Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
File:                     M-hGYU4VRCxoAFpeP85ct1bgSn8.mft (raw, json)
Hash identifier:          S/l8HJL9JqXbvek/MWn1MFgW8uRY2zf5Ue766MXRkcI=
Subject key identifier:   C4:AF:D3:A7:A7:74:5A:3B:1D:1A:A7:DF:65:A9:C3:5E:CB:45:9D:3C
Authority key identifier: 33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F
Certificate issuer:       /CN=F3613F08AF/serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
Certificate serial:       028A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
Manifest number:          0289
Signing time:             Mon 30 Jun 2025 04:07:10 +0000
Manifest this update:     Mon 30 Jun 2025 04:07:09 +0000
Manifest next update:     Wed 02 Jul 2025 04:07:09 +0000
Files and hashes:         1: M-hGYU4VRCxoAFpeP85ct1bgSn8.crl (hash: XMpDDTrYaCGQItVl+0EAg6QLmIYu2WtTkR96zfDEyaI=)
                          2: AC0A32D0690611EEB3384E8B4AD9E6FC.roa (hash: kErDXNR3ZNhWVzlb8Vo/Il2bfhwKojLKehJI3WdRMNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 04:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613F08AF, serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
        Validity
            Not Before: Jun 30 04:07:09 2025 GMT
            Not After : Jul  2 04:07:09 2025 GMT
        Subject: CN=68620d6e-a5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:cf:8e:8c:2d:38:c4:27:8f:7e:1d:12:8e:
                    f9:72:05:3e:3d:cc:db:27:04:22:4e:1b:94:ae:d8:
                    a1:34:3e:b7:72:29:25:20:07:76:c3:62:9f:00:ba:
                    72:c3:8d:a9:d1:71:e3:27:52:2b:ea:69:d6:07:f3:
                    b1:0f:bb:a4:49:d4:aa:96:6f:21:0e:4c:58:52:05:
                    62:be:87:f0:87:4c:89:b6:e4:bc:f0:92:5f:da:2f:
                    66:6a:10:3e:08:7f:2a:ee:15:7f:ee:1c:6c:75:d2:
                    0b:f7:af:fc:be:b6:fb:1c:b1:76:20:4e:6a:fc:65:
                    23:dd:30:f6:42:d2:a8:50:80:91:be:55:a2:c2:c8:
                    07:44:cc:a4:34:96:85:10:d4:2a:64:72:a6:b6:d8:
                    61:ed:89:76:27:d1:4f:07:c0:e1:17:1b:00:24:42:
                    6a:8b:c6:fb:03:7a:a5:f3:82:04:8f:8b:e1:e7:75:
                    f9:f5:3a:65:08:8e:17:24:7f:57:0c:4c:0a:25:c0:
                    15:7c:67:c1:6c:78:b7:52:71:ac:fc:8e:19:75:4d:
                    37:6d:90:e8:ca:f3:09:29:67:56:e6:29:da:8c:c4:
                    81:f5:1d:7c:82:35:05:b1:f9:0b:ea:f3:df:98:1b:
                    be:ae:1b:25:94:5d:09:86:c1:3a:7b:b9:09:6f:a5:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AF:D3:A7:A7:74:5A:3B:1D:1A:A7:DF:65:A9:C3:5E:CB:45:9D:3C
            X509v3 Authority Key Identifier:
                keyid:33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e7:7c:c1:01:b2:43:84:f1:7c:06:58:f2:ac:cb:96:1c:3f:
         6c:8b:83:51:16:d0:bf:00:63:aa:1a:6a:6b:24:b8:e5:da:2c:
         4f:c4:49:53:a9:22:d4:75:6c:2b:f9:c9:6e:62:b5:32:a0:de:
         a5:62:e3:6b:34:c2:b7:04:5e:7f:b6:cd:1a:6b:42:06:6b:1e:
         6b:b9:af:db:50:ad:f6:a1:08:ab:f6:29:e1:4c:71:f1:3d:4b:
         fc:51:8d:6b:6a:d5:ac:2e:34:b7:f9:14:01:30:6a:93:4e:55:
         27:f6:34:aa:14:3b:ba:80:fe:c5:2c:6a:11:e9:f8:82:c4:3c:
         4a:f0:b4:a7:cb:2a:8e:2f:aa:73:3a:3c:40:79:b9:d2:a2:51:
         91:87:3c:d0:2b:56:6f:f3:4d:79:3d:18:9b:35:08:82:4c:28:
         79:89:58:44:38:fb:b5:dc:26:f1:16:66:a9:27:fe:3a:61:63:
         b2:ab:93:fc:e7:37:4c:a2:bd:37:fe:75:68:70:40:de:89:0f:
         4b:cd:85:e0:62:44:28:53:6c:28:a1:11:cb:b6:72:19:95:2d:
         40:c7:7d:a6:4e:8d:97:08:91:e1:ea:a1:42:11:a4:5c:33:43:
         7a:6d:4e:50:67:dd:7e:b3:1a:98:4c:39:f6:54:4a:f6:eb:8b:
         46:dc:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:15:24 2025 by rpki-client