Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          S9EKEMIiqKSlRmuYUPeSnnymt7tjTw68eo4/B708qs4=
Subject key identifier:   0D:EE:F1:25:AD:0F:C0:AE:1A:95:29:C8:9F:97:D0:E7:7E:92:F7:F2
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       0742
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          073F
Signing time:             Tue 01 Jul 2025 02:01:26 +0000
Manifest this update:     Tue 01 Jul 2025 02:01:25 +0000
Manifest next update:     Thu 03 Jul 2025 02:01:25 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: DogoX3dTRQMvQNTvtyKkdPiIUeVhnlNxRk5e9JeNBrs=)
                          2: E27073C0F1C111EB9AE36071D8A014CE.roa (hash: y0Q3Frj55z+tecyGPqJPk0LP5+vSEULCrL6Cm5KqQeE=)
                          3: 6CB087F0CD7E11EA9E3A5845F8AEA228.roa (hash: rBsld+QOBW/CrzRT0eM+UJTuXYzPefxB5jKhtvGTg/I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
        Validity
            Not Before: Jul  1 02:01:25 2025 GMT
            Not After : Jul  3 02:01:25 2025 GMT
        Subject: CN=68634176-d32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:97:9d:52:c0:b9:37:da:f0:2b:8b:a3:f1:7a:
                    92:dc:84:9c:21:ea:5e:b8:ec:cc:6c:a2:b9:fc:86:
                    e5:47:38:71:cb:a3:0f:56:e6:97:6a:ee:ab:b3:9a:
                    0f:50:76:97:24:78:be:8c:cc:de:8f:7d:6d:be:9b:
                    51:4f:c9:e7:da:e8:b5:63:0e:2c:43:99:3b:ca:f3:
                    09:b4:d4:8a:75:b9:37:8a:d7:5d:54:79:0b:8f:e0:
                    96:75:cc:af:3a:05:79:93:43:08:82:3d:31:bb:6c:
                    a3:06:c8:45:89:6d:5d:a9:4a:98:90:16:8b:a7:6f:
                    3a:59:8a:55:20:b4:c7:2a:34:78:53:a4:c5:94:48:
                    5e:10:73:07:f8:7f:6b:4e:96:f7:66:b2:77:93:42:
                    9b:82:8e:fb:8d:41:68:82:4b:34:80:8a:45:78:6e:
                    de:96:d8:99:3b:1c:f2:b2:77:7a:3c:e4:34:b2:50:
                    11:4c:8b:84:fa:31:6a:57:06:84:d3:7a:27:fc:a7:
                    1b:e4:e3:00:80:bb:b9:ad:4d:1a:0c:e4:cc:5b:2e:
                    85:91:9a:ee:8d:0d:49:92:26:74:13:93:4f:30:33:
                    c3:0e:08:3f:15:93:ae:4b:cd:f3:39:02:6e:9c:9c:
                    1e:4c:ce:df:68:af:3c:ef:5b:2f:6f:5e:ca:96:42:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:F1:25:AD:0F:C0:AE:1A:95:29:C8:9F:97:D0:E7:7E:92:F7:F2
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d0:29:f9:f6:02:ce:a1:69:c8:4e:83:bf:77:8e:11:97:53:
         47:fa:c0:60:a2:9c:3a:6b:2b:31:7c:4f:1f:18:39:3c:3b:17:
         0f:e6:8d:d3:16:c3:48:f3:bc:34:9d:68:f7:96:0d:5e:22:54:
         15:17:57:87:5d:d2:ec:08:4b:be:6b:4d:f0:69:ea:30:3b:61:
         fb:01:4f:71:65:33:eb:f7:63:af:ea:91:54:55:51:08:f8:78:
         f5:bb:94:7e:86:c0:6e:e7:c2:09:2f:a8:5e:e9:9c:17:6b:6d:
         4b:a6:1f:d5:22:fe:af:90:a6:c4:bc:81:81:f5:fb:ad:7b:b1:
         9c:ee:69:0d:d1:c4:a9:23:31:a4:df:22:8b:fe:53:14:91:5b:
         1e:f7:c4:1e:98:aa:d0:8b:80:76:60:db:19:e0:15:a2:94:1c:
         94:5b:80:76:17:29:ba:75:8d:73:ce:d1:5c:7c:d3:30:1a:43:
         67:9d:93:53:96:bb:f5:50:67:48:68:0a:66:7a:a8:a8:8a:6c:
         1e:f8:1e:16:dc:be:5c:65:04:af:aa:fb:b3:37:f5:a2:79:25:
         eb:d2:8e:56:aa:b9:d9:b6:50:08:4b:26:30:1f:45:b4:9d:16:
         f8:59:8a:44:d6:db:b7:fc:8a:76:d6:aa:dc:48:b9:a6:87:0f:
         46:71:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:02:14 2025 by rpki-client