Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
File:                     3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft (raw, json)
Hash identifier:          XrCRe+35HopXt2PBJhDj0B0hNx2mMo+bOAkAw7wHfpY=
Subject key identifier:   16:01:C8:16:92:F7:65:D2:37:AB:52:A9:6B:9D:44:E9:F7:B2:F7:EE
Authority key identifier: DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4
Certificate issuer:       /CN=F361609CAF/serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4
Certificate serial:       0768
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
Manifest number:          0767
Signing time:             Wed 14 May 2025 01:51:58 +0000
Manifest this update:     Wed 14 May 2025 01:51:57 +0000
Manifest next update:     Fri 16 May 2025 01:51:57 +0000
Files and hashes:         1: 3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl (hash: 2M+6MtSa3LESAjKbjKgUx6QOg1vI7O+LNh5pzJkhyr0=)
                          2: D7A1ECB283EF11EA9BA97462F8AEA228.roa (hash: TlTBwqHEQHiLLbQaXNnmF5UgaA5f3WCBAPGr0I+b64I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 01:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361609CAF, serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4
        Validity
            Not Before: May 14 01:51:57 2025 GMT
            Not After : May 16 01:51:57 2025 GMT
        Subject: CN=6823f73e-5e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:d3:74:16:40:61:f9:e5:42:ea:bc:a6:d8:
                    9c:08:ad:ff:24:82:cd:54:e6:fb:07:b1:89:8c:76:
                    61:d4:1d:5d:b6:d3:38:63:fe:e2:cd:5b:aa:07:d5:
                    3b:f7:e1:13:fa:49:12:e6:ee:2f:eb:43:a5:2a:59:
                    00:90:c1:39:c5:fd:4f:a4:3a:b7:1c:53:75:7d:4d:
                    b2:15:22:df:b3:37:df:29:1c:a1:36:64:b2:1d:25:
                    d2:7d:3b:c2:bb:d7:30:11:84:5a:8e:93:87:9f:30:
                    d0:56:ab:80:f2:38:da:12:0c:d2:2d:06:76:02:60:
                    65:c0:36:31:69:cc:c4:56:8a:6f:75:cf:0c:97:f6:
                    8d:c6:ed:40:b8:74:f7:14:62:4b:e2:f1:fa:37:83:
                    8b:7b:87:ad:03:ed:da:ef:39:3e:20:6e:85:df:0f:
                    37:85:8c:a0:49:0b:4c:fa:4f:ce:c8:a8:ea:27:06:
                    6b:f1:24:08:4f:7b:4f:bd:77:78:94:b9:aa:0e:80:
                    06:80:7b:4d:c4:08:79:d8:81:77:57:92:46:9a:e4:
                    b7:61:a0:eb:ae:f6:27:53:3d:b9:e2:6b:64:ab:0b:
                    a5:78:58:ac:c6:9b:cc:e9:ef:b9:a7:44:66:de:d7:
                    a4:bb:1e:b4:ac:8c:29:1f:ef:d4:d8:56:36:2e:d6:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:01:C8:16:92:F7:65:D2:37:AB:52:A9:6B:9D:44:E9:F7:B2:F7:EE
            X509v3 Authority Key Identifier:
                keyid:DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ae:2c:1e:fe:22:28:f5:03:fb:0e:21:b3:88:f1:41:8e:18:
         42:25:3f:4a:93:5d:e2:d3:84:be:ba:ae:4b:0d:dd:df:7b:a5:
         06:85:ee:f6:31:16:af:06:2a:4e:24:6e:9c:b8:71:8c:91:11:
         51:7b:ec:da:e5:ca:5a:45:c9:e3:bf:7a:a1:6b:29:17:59:8d:
         0a:2e:d7:c1:58:76:bf:54:35:d7:6c:c3:d1:b7:a7:b6:38:2e:
         21:92:80:38:0f:46:ea:31:db:a8:ed:91:cb:b1:7d:18:1d:7b:
         71:5f:9b:c2:7a:b1:68:aa:84:e1:c1:3a:f2:e3:1f:fe:2f:46:
         47:c6:ce:b4:56:ee:83:e2:0c:9b:ee:6f:63:ae:39:73:27:04:
         4c:c1:f2:e3:bf:5e:ba:9e:f6:c9:b3:85:10:bf:89:28:8f:83:
         66:8d:e7:0e:e5:85:51:71:5b:6e:d3:d4:5a:d8:76:38:f9:2d:
         8d:2c:2a:7e:9c:50:ec:27:ce:94:54:19:54:bc:f6:38:af:8e:
         54:f4:3a:42:2e:de:90:f8:64:b1:63:22:95:27:be:52:06:72:
         09:60:f6:b2:3b:69:aa:3a:0b:33:fe:98:dc:0c:83:7d:af:ee:
         47:3d:62:f9:23:21:21:c7:22:3e:8e:c6:53:e3:5b:8a:da:7c:
         e3:63:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:38:44 2025 by rpki-client