Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
File:                     Upl4cSNfYM1xWncQ_9bi6kyI0po.mft (raw, json)
Hash identifier:          ZM1N7vJMqZcxdkcisoi+9SByUHTz2K/gbJ8DZk3XmeI=
Subject key identifier:   5C:20:3F:82:99:D9:9A:B3:65:3B:98:F6:C4:83:6D:1E:EB:55:48:D6
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Certificate issuer:       /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial:       047F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
Manifest number:          0477
Signing time:             Sun 08 Jun 2025 02:57:56 +0000
Manifest this update:     Sun 08 Jun 2025 02:57:55 +0000
Manifest next update:     Tue 10 Jun 2025 02:57:55 +0000
Files and hashes:         1: Upl4cSNfYM1xWncQ_9bi6kyI0po.crl (hash: boWOx4aVHFje45vEexPV3ad5p2A2M++k5WGND1luMI4=)
                          2: A27E602082FF11EE8205C9864AD9E6FC.roa (hash: pv58iSJoNZfLF15J4awhKwcNzaZSo1gyn9KUtGLQf7U=)
                          3: 811B0F4682FF11EEAC9619864AD9E6FC.roa (hash: pPHAUOTt22hBeaB17IRburRyPCm6dJpRxd6TfErC+xI=)
                          4: 504C6FECEA3811EC884DB1F5F1222468.roa (hash: 2dT5xvQBi0tE9GzEX5D2/RqrdvgMzSxkzDaBAFZ3JCY=)
                          5: 40750D8E82FF11EEA9EF75854AD9E6FC.roa (hash: IfBtUMkbvyisKLp/KIr1N58P5Vt8K4q1zYyTPAWX8DY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
        Validity
            Not Before: Jun  8 02:57:55 2025 GMT
            Not After : Jun 10 02:57:55 2025 GMT
        Subject: CN=6844fc34-7c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:b1:92:89:aa:95:ff:70:07:a9:2e:86:f9:
                    f4:8a:78:c0:95:a1:64:5c:c9:34:f9:cb:8a:71:36:
                    82:fc:b1:b2:b9:e7:c3:95:6e:8e:77:fc:40:89:de:
                    15:08:c6:63:11:fc:68:58:d1:24:8a:a5:77:f8:0d:
                    48:4b:cd:58:14:5e:5c:fc:6c:e4:10:58:36:06:b7:
                    fd:bb:d5:c0:51:c0:18:47:5a:8b:ef:89:f8:20:dc:
                    79:b2:ed:77:15:5f:72:f2:69:f8:73:c4:59:aa:7c:
                    30:db:e0:e0:02:74:b6:84:70:71:65:05:73:84:95:
                    b5:44:e4:f4:d3:62:90:f1:b0:df:6b:02:50:65:d3:
                    3a:ca:19:c3:1b:fa:34:ed:90:24:eb:3d:08:2c:20:
                    e9:08:fa:fe:01:4e:3e:c2:1c:7e:b7:74:70:09:53:
                    49:af:ab:5b:44:2d:85:42:03:93:ed:54:4e:b8:66:
                    42:2f:98:5c:56:af:29:8e:b4:58:49:fc:01:78:1e:
                    d9:ae:4d:29:1c:a8:fd:89:c2:cf:e2:d4:77:cd:5e:
                    1e:50:bf:11:85:b0:2a:0b:e6:f8:99:33:80:ad:2e:
                    a1:b5:67:9b:d7:e4:50:7e:66:65:bb:c8:f2:a6:73:
                    93:68:ae:64:9d:ca:d0:af:f7:f2:c7:af:69:d1:c5:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:20:3F:82:99:D9:9A:B3:65:3B:98:F6:C4:83:6D:1E:EB:55:48:D6
            X509v3 Authority Key Identifier:
                keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:57:6a:d2:3f:34:f7:ea:25:29:3a:b6:2e:e7:ca:6d:26:fb:
         51:ff:39:e8:15:d7:b8:f9:81:f4:a6:9f:50:ec:bf:c9:7c:f6:
         18:67:5d:32:75:52:04:ee:44:f5:90:e0:be:26:f0:b4:53:ba:
         27:d4:fe:c0:31:8e:77:7d:e2:65:82:ee:09:f5:91:04:e2:45:
         68:83:aa:f3:cd:fe:98:7a:8f:75:ad:f7:1a:aa:3f:64:3d:25:
         70:51:0f:03:d1:20:68:36:6b:a3:06:99:71:46:30:d6:27:d9:
         ea:d5:b6:65:1c:95:9c:df:30:b8:1c:ac:09:56:25:4a:78:34:
         0e:28:73:2d:6d:d8:19:9a:95:10:d6:85:0c:8e:ed:ea:a2:6e:
         00:39:56:c2:0a:ef:f4:24:c4:a5:4a:bf:7f:b8:1b:4e:50:9a:
         af:b6:58:51:5d:9c:b4:fe:74:82:2e:b4:a3:10:e1:fa:b6:f4:
         69:25:f9:23:3d:cf:cd:a7:be:3a:82:c4:fa:71:af:16:0c:bc:
         07:04:1d:82:50:34:da:ac:c0:cf:18:0c:87:54:b5:87:f9:82:
         06:06:a2:c1:ff:d7:f9:81:94:00:25:12:e7:4a:90:68:a1:c9:
         9f:e9:68:89:d6:fe:f6:37:12:1a:7b:a1:f0:75:db:1a:a6:f3:
         43:bf:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:38 2025 by rpki-client