Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
File:                     fB-8tURrPURYdKAjdA4kfWIwI10.mft (raw, json)
Hash identifier:          Qhao57qr1P1b49QLNXTZ8g4MrXP6EbE7ztXsDgOt66w=
Subject key identifier:   AB:6A:1B:0D:60:C9:D1:65:C7:C3:25:14:31:9B:71:7E:A0:B7:AC:67
Authority key identifier: 7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
Certificate issuer:       /CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Certificate serial:       012F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
Manifest number:          012C
Signing time:             Mon 12 May 2025 04:45:38 +0000
Manifest this update:     Mon 12 May 2025 04:45:37 +0000
Manifest next update:     Wed 14 May 2025 04:45:37 +0000
Files and hashes:         1: fB-8tURrPURYdKAjdA4kfWIwI10.crl (hash: seGknlGumZ4E8GxPzo8hEEmXsYirER6EuhIkhBJ6Jcs=)
                          2: 69176EDA54B411EF85302264762E951A.roa (hash: aXC5ZcMaKvppj9wFu7iH9bADIONa5jeymvvlcxe0MZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C154AF, serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
        Validity
            Not Before: May 12 04:45:37 2025 GMT
            Not After : May 14 04:45:37 2025 GMT
        Subject: CN=68217cf2-e385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:42:19:55:69:f5:d7:45:c1:c8:2c:d2:e0:
                    19:ad:a8:63:1a:bf:06:2b:b2:71:e6:af:33:4b:58:
                    71:d1:fe:d7:42:be:bc:e6:34:6e:ca:cb:f1:6b:d3:
                    9f:b5:df:39:55:31:dd:54:f5:bd:c6:b2:10:b7:97:
                    ef:90:66:ae:ae:e0:81:e7:a4:19:38:b6:e9:73:a1:
                    3d:2a:97:5f:8d:b7:66:19:19:1c:84:29:0c:77:7f:
                    b5:5d:77:9a:0e:8b:3c:96:b3:a0:f4:66:06:77:dd:
                    d8:71:a3:fd:64:12:33:51:72:47:12:f3:81:3a:39:
                    04:73:96:74:53:45:9c:43:ed:a8:60:f0:6b:1d:fb:
                    c9:3a:67:9a:10:4b:a8:b4:02:bf:8a:eb:4a:47:fc:
                    df:0b:dc:cb:37:b6:f9:86:b3:8a:9a:ee:04:4a:ef:
                    b6:35:43:ba:ba:25:23:ea:92:6c:41:9a:82:ca:a3:
                    fe:35:67:02:27:c6:47:9a:8d:cf:a9:1f:2d:96:ed:
                    9a:de:83:5c:91:33:5d:d2:2b:04:65:b9:08:17:f9:
                    78:13:a8:64:c3:4c:4e:a9:cc:42:03:d8:ac:1e:ce:
                    ab:13:0b:46:df:07:99:35:d7:a4:51:6d:ba:71:77:
                    da:e2:e1:bb:4a:3f:3d:97:27:df:4b:f9:a0:16:92:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6A:1B:0D:60:C9:D1:65:C7:C3:25:14:31:9B:71:7E:A0:B7:AC:67
            X509v3 Authority Key Identifier:
                keyid:7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:6f:37:23:72:1f:22:d6:a2:d8:b0:5a:98:b7:58:40:b8:b9:
         91:85:a4:56:63:90:67:0b:50:b2:45:e6:3c:dc:b1:b5:3f:4c:
         1c:09:25:69:80:df:96:6e:31:94:7d:c3:29:2d:0f:b1:ad:03:
         b6:33:f8:8b:97:6d:6f:f9:56:69:66:cb:54:f9:22:e2:df:eb:
         a8:c1:41:24:63:66:94:41:d8:2e:dc:09:d7:93:98:81:60:d0:
         fe:14:0b:f0:3d:c1:55:0b:ba:b6:a3:0d:a0:aa:1f:28:18:86:
         b4:f4:76:ff:ed:6c:cf:02:cd:d3:0f:62:d2:0d:24:9a:e1:22:
         78:fc:e4:75:9f:36:4a:90:ec:fd:dd:7c:45:de:ff:30:01:fb:
         54:d6:76:0f:7d:eb:2e:3e:db:59:fd:60:10:c2:90:f3:2b:57:
         a5:44:47:82:09:03:92:cd:e6:3e:8a:5d:d2:3a:f7:0a:3f:b7:
         00:f2:60:f6:d8:e3:71:51:82:b2:8a:e9:57:1c:23:9b:78:e6:
         69:9e:b6:19:9b:5e:0a:42:91:a9:7d:de:6a:83:e0:b0:23:3b:
         e4:4b:85:cc:19:a5:0b:a2:c6:69:9e:51:f5:4f:c7:85:0e:76:
         8a:38:dd:46:7f:df:df:44:b3:9b:57:74:ed:c1:f7:74:28:5c:
         97:bf:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:31:38 2025 by rpki-client