Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          CDH5OUsgL66KJpJoiNuPxBhvL8WdKw2jEYtNH3ONY14=
Subject key identifier:   E1:1F:15:65:E7:43:EE:BA:84:68:B3:48:BB:29:5B:CD:89:56:9D:0E
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       074E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          074E
Signing time:             Sun 11 May 2025 01:54:05 +0000
Manifest this update:     Sun 11 May 2025 01:54:04 +0000
Manifest next update:     Tue 13 May 2025 01:54:04 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: GJqzzzpprQdBu2u9gq2Qd9zgw4l0P5R4fEW2rN2ysdA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: May 11 01:54:04 2025 GMT
            Not After : May 13 01:54:04 2025 GMT
        Subject: CN=6820033d-bf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:44:8b:49:6f:1b:58:c7:d1:42:d3:22:c1:
                    18:0c:6d:3f:8c:11:28:f3:5f:70:fa:59:e9:43:59:
                    57:14:61:ad:ae:ff:ea:74:00:5e:ba:f1:30:76:23:
                    40:f3:24:e2:e5:8c:a3:5d:e7:0b:3b:cb:ee:31:a7:
                    a0:9d:65:a2:13:63:1f:1c:dd:ac:59:db:b3:d9:ce:
                    1d:91:13:0a:d5:64:e9:1c:07:19:35:c3:99:aa:6b:
                    ca:b8:46:1f:1f:d7:74:1d:97:dd:b2:50:42:3e:51:
                    97:88:09:78:cb:e9:40:26:bf:65:25:09:f6:b2:15:
                    b3:5d:49:f5:ab:a8:e9:c6:f6:8d:47:d6:be:64:22:
                    80:01:df:fc:3c:4c:83:13:d8:41:ec:fd:cd:01:1d:
                    2a:59:5a:9f:fc:28:29:a5:7c:c2:5b:3a:f4:9b:f5:
                    62:9c:45:a7:7d:69:e3:3f:6d:fc:ea:ba:3a:5e:94:
                    c5:1b:e5:2e:00:2d:c1:39:95:79:da:c7:b6:c6:ef:
                    eb:f9:29:c0:d5:ce:59:65:cf:5f:d3:8a:7d:c3:fd:
                    2b:78:a6:f3:1e:6f:02:f4:27:6c:91:93:b6:45:43:
                    d5:56:07:f4:c5:6f:31:e6:65:8a:02:79:7c:87:44:
                    f5:ca:77:56:69:6e:be:f5:4d:42:3d:d4:52:4b:9a:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:15:65:E7:43:EE:BA:84:68:B3:48:BB:29:5B:CD:89:56:9D:0E
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:aa:45:10:f1:a2:b0:b4:b0:03:c5:80:e6:8e:c7:a9:63:
         20:39:c6:8e:ad:b6:3a:fe:72:6b:32:0a:17:05:98:84:a9:cb:
         6a:09:51:e5:c2:6b:3e:62:d8:40:6b:4d:b5:3d:c4:3e:a5:71:
         81:89:b2:22:a5:d8:a2:5c:94:53:f8:d1:fc:36:38:ff:e5:85:
         c0:81:5d:4d:03:d6:86:6a:54:c9:a9:a3:14:2b:18:80:56:7d:
         3e:3a:4a:d2:5e:07:dc:9b:d5:6f:25:77:08:e5:ce:30:b2:dc:
         d3:19:1f:95:30:33:b3:20:b1:b7:48:14:23:da:42:ca:49:63:
         f5:6e:51:47:0e:10:c0:33:6f:9b:ab:b5:38:6b:88:c0:12:15:
         f5:4f:ad:7d:d1:e4:9e:64:c8:bc:16:e7:67:11:56:50:da:8f:
         9a:da:7a:74:17:88:d2:26:2a:14:15:a0:33:0b:64:49:83:bc:
         4e:ce:55:fd:38:8b:13:c4:fa:37:5c:dc:0a:45:4d:dd:fa:68:
         cc:dc:54:5c:ac:f0:6e:68:ea:40:29:19:43:45:0b:5c:17:c4:
         ff:9e:10:f4:7b:a8:57:59:1f:8f:a5:86:cd:8f:9e:20:97:59:
         72:b9:f1:9c:6a:4e:e5:6b:bb:f6:10:e5:fa:29:6e:e1:15:c7:
         ff:f1:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:22:21 2025 by rpki-client