Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          B+e7eWno0TBr2Whc+kJz0+IERVRhLBXh3BLecrYpQak=
Subject key identifier:   3A:F8:73:B3:0C:69:E6:99:75:37:74:4C:19:3A:10:FF:6A:4D:DB:84
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       0136
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          0134
Signing time:             Sun 11 May 2025 04:42:02 +0000
Manifest this update:     Sun 11 May 2025 04:42:01 +0000
Manifest next update:     Tue 13 May 2025 04:42:01 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: GKFp//E5kUZDvFtqlS/w1R+f0Jwqo4z07PCaW7XyNqg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: May 11 04:42:01 2025 GMT
            Not After : May 13 04:42:01 2025 GMT
        Subject: CN=68202a9a-d6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e5:56:3c:eb:5d:63:7f:0e:eb:78:0f:d9:3b:
                    c3:0f:ca:4b:6b:09:f9:94:1e:1e:7e:78:6e:5f:bd:
                    15:ee:f8:9e:fd:23:f2:83:18:7b:80:f4:c8:47:4a:
                    80:55:0a:b8:a4:fb:2c:af:c0:fa:19:a5:b0:fb:bb:
                    6e:6c:a7:80:3f:a5:b9:cf:67:8f:60:3d:fa:5b:78:
                    d6:9b:29:1f:83:17:ce:ec:ab:7b:a5:19:33:81:74:
                    3a:44:76:b7:d0:1f:df:32:3a:d4:62:c6:79:28:e6:
                    49:1d:d9:56:eb:2e:e2:de:5e:63:88:7d:a9:75:1f:
                    bb:91:5c:24:1f:95:f1:62:92:83:05:49:e3:45:c0:
                    2d:2c:3e:1f:83:b2:84:74:45:cf:cd:c3:8f:ee:55:
                    92:45:ef:a9:5c:39:54:fc:66:af:cf:99:4f:13:62:
                    8b:4c:4c:1b:25:4e:90:fe:29:7f:e7:b7:bd:cc:89:
                    0c:3f:34:25:ec:d6:0d:a3:d3:b5:11:e8:9f:e2:df:
                    53:b7:38:25:6d:70:e3:67:be:e8:15:48:7c:39:2d:
                    9a:bc:4c:c4:5b:be:43:b2:ba:aa:d6:27:45:f8:47:
                    d8:e6:b7:33:b5:02:1f:94:40:e9:26:11:87:63:0f:
                    74:7f:cd:c3:f0:2e:47:f5:e0:8b:c2:d9:5e:35:ee:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F8:73:B3:0C:69:E6:99:75:37:74:4C:19:3A:10:FF:6A:4D:DB:84
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:96:ed:a2:51:51:be:ce:17:3c:48:e1:dd:34:71:09:55:6c:
         2b:ec:97:fb:69:04:e9:21:b7:17:95:0e:ed:b3:fb:c0:1a:42:
         75:f3:4a:31:07:37:05:96:91:1f:c3:1f:fe:25:e1:d1:f3:eb:
         16:44:c2:22:56:74:3c:51:da:fa:16:f1:e9:7e:89:97:1c:e3:
         18:d9:1c:94:69:b5:27:a6:d7:44:42:0b:9a:7d:c8:55:20:e9:
         57:50:68:f1:4a:40:65:50:c8:84:0f:74:12:7f:91:69:e0:71:
         32:97:8c:d8:3f:a0:bc:b8:4a:79:9f:5c:97:e5:6f:2f:3b:96:
         dc:0a:6c:48:56:90:8e:06:60:cb:33:f8:ff:58:69:9f:02:e7:
         cb:88:1a:50:9a:ed:f7:b4:c9:93:c0:92:65:35:44:10:28:54:
         75:90:3a:e7:ac:fd:7f:06:cb:93:c5:99:e1:5e:af:5a:6d:15:
         90:d0:0a:e7:5f:92:40:c8:ab:b4:19:f9:1c:31:f7:b5:4c:a3:
         72:9f:d3:6b:5e:7e:fd:64:7a:ec:b3:cb:bb:10:bc:f8:43:a8:
         54:45:08:dc:d3:33:1e:df:53:0e:e3:85:09:c7:ce:b6:d2:7e:
         30:cb:05:49:0b:3c:ee:28:4e:ac:62:47:e6:0e:49:3e:87:ba:
         4f:f7:f4:93
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTBGNjVBRjExMC8GA1UEBRMoQzBDMEU3MTk5Q0I4NDBBMjQ5OEMxRTNCQTU2NzZG
OUUwQzA2Mjg2ODAeFw0yNTA1MTEwNDQyMDFaFw0yNTA1MTMwNDQyMDFaMBgxFjAU
BgNVBAMTDTY4MjAyYTlhLWQ2ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDv5VY8611jfw7reA/ZO8MPyktrCfmUHh5+eG5fvRXu+J79I/KDGHuA9MhH
SoBVCrik+yyvwPoZpbD7u25sp4A/pbnPZ49gPfpbeNabKR+DF87sq3ulGTOBdDpE
drfQH98yOtRixnko5kkd2VbrLuLeXmOIfal1H7uRXCQflfFikoMFSeNFwC0sPh+D
soR0Rc/Nw4/uVZJF76lcOVT8Zq/PmU8TYotMTBslTpD+KX/nt73MiQw/NCXs1g2j
07UR6J/i31O3OCVtcONnvugVSHw5LZq8TMRbvkOyuqrWJ0X4R9jmtzO1Ah+UQOkm
EYdjD3R/zcPwLkf14IvC2V417jxJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOvhz
swxp5pl1N3RMGToQ/2pN24QwHwYDVR0jBBgwFoAUwMDnGZy4QKJJjB47pWdvngwG
KGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwRjY1L0Y0M0M4NjNBNDk4MzExRUZBMkY0NUZCNDc2MkU5NTFBL3dNRG5H
Wnk0UUtKSmpCNDdwV2R2bmd3R0tHZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dNRG5HWnk0UUtKSmpCNDdwV2R2bmd3R0tHZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTBGNjUvRjQzQzg2M0E0OTgzMTFFRkEyRjQ1RkI0NzYy
RTk1MUEvd01EbkdaeTRRS0pKakI0N3BXZHZuZ3dHS0dnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVlu2iUVG+zhc8SOHdNHEJVWwr7Jf7
aQTpIbcXlQ7ts/vAGkJ180oxBzcFlpEfwx/+JeHR8+sWRMIiVnQ8Udr6FvHpfomX
HOMY2RyUabUnptdEQguafchVIOlXUGjxSkBlUMiED3QSf5Fp4HEyl4zYP6C8uEp5
n1yX5W8vO5bcCmxIVpCOBmDLM/j/WGmfAufLiBpQmu33tMmTwJJlNUQQKFR1kDrn
rP1/BsuTxZnhXq9abRWQ0ArnX5JAyKu0GfkcMfe1TKNyn9NrXn79ZHrss8u7ELz4
Q6hURQjc0zMe31MO44UJx8620n4wywVJCzzuKE6sYkfmDkk+h7pP9/ST
-----END CERTIFICATE-----
Generated at Sun May 11 07:18:00 2025 by rpki-client