Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File:                     2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier:          ppAOEitpmLVZTar4YslhFR/jCx7sxIHLAOaf0OqZuK8=
Subject key identifier:   AD:59:FD:BA:98:6A:B9:C4:A5:49:60:38:49:90:A2:D5:4F:B5:80:15
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer:       /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial:       D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number:          CF
Signing time:             Fri 06 Jun 2025 05:03:09 +0000
Manifest this update:     Fri 06 Jun 2025 05:03:08 +0000
Manifest next update:     Sun 08 Jun 2025 05:03:08 +0000
Files and hashes:         1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: j6YbEgHnINnAQD6N+kft9JPYh7ggZiPj3hZK05EoyPY=)
                          2: 678B7098E48D11EFB0502A6E762E951A.roa (hash: jonAE1XfJY/5m4j4uM2w3HbC11SG5Uy6EkEVqN0G0Cw=)
                          3: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 05:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F273DAF, serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
        Validity
            Not Before: Jun  6 05:03:08 2025 GMT
            Not After : Jun  8 05:03:08 2025 GMT
        Subject: CN=6842768c-cfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:4a:0a:d5:e0:7f:9c:c8:45:dd:22:87:97:
                    2b:b6:65:bf:12:c2:1a:6d:74:75:00:8e:3f:41:32:
                    2d:62:5d:d1:f2:cb:63:d0:4e:5d:5e:97:06:8e:be:
                    d4:df:cd:f6:72:b9:8f:2d:6d:d9:48:bf:f7:b5:99:
                    99:4d:88:49:e8:55:c0:e8:bd:f4:ee:55:3e:77:dc:
                    82:44:b9:ad:14:55:67:5c:ea:fa:59:71:f1:24:12:
                    a5:65:04:3d:22:9b:23:c4:8e:bf:26:31:c6:a6:11:
                    b9:ef:3e:0d:a2:0a:3c:dd:ae:19:93:8e:9d:e2:83:
                    34:d2:4a:8a:10:9e:b3:8b:33:8f:81:47:72:3a:f4:
                    f9:79:bd:fb:a8:07:51:f3:3d:d7:03:5b:f5:30:58:
                    de:aa:e8:51:ea:44:91:cc:2f:85:07:21:7d:15:af:
                    98:19:3e:44:92:c8:33:7d:d2:d7:c6:53:96:aa:43:
                    da:6e:50:65:c3:23:9a:65:0a:af:2b:a7:bc:0e:d2:
                    10:6d:7c:bc:ca:44:29:e4:a8:99:e4:3d:8f:3c:d9:
                    cb:dd:25:cb:c1:13:c4:1c:d1:8e:2b:ee:b7:4d:63:
                    20:94:c8:72:41:ca:e8:3e:7e:d8:85:90:fe:bb:ce:
                    96:1d:3c:c3:8d:ac:0f:ed:4a:17:8a:f5:eb:35:c9:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:59:FD:BA:98:6A:B9:C4:A5:49:60:38:49:90:A2:D5:4F:B5:80:15
            X509v3 Authority Key Identifier:
                keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:50:79:56:7e:a5:36:3c:85:76:cf:88:3f:41:f5:ae:91:9f:
         ea:e2:7f:28:e2:aa:ea:53:d3:2e:20:c9:83:f5:71:4a:47:cf:
         67:2f:31:a6:93:99:32:cf:df:bd:57:a8:d4:15:25:83:44:2f:
         f1:79:1f:20:31:5b:6e:6b:79:ef:ac:39:d6:a5:75:58:e0:ff:
         55:e9:a4:74:8b:0d:d1:42:53:5a:ec:40:e8:67:0e:3f:6d:6c:
         f0:c5:85:3e:2e:16:52:f3:5c:ce:2a:b4:21:e5:e3:b5:e4:27:
         33:33:fd:3d:81:4a:44:06:5d:de:13:d4:cb:29:89:73:17:76:
         33:e7:7f:d6:ba:68:6f:78:64:ef:3b:3f:2c:3a:93:59:84:cc:
         c6:95:85:52:2f:48:9b:02:17:90:c4:72:08:88:ed:f4:6c:56:
         24:cc:bb:42:5f:10:f5:2e:11:9c:68:0e:d8:bb:bf:29:89:64:
         e4:1e:a1:ff:47:14:4b:f0:a1:82:17:4e:c4:7f:24:9d:6b:36:
         33:11:be:1c:5a:c2:44:ed:39:a9:c9:25:b9:c3:d0:14:64:4c:
         a8:2e:4c:d3:34:41:32:39:57:83:6d:5d:d3:ba:fa:40:3e:a1:
         73:7c:53:5a:25:2b:0d:d3:6f:5e:ea:c1:c9:8d:d4:b5:f5:4d:
         16:f7:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:59:00 2025 by rpki-client