Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          mP3c2S8ZJDj4NyJpuRc62xeOEq43tXaeqeHoSebjdrs=
Subject key identifier:   E4:86:B5:7C:AB:91:13:B9:89:AE:6A:15:4B:F3:9E:35:CC:E4:3F:AE
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       02DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          02D9
Signing time:             Mon 12 May 2025 03:44:14 +0000
Manifest this update:     Mon 12 May 2025 03:44:13 +0000
Manifest next update:     Wed 14 May 2025 03:44:13 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: qqErdq9Z1wRgR4zbrjqqBbDGx7qXZBuXH/2knNFHa6E=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF, serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
        Validity
            Not Before: May 12 03:44:13 2025 GMT
            Not After : May 14 03:44:13 2025 GMT
        Subject: CN=68216e8e-6ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:70:0b:a5:5d:94:ac:26:cf:c0:78:d2:1d:81:
                    ce:ac:07:0d:3e:86:2b:88:a0:d5:3e:b4:25:a7:63:
                    1d:7c:e1:a1:66:f4:0d:bc:d8:e5:21:69:ce:df:fd:
                    c4:5f:ee:08:0e:f2:db:26:8b:27:52:e4:62:7d:52:
                    ae:e3:e3:2e:1c:97:4a:45:e2:77:ac:fa:a2:75:86:
                    33:97:a0:af:fb:42:0d:ba:1f:38:22:33:16:31:92:
                    76:18:31:db:89:71:4c:7c:9d:27:73:f9:a8:cb:a9:
                    04:17:83:88:5f:e2:1f:55:cc:47:02:96:bf:ef:27:
                    58:d3:93:5e:e6:0c:70:6e:a6:7b:77:3a:dd:a4:d4:
                    68:81:5f:05:be:09:1c:95:b5:8b:b3:ed:ba:fc:20:
                    1c:cd:42:4e:a1:78:43:3f:e1:28:7a:88:a3:99:fa:
                    ce:58:56:ab:c8:4c:a4:0a:c2:58:fe:3e:51:ce:fc:
                    15:9f:a7:a9:76:c8:bc:73:3d:68:93:f1:ef:d4:6a:
                    39:5c:11:df:9a:83:a7:dd:f9:f6:02:68:0a:4a:6d:
                    55:32:02:9b:bb:4f:8b:b4:52:9a:01:ad:23:db:b4:
                    f9:e0:2e:34:20:0f:17:80:46:b0:23:c0:eb:71:d5:
                    e3:d3:80:a1:53:38:97:99:f3:ca:2c:54:b2:ac:7b:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:86:B5:7C:AB:91:13:B9:89:AE:6A:15:4B:F3:9E:35:CC:E4:3F:AE
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:b7:0d:ba:e0:3b:27:80:92:09:0b:1e:22:d4:1a:8c:ee:
         e8:88:90:db:41:11:ba:9c:24:d8:90:31:e0:4d:40:3d:da:1f:
         bb:19:d7:72:66:be:6b:02:d5:ce:e0:05:63:a0:66:6e:b1:d9:
         5b:cd:85:a1:fe:e1:f4:32:f7:ce:f5:4a:66:3b:9d:69:2e:c1:
         52:15:1c:42:db:e0:6f:0b:ba:ff:37:4c:35:89:c9:a1:f2:81:
         88:60:8f:a5:af:0b:39:df:8e:e6:1c:bf:a5:54:d3:9c:92:bd:
         6a:9f:8a:5b:38:7a:81:64:81:75:b5:63:52:fd:19:f6:fa:a9:
         e8:85:65:c0:6b:c1:6b:12:0f:6d:96:37:09:7d:43:6e:7b:a7:
         70:cf:bf:18:b2:d9:f0:e9:a4:0f:89:ec:61:62:6b:33:fe:bd:
         5d:f4:99:d9:78:6e:40:a2:91:85:1c:61:f9:f2:01:e9:48:b1:
         51:0f:32:07:28:d5:47:f6:b3:bb:33:f9:1d:4a:b7:83:d0:1a:
         97:de:b5:d5:57:79:95:f1:40:1b:f5:81:e4:52:14:1a:fa:9e:
         b4:e2:96:76:b8:22:17:93:ae:e9:3b:1b:89:3a:78:82:e6:f7:
         12:40:6a:88:69:52:f3:4a:2f:0d:8d:de:fe:d2:43:59:5c:fd:
         ea:fa:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:44:57 2025 by rpki-client