Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
File:                     Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft (raw, json)
Hash identifier:          cpjidCcPDIdHTGbYD264x9CyGPkZch0jtgaUwaE30LQ=
Subject key identifier:   9D:66:DF:31:06:F3:EB:96:F5:A7:32:F8:1E:36:53:37:C9:85:85:F1
Authority key identifier: 3E:88:7E:85:68:14:83:31:41:F8:D0:F6:64:AC:AF:6C:4A:30:5D:43
Certificate issuer:       /CN=F36F18B8AF/serialNumber=3E887E856814833141F8D0F664ACAF6C4A305D43
Certificate serial:       07D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
Manifest number:          07CF
Signing time:             Sat 07 Jun 2025 01:49:36 +0000
Manifest this update:     Sat 07 Jun 2025 01:49:36 +0000
Manifest next update:     Mon 09 Jun 2025 01:49:36 +0000
Files and hashes:         1: Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl (hash: L494DiPJjg6cVAjq0UhVoaEJVHS3dTkct+zQQ3xaXvU=)
                          2: 8859EF00498511EABE163653F8AEA228.roa (hash: QVI82FLm1BSma7kxHblG+4W4pZzP5tIprd7dKYd5Sbc=)
                          3: 5C5FDF40498511EA92A20A53F8AEA228.roa (hash: xsQiPdSl+w9J+k6KG8KqiILkw0rtSox5Rr9IOhOA934=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F18B8AF, serialNumber=3E887E856814833141F8D0F664ACAF6C4A305D43
        Validity
            Not Before: Jun  7 01:49:36 2025 GMT
            Not After : Jun  9 01:49:36 2025 GMT
        Subject: CN=68439ab0-e596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:ed:28:b8:98:88:cc:27:35:b5:64:d3:87:
                    a9:50:c2:03:41:52:d8:a9:f2:6b:13:22:b2:c3:a5:
                    b7:73:e1:37:64:ea:44:57:48:b8:7c:20:79:9b:81:
                    c9:4a:3b:b8:1e:0c:39:e1:b0:d0:f8:97:4f:c2:af:
                    47:ef:b1:59:b3:c0:54:59:44:e3:45:53:17:d5:fe:
                    07:5f:7b:f0:f3:48:41:6b:e8:42:30:42:50:1a:da:
                    9c:3b:56:a3:30:19:14:8a:78:71:5b:58:b2:85:94:
                    8d:cb:89:10:14:4c:7c:23:2f:e5:85:11:4c:a1:92:
                    64:e7:45:33:d0:45:d3:37:ba:5b:49:fc:f1:c7:0a:
                    fc:97:7d:a0:76:b2:e7:02:48:da:fc:27:3c:60:6b:
                    97:69:61:56:53:d1:5d:13:0e:73:cb:fc:cc:20:2b:
                    46:01:2b:e3:ba:86:97:28:5c:e5:98:13:b0:44:90:
                    33:9c:a8:75:f9:56:b8:ac:ad:48:6c:b3:13:26:cc:
                    a1:ea:41:3c:4d:c1:9b:02:32:da:6d:36:cf:1d:e2:
                    f1:79:0b:72:25:9c:4e:27:bd:65:c7:c0:68:81:28:
                    42:e3:ff:2b:37:37:cb:f6:5b:8a:41:ee:08:45:0f:
                    5c:5d:78:45:b7:c6:16:33:39:7f:79:4f:01:ad:be:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:DF:31:06:F3:EB:96:F5:A7:32:F8:1E:36:53:37:C9:85:85:F1
            X509v3 Authority Key Identifier:
                keyid:3E:88:7E:85:68:14:83:31:41:F8:D0:F6:64:AC:AF:6C:4A:30:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5e:0f:8e:a5:49:06:1d:eb:a0:14:c0:70:c8:a6:a4:4a:ff:
         0a:d5:a4:cd:60:31:df:a0:77:a4:db:73:ad:95:4a:ba:71:32:
         37:b0:8d:41:2a:ac:dd:0c:be:b9:c9:9f:67:59:6f:20:97:1c:
         7d:01:a4:c4:11:ff:c3:33:e8:a0:4e:ba:1f:66:ec:83:5d:7b:
         ba:90:45:6f:84:18:da:51:a8:6a:d6:14:41:d1:86:ed:de:a2:
         d3:6a:e5:98:98:9f:30:84:94:b0:3f:de:8d:41:2b:3b:70:ac:
         ea:e9:0c:19:6b:e2:02:5c:64:62:7f:ce:a0:e3:e1:6e:4a:45:
         25:b1:aa:37:e0:be:6d:05:58:97:26:79:6a:06:0b:17:af:1e:
         63:e5:3e:42:fc:fe:0a:cf:ad:35:f4:5f:6f:fb:9c:b2:15:27:
         de:c8:ac:46:a1:9f:19:d6:10:e3:57:a2:6b:4f:b0:58:99:36:
         7e:34:ea:ee:17:0c:9c:ee:32:ec:11:b6:50:a6:52:02:b9:9d:
         81:bd:59:f9:9f:98:7c:e5:3b:a3:02:13:82:fb:b8:58:80:1b:
         9a:f2:9c:5b:f9:cc:50:cc:9a:03:a2:47:5e:46:ee:18:96:83:
         62:0b:31:7d:f9:61:be:23:23:9b:49:70:f0:9f:5c:63:41:de:
         fa:54:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:48:35 2025 by rpki-client