4:4c:73:d0:f7:38:a5:60:bd:ff:41:87:f9:05:ac:4e:aa:
         69:88:07:d4:a3:6f:35:71:17:c0:15:e2:0d:6f:c8:3c:88:19:
         6e:c8:ab:40:45:d8:0a:62:8e:61:5a:ba:0a:2c:b6:20:c3:1a:
         7c:da:06:d3:71:b3:fe:8d:72:c6:fa:d1:60:b7:e9:1a:46:4e:
         8c:eb:d3:0c:56:de:75:c7:35:ab:63:2a:57:26:43:29:50:92:
         67:25:34:ab:3c:f4:ef:9b:23:41:f3:84:5e:53:f1:f3:50:53:
         3d:4a:0b:60:3f:08:cd:39:52:54:c8:21:39:a3:10:7c:4a:62:
         1b:c6:ac:a5:99:38:47:ea:8f:51:06:80:1e:d2:41:fc:63:a4:
         32:db:19:12:fe:db:18:c5:5e:32:3d:91:f7:a7:10:e4:d8:be:
         ae:85:ef:ce:6d:b0:a8:16:ec:01:2f:d9:98:ba:59:63:5a:0f:
         c5:eb:93:8f:6c:fe:85:f9:55:b3:e9:a3:78:6e:04:b8:a9:75:
         a7:9c:3c:a4:82:e7:a4:80:08:54:57:72:55:79:5a:df:35:5a:
         d0:24:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:55:49 2025 by rpki-client