Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
File:                     hv5z7TaP-SiSCjS0l1tObR5U4GM.mft (raw, json)
Hash identifier:          jJYf3871yyGKR5GaJFfa3QJryQ+0RZdPYf008y/KV3E=
Subject key identifier:   BE:58:1C:86:75:BA:CD:71:74:AE:38:C7:DB:D5:31:DE:B3:DA:F4:92
Authority key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Certificate issuer:       /CN=F3627A5BAF/serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
Certificate serial:       012E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
Manifest number:          012E
Signing time:             Sun 04 May 2025 04:42:29 +0000
Manifest this update:     Sun 04 May 2025 04:42:29 +0000
Manifest next update:     Tue 06 May 2025 04:42:29 +0000
Files and hashes:         1: hv5z7TaP-SiSCjS0l1tObR5U4GM.crl (hash: KsxJHno9D/oKW0jNIVouJqXRsowZVUKNIkIEa5Jo850=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 04:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A5BAF, serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
        Validity
            Not Before: May  4 04:42:29 2025 GMT
            Not After : May  6 04:42:29 2025 GMT
        Subject: CN=6816f035-e962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:7d:0b:ba:21:44:b1:06:3f:9b:7f:c4:f6:
                    01:62:80:3c:15:29:99:ce:74:12:09:2e:a1:60:09:
                    e1:36:cd:c4:9c:bb:97:e4:b5:98:b8:a8:5f:1c:c0:
                    f4:7e:49:80:ee:79:63:6c:ab:19:d0:fa:09:68:3a:
                    4b:83:68:21:ee:13:ac:e9:35:0f:03:76:9f:20:13:
                    5d:c1:7c:62:7d:cb:47:77:a4:c7:22:fd:8c:6f:ea:
                    32:4e:53:69:24:e2:61:29:e2:ed:76:03:15:91:7f:
                    50:42:35:18:e7:d7:a5:a3:b5:9f:17:dd:94:5a:85:
                    6f:0c:61:42:29:5e:a1:87:e1:c3:fa:39:6e:94:99:
                    a3:9d:79:a9:88:e0:af:3c:1e:5f:af:0f:94:ea:4d:
                    e2:46:5c:ac:38:c6:cc:b7:b9:10:5b:ea:70:76:0f:
                    e9:7a:2d:29:c5:c8:0f:e1:f5:49:5a:73:8f:b5:ee:
                    d6:7e:46:b9:ef:14:ca:f7:5f:db:80:97:b0:81:47:
                    2b:cf:1f:81:35:6c:d7:9a:a7:67:16:d2:7c:2c:7e:
                    28:7d:cf:66:7f:e9:00:b5:19:a5:46:b1:4d:57:8b:
                    fc:4b:12:38:09:a6:49:42:c8:dc:db:d4:0e:4b:7a:
                    df:d3:55:00:74:b4:77:1f:8d:46:a2:ee:99:c1:29:
                    f4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:1C:86:75:BA:CD:71:74:AE:38:C7:DB:D5:31:DE:B3:DA:F4:92
            X509v3 Authority Key Identifier:
                keyid:86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:bd:e3:ee:72:15:c6:32:57:1c:d4:83:ba:2d:5c:35:3b:
         f9:85:06:2b:3d:df:cb:7f:78:38:d0:59:ba:86:fb:d0:6f:c2:
         83:17:7f:24:f6:e4:1e:8a:80:4c:3d:e2:d8:c7:26:25:c8:ee:
         1a:75:03:bd:d7:a1:df:07:f2:27:17:33:13:af:c1:b5:79:f3:
         d6:0d:d5:90:55:c2:7f:80:b1:b0:b7:fc:f6:c6:2c:fe:46:cc:
         2e:ba:61:ec:24:1f:dd:26:8f:ca:6f:a8:a5:59:6f:2d:2c:30:
         a4:0e:bb:35:62:70:84:21:44:e4:09:2a:4e:1d:f5:b9:a1:89:
         eb:5b:97:db:96:a3:23:0e:e9:03:62:e7:7f:63:b9:54:c8:9f:
         0e:8b:33:ae:f2:b0:77:6e:95:4a:4f:d1:9a:b5:10:14:8f:ec:
         ed:08:c9:57:d7:38:6b:51:31:97:30:cc:71:10:30:d3:fd:3f:
         bc:bb:29:a9:37:f6:6a:40:1c:b6:93:99:f5:34:85:0b:11:38:
         ea:f2:0c:c4:ae:c6:d8:c1:41:f2:e3:b0:85:81:bd:72:12:b0:
         45:d0:aa:9f:3f:f9:af:3d:8e:85:d1:9a:16:2e:85:ac:a8:07:
         0d:a9:72:c2:66:74:56:cf:1a:eb:48:01:af:03:aa:81:c2:1e:
         fd:ca:e7:b8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdBNUJBRjExMC8GA1UEBRMoODZGRTczRUQzNjhGRjkyODkyMEEzNEI0OTc1QjRF
NkQxRTU0RTA2MzAeFw0yNTA1MDQwNDQyMjlaFw0yNTA1MDYwNDQyMjlaMBgxFjAU
BgNVBAMTDTY4MTZmMDM1LWU5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT5X0LuiFEsQY/m3/E9gFigDwVKZnOdBIJLqFgCeE2zcScu5fktZi4qF8c
wPR+SYDueWNsqxnQ+gloOkuDaCHuE6zpNQ8Ddp8gE13BfGJ9y0d3pMci/Yxv6jJO
U2kk4mEp4u12AxWRf1BCNRjn16WjtZ8X3ZRahW8MYUIpXqGH4cP6OW6UmaOdeamI
4K88Hl+vD5TqTeJGXKw4xsy3uRBb6nB2D+l6LSnFyA/h9Ulac4+17tZ+RrnvFMr3
X9uAl7CBRyvPH4E1bNeap2cW0nwsfih9z2Z/6QC1GaVGsU1Xi/xLEjgJpklCyNzb
1A5Let/TVQB0tHcfjUai7pnBKfSbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvlgc
hnW6zXF0rjjH29Ux3rPa9JIwHwYDVR0jBBgwFoAUhv5z7TaP+SiSCjS0l1tObR5U
4GMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QTVCLzZDNURDRTQ0NDM0NDExRUZCNzYyOURCRTc2MkU5NTFBL2h2NXo3
VGFQLVNpU0NqUzBsMXRPYlI1VTRHTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2h2NXo3VGFQLVNpU0NqUzBsMXRPYlI1VTRHTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjdBNUIvNkM1RENFNDQ0MzQ0MTFFRkI3NjI5REJFNzYy
RTk1MUEvaHY1ejdUYVAtU2lTQ2pTMGwxdE9iUjVVNEdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMFr3j7nIVxjJXHNSDui1cNTv5hQYr
Pd/Lf3g40Fm6hvvQb8KDF38k9uQeioBMPeLYxyYlyO4adQO916HfB/InFzMTr8G1
efPWDdWQVcJ/gLGwt/z2xiz+RswuumHsJB/dJo/Kb6ilWW8tLDCkDrs1YnCEIUTk
CSpOHfW5oYnrW5fblqMjDukDYud/Y7lUyJ8OizOu8rB3bpVKT9GatRAUj+ztCMlX
1zhrUTGXMMxxEDDT/T+8uympN/ZqQBy2k5n1NIULETjq8gzErsbYwUHy47CFgb1y
ErBF0KqfP/mvPY6F0ZoWLoWsqAcNqXLCZnRWzxrrSAGvA6qBwh79yue4
-----END CERTIFICATE-----
Generated at Mon May 5 03:01:06 2025 by rpki-client