Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          PW/gs86BRuMSiRUs6LuhevfwFQAxIx9a7BEWwaC+eMc=
Subject key identifier:   94:DD:F5:6A:36:D4:C2:FE:3A:6E:10:36:0B:9A:52:42:56:41:3E:B3
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       01C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          01C6
Signing time:             Sat 10 May 2025 04:22:58 +0000
Manifest this update:     Sat 10 May 2025 04:22:57 +0000
Manifest next update:     Mon 12 May 2025 04:22:57 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: jk8vR7zczDrKgBIGbUyYGR4Dcfkjg003y51Wi7xEltk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: May 10 04:22:57 2025 GMT
            Not After : May 12 04:22:57 2025 GMT
        Subject: CN=681ed4a2-2a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:eb:f8:32:04:1e:45:dc:19:a6:5f:77:ca:
                    18:a1:60:b4:3f:9e:22:b9:c9:79:63:b3:5d:c9:6e:
                    3e:d9:47:22:21:d4:f9:15:28:b7:1e:c3:51:bd:cc:
                    0e:88:fa:41:c8:c9:d6:ff:4c:ce:76:98:e7:00:2f:
                    1e:3d:61:bd:7e:84:28:92:6b:d1:44:72:32:40:65:
                    2e:28:b6:0f:54:4f:a4:4b:6f:be:20:2f:b7:5f:bf:
                    cb:21:7c:47:56:db:53:4e:27:e6:b2:42:48:59:c5:
                    8d:1c:ab:3b:fa:6f:2b:2f:ca:e3:ff:c0:fc:43:7d:
                    28:dd:41:01:c3:54:7b:fb:dc:22:57:88:7e:40:32:
                    45:50:18:4e:43:b2:9c:fd:23:7b:6d:c5:56:fd:5c:
                    28:72:ba:9b:4c:34:b1:7b:9b:11:4c:6e:f0:14:24:
                    5f:b8:0c:d1:ce:a3:df:64:55:41:75:85:7a:75:ec:
                    0a:33:39:9c:03:59:44:94:27:a3:c1:ab:0b:5f:73:
                    5a:c3:3c:19:c9:37:bf:41:35:79:89:59:28:6a:ef:
                    57:ac:47:18:16:e5:5d:2c:bb:2d:dc:3f:74:f1:88:
                    78:6d:c0:71:2b:ae:95:74:1d:52:87:db:cb:63:b1:
                    66:b8:37:a2:51:9a:1c:ba:37:8a:33:b3:e3:b6:0f:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DD:F5:6A:36:D4:C2:FE:3A:6E:10:36:0B:9A:52:42:56:41:3E:B3
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f4:81:17:68:5e:39:47:47:e0:1d:23:53:75:aa:c7:63:27:
         93:44:6c:38:d3:ac:ce:8d:75:db:98:7e:d1:99:41:78:fe:43:
         6e:2a:63:ae:24:22:3c:a7:ee:3a:79:ed:a6:4b:9d:b8:5e:da:
         81:10:76:7b:ed:50:6c:93:ad:b1:54:eb:98:e0:cd:ef:13:a5:
         3e:74:11:c8:a4:0b:ba:da:0e:93:ae:2f:65:c9:03:1b:65:7f:
         56:13:e6:95:53:7e:71:fb:ea:b9:5e:c3:76:da:26:85:a9:64:
         b3:a7:8e:84:d3:91:72:97:b1:ea:45:27:c0:54:51:e9:6c:2c:
         33:af:f0:a1:aa:70:25:21:1f:10:86:f8:f1:ea:5e:80:d0:5b:
         98:9f:94:87:d7:20:35:da:05:68:90:f5:0d:59:fc:78:4c:f1:
         61:ff:8f:da:3f:43:2c:a9:dc:3a:d5:1e:3d:9e:90:53:72:79:
         49:a2:78:95:ed:6c:b4:4e:30:b4:39:b7:7f:be:8f:c5:61:08:
         57:ee:59:81:81:30:81:eb:87:ab:5b:f3:b8:68:f8:f6:53:b2:
         86:53:b0:cf:b2:f2:ed:fa:89:07:35:5d:f9:fb:55:7c:4f:4e:
         59:78:22:de:c3:a2:0e:72:46:76:80:03:a1:0b:40:e5:0c:19:
         29:52:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:44:18 2025 by rpki-client