Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
File:                     BzRbRCXqohbQO3DogD88w6vhdRw.mft (raw, json)
Hash identifier:          2xysoc0QtHMrO/wOv9bWu2ICQZon1CxipszxoLTuNzE=
Subject key identifier:   BF:76:FB:D3:6B:86:F6:34:25:A9:2D:BE:13:AF:86:14:A6:48:74:C9
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Certificate issuer:       /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial:       032B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
Manifest number:          0329
Signing time:             Mon 12 May 2025 03:36:28 +0000
Manifest this update:     Mon 12 May 2025 03:36:27 +0000
Manifest next update:     Wed 14 May 2025 03:36:27 +0000
Files and hashes:         1: BzRbRCXqohbQO3DogD88w6vhdRw.crl (hash: 6Ohlfi1eyUHKxuCWlY7Ak4ex2nJZAoj52Esv2ObTWZU=)
                          2: 90E875C0904C11EF9772C688762E951A.roa (hash: 09CupRDhj95mgucZxQrzaYLjNHjfWPA23pLSx9OJe5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAF, serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
        Validity
            Not Before: May 12 03:36:27 2025 GMT
            Not After : May 14 03:36:27 2025 GMT
        Subject: CN=68216cbc-1b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:c8:0d:96:fc:08:70:07:3b:c3:92:1d:70:
                    0a:92:00:2d:3c:28:93:31:0a:1d:3c:6e:4e:3c:be:
                    50:f8:1c:9c:1f:63:29:9d:e0:b4:65:45:a3:c6:7c:
                    ea:b0:ba:4f:80:d7:4a:95:97:6d:23:f1:dc:40:f0:
                    65:79:c8:37:b2:26:c5:df:55:40:63:b9:96:ab:d0:
                    0a:bf:67:6a:58:f8:34:8a:52:95:b3:04:14:2f:f0:
                    7c:6d:07:d1:b4:48:fd:a3:5e:90:f5:b4:e0:14:f1:
                    95:46:d3:74:49:6f:e2:8e:a7:db:11:5c:88:ae:32:
                    a5:de:84:3a:37:b4:bd:99:ac:7d:4b:26:7b:eb:9d:
                    5f:05:05:33:8c:28:96:76:6e:5e:5b:75:84:c6:0a:
                    d4:c2:cd:a1:ed:be:ce:d1:32:61:2c:b2:32:42:67:
                    b9:28:68:f7:f2:d1:e8:9b:56:3f:51:e6:ae:f3:19:
                    eb:4a:12:91:b0:85:e6:62:a3:bc:ca:2f:58:0a:d7:
                    e9:98:cf:4b:88:14:91:d5:eb:39:bd:38:98:b0:00:
                    63:e7:8d:78:c1:67:df:1a:cf:f2:29:31:04:91:c0:
                    3f:2b:f9:ec:e0:78:04:18:38:11:c6:e3:44:83:b0:
                    3e:8b:b2:9c:2b:67:fc:0e:76:cb:3b:db:92:0b:85:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:76:FB:D3:6B:86:F6:34:25:A9:2D:BE:13:AF:86:14:A6:48:74:C9
            X509v3 Authority Key Identifier:
                keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:40:49:d7:c6:cf:ec:23:0a:e6:08:26:16:42:39:01:4e:
         ad:f1:9e:b9:03:7a:c0:b1:00:22:7a:c8:2a:1f:b6:dd:70:67:
         e9:86:0e:86:32:6b:ce:d7:b7:81:f6:f2:60:46:64:e6:26:c7:
         29:45:62:98:b2:85:95:f4:49:4c:fe:88:14:ef:1a:92:d3:ae:
         18:72:0f:31:7c:3f:f5:23:bf:66:d2:03:ab:95:fe:52:33:3f:
         f0:ff:31:e9:70:5b:4d:9e:f5:06:c4:68:3e:89:58:61:05:b8:
         55:72:92:82:1b:3b:f9:07:b0:58:2c:54:0f:ec:73:00:b0:7b:
         3a:b4:d8:68:2f:c6:6c:e2:f4:d6:56:d6:20:e7:4c:56:a4:12:
         5b:13:50:42:c2:6a:9a:03:28:b7:83:c7:29:92:ee:e5:45:ec:
         65:b6:d2:34:0d:a4:fd:16:59:d1:b5:01:ee:73:91:7c:ee:16:
         83:c4:9c:c9:39:10:6e:d0:5b:55:b8:9a:19:ef:09:15:47:7d:
         ba:4b:d8:fc:25:a2:f1:38:f1:92:a3:af:71:b5:f3:3b:30:0f:
         d9:5f:43:40:60:86:87:b1:0c:17:c5:bc:9e:92:aa:d8:fd:d6:
         8e:31:33:0e:90:fd:b6:47:6c:c9:ac:d1:69:d1:b3:a9:b7:7c:
         b7:18:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:47:35 2025 by rpki-client