Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
File:                     2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json)
Hash identifier:          WT24YklNeDwzteoEgmE0FbZ7/Qu8/lyebp+/QKhT2jI=
Subject key identifier:   B0:BD:35:4A:06:A9:16:3A:DA:C3:CA:D8:F3:B2:40:27:67:B8:24:80
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Certificate issuer:       /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial:       017D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
Manifest number:          0178
Signing time:             Tue 01 Jul 2025 04:41:30 +0000
Manifest this update:     Tue 01 Jul 2025 04:41:29 +0000
Manifest next update:     Thu 03 Jul 2025 04:41:29 +0000
Files and hashes:         1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: Q8ZQMz5yKHInjYOmaaqj+/v/7ksKQs4gcnqan3Du+UM=)
                          2: AB5A31B645AE11EF8C2C90A6762E951A.roa (hash: Ck19B6WRJjiqRudcI9+7kuwLbdQsGgIfEPLBW28X9YQ=)
                          3: 836BAB0845AE11EFBDF032A6762E951A.roa (hash: 97JbsPdvNqKHfZPYs+HRGIXQO5xpkbISH3xnPHBeBc4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 04:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
        Validity
            Not Before: Jul  1 04:41:29 2025 GMT
            Not After : Jul  3 04:41:29 2025 GMT
        Subject: CN=686366fa-07b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1d:6e:01:6e:ac:c8:d9:31:92:64:12:3c:fa:
                    a8:3c:98:32:e0:f5:14:f7:6b:8c:ff:f2:75:6b:4a:
                    aa:a7:bb:b0:a0:29:9a:ce:e3:29:c9:4b:58:b9:76:
                    f4:6d:b0:ae:c0:49:fa:64:6d:a4:69:15:4e:47:1c:
                    4a:0c:89:0f:c5:a4:14:f1:df:01:e1:03:77:50:91:
                    84:d9:11:44:69:4b:b5:4d:0e:1f:45:de:99:5f:4e:
                    06:3d:91:34:7c:c9:19:34:b2:fc:4d:a9:80:1c:72:
                    03:55:2c:94:0d:22:74:6a:fd:29:d1:48:bd:22:38:
                    6b:75:d9:cf:30:eb:a4:71:6e:f3:20:53:49:d4:1c:
                    cb:be:5c:0c:1a:47:53:1d:51:67:4a:24:06:ac:81:
                    cb:9a:31:8c:a2:01:31:4f:0f:c2:57:e0:12:31:ab:
                    bd:b3:7d:10:f1:90:10:30:cc:e4:42:19:cf:72:09:
                    b0:8c:fc:ce:84:86:14:7f:b8:e4:f8:a7:1d:95:1e:
                    cf:1c:c7:5c:43:a8:db:ec:1d:ef:53:2a:0c:ce:7d:
                    57:92:8d:ff:44:d7:eb:f4:33:08:2b:5a:ee:f3:d6:
                    f9:b3:58:90:77:d8:78:37:d8:b0:e4:7e:05:1b:30:
                    0d:ff:cd:90:51:04:f7:a3:58:ab:75:c6:ff:f5:26:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BD:35:4A:06:A9:16:3A:DA:C3:CA:D8:F3:B2:40:27:67:B8:24:80
            X509v3 Authority Key Identifier:
                keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d4:93:b8:14:00:58:1b:48:8b:ac:89:2d:3b:fa:0f:a4:bf:
         b1:cf:13:c2:42:92:b4:c7:19:0e:e7:dc:26:f0:55:7c:8b:77:
         37:e7:1e:90:95:6c:96:12:16:c1:fa:d2:bf:e4:69:5c:ee:68:
         c1:0f:0f:24:ec:66:e8:4a:ea:91:0e:12:5f:11:53:93:ce:7e:
         b3:d6:02:a7:8b:81:95:43:00:6a:03:af:4f:3e:61:8e:d9:fa:
         dd:bb:45:7d:32:c0:21:01:69:ea:a6:a0:1d:04:95:4f:f4:54:
         4c:21:89:f3:b7:34:2a:98:83:b9:98:33:f0:bf:54:66:84:6a:
         47:bc:4a:ea:d0:42:69:5d:c8:52:65:c0:25:96:b6:f3:44:82:
         58:3b:e3:ff:4c:8e:a7:d4:5c:7d:37:42:e1:a5:3b:1e:9d:f4:
         01:e0:8f:bc:15:11:db:aa:24:9f:bb:51:f3:be:7a:8d:de:49:
         c1:02:03:d5:a3:ab:c0:16:c6:bd:bf:64:26:3c:1a:d2:eb:b7:
         65:d8:ee:e5:d4:b9:e4:2e:4a:27:d8:49:7f:87:d2:cc:4a:f0:
         1a:f6:66:fa:b2:9c:59:20:2e:05:e0:6c:e8:13:96:63:6d:d6:
         45:bf:7b:8b:9c:48:4c:6f:48:d2:6c:80:1a:4a:e7:ea:7f:de:
         bc:f2:80:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:41:00 2025 by rpki-client