Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File:                     DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier:          xFk3dawebpp9XkNLLpKuOBRl2XjQyEmg0+VPC9e4HQs=
Subject key identifier:   FC:B9:B8:7C:09:53:C9:3A:C5:5F:4D:CC:07:1C:29:B8:F9:78:66:61
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer:       /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial:       0BCD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number:          0BCC
Signing time:             Fri 13 Jun 2025 01:09:55 +0000
Manifest this update:     Fri 13 Jun 2025 01:09:55 +0000
Manifest next update:     Sun 15 Jun 2025 01:09:55 +0000
Files and hashes:         1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: jz2q/Lvs3zrypbDQVtT0h73b823mC+HFNWUesJTnaFk=)
                          2: D550D09C037F11EDA40460C2F1222468.roa (hash: 9wZBqedJVTgdGdUQ5S31jykjUra1rcqD+ULApifCF68=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Jun 2025 01:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3021 (0xbcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
        Validity
            Not Before: Jun 13 01:09:55 2025 GMT
            Not After : Jun 15 01:09:55 2025 GMT
        Subject: CN=684b7a63-f0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:e4:fa:a0:ad:26:ed:69:c6:c6:9f:92:27:
                    bd:06:4b:10:ff:2e:b2:cb:20:e6:97:35:3b:69:7e:
                    92:19:03:28:db:e0:d0:88:66:33:31:1e:d2:25:03:
                    cc:0e:40:8c:2b:b0:6b:04:ec:1d:cb:c2:a0:01:ab:
                    c3:a0:cb:fb:51:17:38:39:04:f9:27:c6:2a:5e:73:
                    c2:77:d9:61:8c:cd:ae:0b:a0:cf:1e:fa:40:87:7e:
                    da:8f:dd:b3:f6:66:81:31:eb:57:a8:64:97:6d:f2:
                    3f:71:a8:66:21:60:11:48:67:28:66:01:0e:22:7f:
                    99:28:29:50:17:f1:10:c8:8f:7f:e9:dc:46:0d:64:
                    78:f9:2b:fb:7f:1e:c7:0f:c3:c6:93:58:dd:d0:eb:
                    8b:b8:89:ad:21:eb:d2:1f:49:20:22:22:d0:24:7b:
                    e4:7f:a4:c3:2f:67:e9:97:ad:f4:dc:b4:15:27:0d:
                    3d:73:03:24:4c:0b:6a:32:7d:c3:ac:a9:8e:33:6a:
                    a9:54:c3:23:76:19:79:63:a4:f6:12:5f:78:1c:df:
                    18:a7:41:4d:da:e9:9c:07:53:7a:d7:bc:7b:39:e7:
                    4a:b3:5f:1c:0b:77:80:b3:ea:b8:30:b4:e6:8e:fa:
                    51:76:be:62:29:d6:e6:59:97:a2:d8:0a:bc:8e:b9:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:B8:7C:09:53:C9:3A:C5:5F:4D:CC:07:1C:29:B8:F9:78:66:61
            X509v3 Authority Key Identifier:
                keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:d8:1a:91:ef:f1:b0:82:68:14:84:ed:87:09:e7:f1:cd:
         18:3e:cb:98:82:cb:8a:bb:64:a9:94:ca:e3:d9:63:fa:fb:0a:
         30:54:f5:35:a3:0f:b6:f7:61:cd:01:29:03:88:84:82:83:cb:
         d7:fb:f8:c0:33:c7:3b:52:ce:28:c6:9c:65:2f:03:54:3d:9d:
         60:6e:18:1c:ee:41:36:9b:75:50:e7:04:f4:a3:dc:a1:8d:b7:
         4a:d8:fb:8b:80:f2:6f:ac:8a:98:d0:87:cc:40:d0:d8:18:01:
         32:d9:e5:4e:ef:7d:58:42:32:80:66:06:5d:41:93:41:25:08:
         e0:fa:8e:34:c4:e2:a7:17:29:78:8e:85:f8:07:07:5c:07:ed:
         0b:2a:31:fb:67:7d:3b:09:e8:50:50:da:44:b4:52:2b:9d:c0:
         94:7d:3e:ce:3c:b9:00:19:39:1f:6d:9d:4c:c5:d1:c6:c0:19:
         7c:0c:b6:21:20:bd:b0:3e:20:3e:ef:49:b1:c1:32:fe:7d:91:
         8e:14:3b:29:74:cc:a1:ce:dd:74:ce:36:d5:cf:27:e4:23:ff:
         6a:7a:43:9f:f2:d8:2f:84:b4:bb:a1:43:02:fd:20:79:16:b5:
         55:2a:80:7c:8f:a1:3d:5f:d1:73:5d:4d:14:11:1c:69:a4:b3:
         28:de:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:30:22 2025 by rpki-client