Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          dFBhw/sd1GgQfRLjxWvOXpG46HgA/Kr/b1mRb1K6aQA=
Subject key identifier:   0F:B2:89:4A:F1:5B:F7:A1:DE:9E:A0:AD:DF:A2:31:E6:FB:9E:54:D0
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       02A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          02A5
Signing time:             Sun 16 Feb 2025 02:30:53 +0000
Manifest this update:     Sun 16 Feb 2025 02:30:53 +0000
Manifest next update:     Tue 18 Feb 2025 02:30:53 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: KXU7kGXqlCkUsJC2wovExd+2uhcaF9eCLZ/s1FgKMOE=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF
        Validity
            Not Before: Feb 16 02:30:53 2025 GMT
            Not After : Feb 18 02:30:53 2025 GMT
        Subject: CN=67b14ddd-d96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:29:50:6c:8c:fd:e1:24:01:17:f5:64:9e:
                    2c:2a:d7:e9:e1:d7:9c:37:df:d4:a0:dd:08:0b:99:
                    36:53:0f:9f:98:cb:2d:4c:a4:0c:b8:6f:75:40:da:
                    ce:34:3e:55:7b:f3:43:12:2c:60:83:0f:45:fa:5e:
                    d2:fa:a4:1d:c8:e1:6b:88:5e:0d:92:65:2b:92:fb:
                    63:8b:96:2a:7c:f9:66:a9:51:21:f2:d6:2b:40:2c:
                    e0:63:32:ee:51:99:a1:b7:1e:a8:89:21:60:eb:cd:
                    5a:d0:7c:ff:73:e4:9f:3a:fd:0d:b1:e9:6c:87:ce:
                    f4:ca:f1:62:59:6f:3a:83:45:4d:db:a5:eb:e3:29:
                    76:f3:e2:e9:58:c3:07:5f:9f:8c:79:12:87:e0:33:
                    8c:14:b9:4d:3e:e4:61:ea:79:0d:4a:52:a4:53:33:
                    3b:dc:80:51:3d:4e:95:f3:14:07:6e:43:9e:61:50:
                    85:e2:5e:c6:78:5e:6c:64:bb:53:2a:e3:11:17:a5:
                    98:4c:6c:2e:cd:73:04:f3:19:9b:59:3d:e1:61:2a:
                    89:b9:9f:94:4e:84:6b:56:70:7f:68:e1:0c:e6:b6:
                    bb:aa:a2:5d:dc:c2:e6:ab:88:59:b4:21:25:9b:b0:
                    97:22:c4:64:1e:47:41:84:b4:eb:88:29:59:4a:3e:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B2:89:4A:F1:5B:F7:A1:DE:9E:A0:AD:DF:A2:31:E6:FB:9E:54:D0
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:29:8c:10:33:f4:b6:40:93:20:cd:07:95:fa:49:74:a0:
         85:de:f8:0e:82:4d:fa:bc:4c:ef:30:90:3f:6f:72:14:24:4a:
         a0:bf:cb:26:73:b6:ee:2d:17:0b:94:63:e2:23:a2:71:ce:df:
         c3:44:40:99:7e:7f:4c:f3:80:4d:34:52:ba:d6:44:e5:c8:5d:
         98:a1:59:76:67:fd:b9:6f:99:4d:48:68:c9:0e:aa:8d:b4:af:
         f8:fe:2a:d9:61:b3:a0:bf:0b:15:07:d3:2b:00:7d:71:9f:65:
         a4:38:65:d9:6c:f6:63:a8:9e:1d:cb:41:46:7f:ad:4d:09:25:
         ed:14:37:8b:86:0c:34:de:49:84:ef:d2:ec:29:bd:57:74:49:
         59:bb:60:a3:2e:bd:63:12:0e:f3:3d:9d:1d:b2:68:ea:6b:70:
         cb:8b:ae:c1:4f:a5:f0:e3:f9:51:44:76:04:6e:53:2d:ca:51:
         03:58:9b:86:39:c2:7a:33:62:32:cc:f7:b5:98:32:37:da:1a:
         b0:e6:ff:26:76:16:aa:81:9c:c4:94:35:69:5a:19:6d:a9:94:
         2c:64:ab:a2:56:76:ff:dc:27:30:05:3f:15:ac:ef:6b:91:af:
         4b:7a:c3:e8:19:09:3b:97:88:16:c4:15:f6:53:36:db:a4:6b:
         00:a4:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:28 2025 by rpki-client