Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
File:                     ePyy5tDIIPu5vVgQYfogSi1R9BI.mft (raw, json)
Hash identifier:          2jYstIXRTtA4WdkMVhSY33g2zsEyETtFR7lX1z3fZ2k=
Subject key identifier:   79:FE:E6:9D:1D:F9:2D:F8:40:8B:D6:33:AE:96:72:94:3A:A4:B8:ED
Authority key identifier: 78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
Certificate issuer:       /CN=F36FABDEAF/serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
Certificate serial:       0277
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
Manifest number:          0276
Signing time:             Tue 10 Jun 2025 04:04:19 +0000
Manifest this update:     Tue 10 Jun 2025 04:04:18 +0000
Manifest next update:     Thu 12 Jun 2025 04:04:18 +0000
Files and hashes:         1: ePyy5tDIIPu5vVgQYfogSi1R9BI.crl (hash: x3AbxNEOCVZdgZkB8nZuwcZGwmD29DUzGKoU0M4ggQY=)
                          2: D64EDDEE6E5F11EEBF42781C4AD9E6FC.roa (hash: wwS9H3v6Oq2KT+bOS8yPt+2S5/l9UTYbItXO4BiUcNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Jun 2025 00:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FABDEAF, serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
        Validity
            Not Before: Jun 10 04:04:18 2025 GMT
            Not After : Jun 12 04:04:18 2025 GMT
        Subject: CN=6847aec2-8d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:5c:9a:78:4d:03:a4:2c:57:56:38:ac:45:
                    81:74:0d:a6:c5:47:52:79:d3:43:5d:41:55:f6:0f:
                    fa:f3:9c:84:71:d5:b0:a1:03:fc:86:d7:fc:0a:16:
                    47:9c:73:7e:db:d4:9b:1b:d6:aa:60:51:dc:d2:cc:
                    11:99:56:fe:11:51:e2:52:66:d7:54:1c:fb:2b:7b:
                    69:d1:fc:88:6f:b3:9c:8a:4e:f7:e8:f7:c0:30:8a:
                    5c:03:38:5f:74:11:6e:70:e7:a1:3e:2e:b3:3b:03:
                    f0:9c:fa:c2:c6:a9:26:fe:45:c0:8e:da:f0:6b:f1:
                    19:cb:10:9d:e8:15:68:7e:65:18:ba:3f:57:e3:be:
                    17:cc:dd:be:c1:1a:7a:c7:05:a2:40:00:5f:45:13:
                    b2:6e:30:f7:61:c2:5c:7c:f5:a8:27:b5:c1:33:74:
                    de:57:5c:b4:6e:6d:75:1a:af:63:4b:2e:b3:a2:c3:
                    7b:6a:c9:e7:94:fa:91:a4:fc:1b:59:c3:36:bd:79:
                    b4:bf:00:f0:e0:03:51:b8:15:42:bb:63:b6:9a:55:
                    5e:59:a0:fc:4b:25:25:48:73:1a:fe:88:64:9b:eb:
                    d3:ee:2e:a7:78:59:67:4e:1c:f6:43:d8:55:85:96:
                    46:2b:93:8e:3f:87:86:06:6f:b5:d7:fd:cf:74:a9:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FE:E6:9D:1D:F9:2D:F8:40:8B:D6:33:AE:96:72:94:3A:A4:B8:ED
            X509v3 Authority Key Identifier:
                keyid:78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1a:4f:ce:73:16:49:c2:21:ff:ac:9e:50:0d:88:f9:ef:9a:
         2c:bd:b2:0d:a9:04:b6:ee:78:bc:6b:9c:b4:3b:ff:6d:38:69:
         1b:11:dd:df:6f:22:cb:5d:ec:6e:60:32:1d:a1:ad:78:7c:cf:
         74:25:94:34:75:02:34:1d:ee:7a:e7:b6:9f:72:95:b2:d2:ef:
         8b:3d:b0:98:fd:97:cd:77:1d:e5:83:dc:f4:34:5d:2d:2b:a0:
         e5:82:9e:cd:88:f6:12:4a:6e:ed:0d:7b:76:58:fd:1f:3d:98:
         ed:68:db:a0:c8:28:79:a7:f3:4f:53:39:f6:bf:ba:1b:eb:dc:
         e2:45:c5:02:0a:ad:f4:b6:f0:84:cd:f9:7e:b2:4d:ec:38:14:
         4f:b4:c8:f1:64:d5:c3:ce:c2:ce:61:de:b5:99:fe:6c:0d:41:
         20:90:ae:5f:20:be:fd:93:8e:6f:dd:8e:81:9e:7b:ab:7e:7c:
         52:c9:f8:ad:7e:db:8d:3c:ae:bb:dd:c8:68:06:17:4d:f8:be:
         38:73:25:a3:fb:37:d0:a7:3b:bc:95:f8:8c:f4:ce:7f:d5:0d:
         19:5a:7c:bc:30:81:04:b0:9d:06:6e:f0:82:29:23:b1:10:09:
         37:80:5c:07:33:8c:e6:d6:fc:4b:be:3b:66:5f:88:e9:f6:0d:
         7c:5b:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:20:09 2025 by rpki-client