Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          d10HMofwC54HY6B+/U9yRfNyY7T2IXbbX59x2f/2C5o=
Subject key identifier:   AA:D2:2F:79:C0:39:34:2F:1F:B2:BB:C8:05:AC:56:BC:9B:DF:BE:B8
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       021B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          021A
Signing time:             Fri 04 Jul 2025 04:20:35 +0000
Manifest this update:     Fri 04 Jul 2025 04:20:34 +0000
Manifest next update:     Sun 06 Jul 2025 04:20:34 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: Bv/oB7B4fipHvfb01KV0C2PXPKRg9J0ZgHFuSAhtbi4=)
                          2: 12A49B4ABF4011EE82ABE755775412E6.roa (hash: A3SsXw/efK2b5GKmG8JZKrlc0wfhdO7VSwE2A7UfoRE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 04:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Jul  4 04:20:34 2025 GMT
            Not After : Jul  6 04:20:34 2025 GMT
        Subject: CN=68675693-6a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:f6:43:2d:4a:7f:a8:0f:ea:ad:38:1e:94:
                    97:df:57:5a:06:36:8f:22:93:f0:2e:82:e7:8d:73:
                    ed:38:88:bc:b0:64:58:b6:d9:ab:b1:27:93:05:af:
                    69:7e:3a:bf:0d:cb:16:43:5f:3c:15:1f:7f:4b:48:
                    5f:eb:3d:f2:db:03:bf:77:3c:cd:7e:59:fa:ef:33:
                    c6:d3:7e:fb:5e:4f:83:b9:d6:40:8b:9b:bc:0c:0c:
                    f7:dc:e1:c2:44:43:c7:03:6c:d1:78:2b:5e:51:9a:
                    72:67:97:07:aa:b1:61:39:08:fd:4b:bf:2b:3f:25:
                    fa:ef:39:46:25:7e:0b:3b:83:f4:d7:5e:73:a5:dc:
                    95:c2:6b:b2:00:c6:4a:c9:b9:6e:08:74:55:ba:d8:
                    b0:27:31:ef:0a:bf:3b:c3:93:22:a1:d4:e4:d5:29:
                    33:11:be:1e:70:88:c2:89:e1:47:e4:4c:27:2e:91:
                    5e:c1:2b:e6:4b:75:b5:73:45:a4:7a:78:b6:00:38:
                    fc:40:62:12:fb:5c:54:94:4a:41:8a:6c:3d:59:c7:
                    84:8c:e7:01:61:42:01:5e:6f:9e:48:41:60:ef:66:
                    d9:3d:18:67:9b:d6:a9:c5:81:20:ca:38:e9:81:23:
                    02:34:42:bd:05:ce:b5:42:30:47:3d:bb:54:bc:4e:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D2:2F:79:C0:39:34:2F:1F:B2:BB:C8:05:AC:56:BC:9B:DF:BE:B8
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:97:8f:5a:b2:a4:6c:58:3b:15:8c:9a:94:74:f6:de:b3:
         ff:6c:4a:99:7a:a2:bd:d6:b5:44:d9:e2:f7:5e:80:92:2a:6e:
         ea:9c:3a:79:a3:28:f3:24:bd:c4:88:64:ad:fc:36:8d:d0:1a:
         2c:a9:f3:9d:65:89:29:09:bd:42:20:88:60:fd:cf:e3:a5:bf:
         b3:98:b8:30:9e:5f:b3:7b:f3:e2:02:dc:77:55:82:db:e6:50:
         19:b6:8a:fb:10:3a:d4:30:86:04:5d:e6:c5:8a:2d:70:28:e2:
         cd:ea:ec:1d:aa:4b:07:2e:a6:c6:9f:9e:c9:3e:4f:4e:84:92:
         01:7a:6a:c3:dd:97:37:60:ed:89:74:6b:ae:a6:b1:da:c3:ab:
         b6:6d:f5:fe:2b:b1:7a:42:4b:95:c4:ab:0b:3a:ac:0e:98:da:
         43:8a:d1:de:6d:ef:80:ca:b5:2b:f6:c5:6f:47:be:f8:d1:4d:
         ac:28:e5:61:3c:ed:a5:4e:27:35:82:e5:ef:7a:8b:69:61:45:
         bc:de:8a:58:9a:92:ca:3d:ad:79:69:5e:cc:5c:5b:94:4d:41:
         1c:57:10:b6:07:59:0a:fd:22:e4:8e:5b:8b:81:87:a5:9c:dc:
         cd:88:b2:48:d1:74:b7:3f:a0:d0:fd:1e:da:3a:fd:7b:ed:44:
         0c:7f:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:33:11 2025 by rpki-client