Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          r0gNMIgXNH1zDmvse4+A5nRquU3xtRBz4FuKxQrvBYg=
Subject key identifier:   2B:D8:2B:9A:A9:68:F3:52:32:B0:48:63:D9:3A:F5:49:9A:72:38:C8
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       060F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          060C
Signing time:             Sun 11 May 2025 02:12:03 +0000
Manifest this update:     Sun 11 May 2025 02:12:02 +0000
Manifest next update:     Tue 13 May 2025 02:12:02 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: Zjv31pN+95bdbjlwWW1kDHObPM1m+/1pNqREYjuOhvM=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: May 11 02:12:02 2025 GMT
            Not After : May 13 02:12:02 2025 GMT
        Subject: CN=68200772-b99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:59:bb:5b:79:c4:c4:5f:b0:d3:24:8a:34:
                    8f:00:04:ae:4f:8f:08:5a:72:62:95:5c:02:64:f7:
                    19:4f:08:5c:f0:b0:6f:88:a1:e9:21:c2:43:e4:bd:
                    8e:33:a0:c1:cd:f9:a0:da:43:f6:1e:51:0c:54:c1:
                    83:fb:61:52:6c:22:ec:da:d9:8f:b2:e6:34:74:c7:
                    9f:b9:ae:40:9e:50:c7:34:d7:9c:18:93:79:38:1b:
                    6a:d0:e1:c3:cc:58:f7:8c:f2:be:fb:88:a5:7a:89:
                    cb:91:c5:d2:04:64:69:ab:28:c1:65:dc:e1:3b:7f:
                    a4:55:a1:08:6a:f1:39:64:5b:6b:e2:2e:d8:26:87:
                    76:12:75:53:1c:54:30:ec:ad:7d:10:e5:28:b9:35:
                    2e:f8:c9:83:60:3b:7d:fa:aa:e1:8b:97:12:75:bb:
                    fa:98:52:91:53:56:ad:bc:02:48:cc:eb:8c:ff:c0:
                    d0:64:3e:48:b2:33:dc:d2:a2:f1:3d:d6:3a:88:e4:
                    86:4b:e5:e6:fb:8a:a7:12:59:65:6e:54:a3:ad:88:
                    5f:4c:cb:be:68:de:d5:99:d8:ee:f7:e0:08:d4:95:
                    cd:1d:78:8d:34:2b:6d:c6:b0:fb:26:b7:a3:c7:88:
                    4e:26:72:09:21:17:c9:3c:5f:bf:2b:9c:d9:23:23:
                    98:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D8:2B:9A:A9:68:F3:52:32:B0:48:63:D9:3A:F5:49:9A:72:38:C8
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:16:28:fc:a8:81:00:7e:f5:7d:bb:6f:70:81:4e:8e:30:6f:
         b5:e0:0c:cc:da:eb:63:4f:84:c3:67:a9:df:4d:87:48:04:65:
         eb:9e:46:1f:ab:38:12:2e:55:1c:e4:d2:18:b3:1c:2a:81:de:
         9b:96:9c:82:7f:a7:17:ef:3c:54:a4:37:af:b1:6c:b2:b9:cb:
         dd:20:27:f8:a8:cd:98:f7:47:5f:68:e6:93:64:ec:6c:18:ef:
         22:c7:45:49:cc:89:3a:08:b1:3a:5a:cd:0d:32:19:c0:ee:c0:
         9e:1a:4d:3a:9e:3c:96:51:cf:3a:6f:ee:00:8d:3e:a7:a2:36:
         2f:1e:49:42:14:fc:69:d4:34:1d:9e:59:33:fe:b9:12:e8:07:
         8b:db:7f:5b:19:ff:8e:c6:9b:c1:c3:a0:9e:d8:83:cb:a0:36:
         62:e2:39:58:70:7b:2d:60:b5:9d:4c:54:3e:d8:30:89:5b:c5:
         52:fa:5b:2b:fc:4d:00:5c:77:fc:32:d3:e5:61:ae:b9:35:b4:
         eb:dd:d0:36:e8:97:ad:b0:2a:dd:33:98:7f:12:98:2d:e7:44:
         0d:a2:37:40:19:e8:70:47:12:64:9c:e3:ac:cb:9e:f8:8d:1f:
         20:f9:90:c1:54:e8:18:20:32:55:44:01:6b:c2:28:48:d2:89:
         c8:b3:6a:6d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUVBRjExMC8GA1UEBRMoNzA3QTFGMjg2QUUyOTg2REY2NDkxMEMzMDM0RTUx
ODlBN0MyMTZERDAeFw0yNTA1MTEwMjEyMDJaFw0yNTA1MTMwMjEyMDJaMBgxFjAU
BgNVBAMTDTY4MjAwNzcyLWI5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSHVm7W3nExF+w0ySKNI8ABK5PjwhacmKVXAJk9xlPCFzwsG+IoekhwkPk
vY4zoMHN+aDaQ/YeUQxUwYP7YVJsIuza2Y+y5jR0x5+5rkCeUMc015wYk3k4G2rQ
4cPMWPeM8r77iKV6icuRxdIEZGmrKMFl3OE7f6RVoQhq8TlkW2viLtgmh3YSdVMc
VDDsrX0Q5Si5NS74yYNgO336quGLlxJ1u/qYUpFTVq28AkjM64z/wNBkPkiyM9zS
ovE91jqI5IZL5eb7iqcSWWVuVKOtiF9My75o3tWZ2O734AjUlc0deI00K23GsPsm
t6PHiE4mcgkhF8k8X78rnNkjI5ivAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUK9gr
mqlo81IysEhj2Tr1SZpyOMgwHwYDVR0jBBgwFoAUcHofKGrimG32SRDDA05RiafC
Ft0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFFL0Y3MUU3NjU0OTcwNDExRUJCOTM2MzczMEY4QUVBMjI4L2NIb2ZL
R3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NIb2ZLR3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhB
RUEyMjgvY0hvZktHcmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEFij8qIEAfvV9u29wgU6OMG+14AzM
2utjT4TDZ6nfTYdIBGXrnkYfqzgSLlUc5NIYsxwqgd6blpyCf6cX7zxUpDevsWyy
ucvdICf4qM2Y90dfaOaTZOxsGO8ix0VJzIk6CLE6Ws0NMhnA7sCeGk06njyWUc86
b+4AjT6nojYvHklCFPxp1DQdnlkz/rkS6AeL239bGf+OxpvBw6Ce2IPLoDZi4jlY
cHstYLWdTFQ+2DCJW8VS+lsr/E0AXHf8MtPlYa65NbTr3dA26JetsCrdM5h/Epgt
50QNojdAGehwRxJknOOsy574jR8g+ZDBVOgYIDJVRAFrwihI0onIs2pt
-----END CERTIFICATE-----
Generated at Sun May 11 16:59:49 2025 by rpki-client